Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: ii3Yze+J53d3GHHmz0zmUR8TKqswSe7SZv3q/CAVPhI=
Subject key identifier: 00:39:BA:B2:4C:82:C9:05:53:C8:E3:5F:F6:37:E4:DF:1E:A7:5C:8B
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019CAAFD6EBB31CA995D193E2F89091B87AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0E62
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: 1bnnzBA5xmKa/RzpZ+lu726rjRS3X8Umm9ebauW/uTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6e:bb:31:ca:99:5d:19:3e:2f:89:09:1b:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=0039bab24c82c90553c8e35ff637e4df1ea75c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:8f:63:73:73:d6:07:c2:ec:72:26:eb:ad:
99:05:6b:1a:05:26:2c:0a:62:67:30:72:4d:e0:c3:
83:98:83:b2:28:29:b6:75:02:6c:43:78:51:34:b2:
ef:7b:4a:3a:dd:91:9d:d2:38:a2:3e:52:52:ba:b6:
7a:0f:1c:97:8b:30:ee:b9:14:63:e4:18:39:b7:79:
1b:93:5c:72:2a:77:d5:f0:53:52:e0:41:74:c1:39:
79:9d:16:42:15:41:05:36:7c:5e:c1:cd:68:4a:6a:
df:6a:65:76:b7:eb:c9:ba:c9:65:7f:0e:91:62:6d:
fe:c4:62:98:81:cb:63:d9:60:d3:1d:ff:13:90:72:
d6:19:fe:ef:60:36:4a:e2:17:21:2e:ca:6e:23:ef:
20:a3:8f:91:40:9d:1b:db:5c:0e:70:70:b9:c1:2b:
b1:cd:f7:dc:e9:63:90:40:03:de:1a:5f:3b:b5:de:
29:16:a8:f7:b5:cb:db:e2:60:f2:0d:bf:83:95:fd:
17:52:2c:53:88:9f:1f:b0:30:b9:9e:d9:e9:dd:de:
85:95:f0:3a:7e:ec:bf:26:48:48:dc:ae:af:d1:08:
16:59:ec:88:d5:0c:19:64:8f:b6:60:da:4a:a5:2c:
52:27:98:4b:de:36:a2:60:ae:06:85:1f:1e:2e:e2:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:BA:B2:4C:82:C9:05:53:C8:E3:5F:F6:37:E4:DF:1E:A7:5C:8B
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:9b:d6:b6:84:7f:48:cb:50:17:cd:49:d9:a5:88:3c:a1:
a2:e5:2d:72:d5:58:04:1d:22:c4:1b:36:68:c6:d6:82:13:5a:
f5:24:8c:53:b7:eb:d6:07:81:83:4e:75:a9:19:9a:33:c2:0a:
07:dd:3d:56:ab:67:d4:a6:a5:43:dd:a6:8b:6d:28:0b:fc:46:
92:ed:b8:c3:38:3a:a2:08:43:bd:5c:97:6e:07:6c:3e:00:74:
e0:5a:c2:93:99:5c:d4:dc:47:90:5c:f5:c5:e6:2c:28:68:49:
64:ef:27:4a:fc:0e:ff:08:2a:9d:c0:7a:0b:35:d6:b1:09:a6:
aa:88:51:fd:38:85:bb:ae:b4:68:a3:72:2c:2b:0f:f2:54:e3:
3c:68:9d:76:ac:54:c2:a3:46:43:31:13:08:f4:70:fb:63:7b:
e2:2a:7a:e6:d7:57:96:02:2b:43:0e:0d:cf:51:ed:39:38:33:
4e:80:de:f9:97:d3:07:10:b4:e7:fa:2f:80:43:9d:7b:48:c0:
c4:3f:8d:98:a9:12:ee:11:69:19:35:36:af:29:63:bd:a0:47:
a9:8a:ab:e8:6a:52:4a:f0:cd:8e:61:e4:db:46:d9:ce:50:5b:
dd:d6:8f:16:c0:e0:6c:e9:a9:5d:16:38:f5:05:37:95:67:ae:
1f:48:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:31 2026 by rpki-client