Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: LNwXNKyqWJwCgZGx+kWEY9krbRdmCbC2U/wqctIb2SY=
Subject key identifier: C2:0B:90:07:C3:AF:B0:DF:2F:2F:4B:22:C8:0C:C5:3C:24:67:D9:80
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 019CA9B3BB475160A6BBB0100348D739E814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 123F
Signing time: Sun 01 Mar 2026 14:00:53 +0000
Manifest this update: Sun 01 Mar 2026 14:00:53 +0000
Manifest next update: Mon 02 Mar 2026 14:00:53 +0000
Files and hashes: 1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: le3rhNcL17r5bdTVuJq+BPYGYt7lWIfvq/L0l1nikIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:bb:47:51:60:a6:bb:b0:10:03:48:d7:39:e8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Mar 1 14:00:53 2026 GMT
Not After : Mar 2 14:00:53 2026 GMT
Subject: CN=c20b9007c3afb0df2f2f4b22c80cc53c2467d980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:34:b9:c6:c1:fa:7b:f6:30:e1:f3:69:7e:
37:ff:2a:f4:c1:d3:86:15:72:46:d3:b4:30:29:5e:
58:f1:51:69:ef:13:c0:e5:b4:8f:5b:62:85:1b:a4:
30:5d:87:d5:35:f2:a3:87:d8:3e:c4:bd:d3:0e:63:
a5:03:3a:d6:33:01:97:2e:e7:38:d2:71:7c:7e:63:
58:93:c3:43:98:c7:ce:3a:a5:a3:84:d8:53:d1:12:
69:bb:3c:61:69:5e:a3:40:77:3f:9d:59:0b:ab:c0:
8c:12:60:5f:3d:19:be:77:04:fe:7f:6f:6d:8f:ce:
77:d6:2c:be:2f:52:15:a0:e5:95:14:6c:c6:9c:7a:
f9:3b:49:04:3b:b2:6a:7d:a6:1d:10:a3:5f:72:b2:
38:59:52:31:f9:62:11:22:03:b7:1f:4f:f3:43:7e:
7c:99:bb:81:22:fc:f0:3b:7d:c5:72:ed:8e:34:5f:
42:c7:c8:4e:e4:67:a2:b1:b1:73:41:32:cc:bb:99:
a5:9d:34:d7:8b:32:66:45:18:74:f9:d7:40:7a:ae:
af:54:7c:eb:4a:3e:47:63:af:36:57:b6:f6:d5:14:
1a:69:7f:d1:98:4e:10:fc:45:32:69:1e:82:56:5a:
c6:f4:e4:09:40:a3:d2:ad:f9:0c:34:41:c7:dd:0d:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:90:07:C3:AF:B0:DF:2F:2F:4B:22:C8:0C:C5:3C:24:67:D9:80
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:d6:74:f7:cd:1e:b0:13:49:75:16:28:ea:aa:d2:ef:ba:
fe:b0:40:af:21:31:7a:48:12:6c:f3:06:e6:35:03:f1:cd:5e:
4c:16:cd:9e:41:ce:33:33:78:ed:31:20:c3:14:a1:2e:d3:2a:
79:56:ec:84:58:9f:57:7a:33:0c:8b:4b:c9:5a:af:b4:37:e9:
ff:65:dc:04:30:74:43:e7:a9:4b:84:5c:9d:19:f6:1b:7a:f8:
08:f8:50:39:73:6f:68:f2:05:74:8e:e0:7b:33:d8:e9:5b:bd:
87:46:a7:84:67:91:07:c7:93:70:0b:81:0d:f0:82:c3:bf:bf:
19:d7:42:ec:c6:d5:82:c1:07:d9:6a:0e:71:76:d7:14:e9:7e:
cc:9e:89:62:21:32:d7:21:7a:1f:82:10:e4:bc:74:68:da:6e:
29:a1:65:50:b5:72:dd:9c:2e:da:3c:61:cd:c5:3b:a6:06:96:
51:67:99:62:58:2c:a9:c0:86:29:36:f0:f4:c1:e7:f9:1b:fc:
d2:b0:e5:c7:67:9e:e6:d1:85:38:20:1d:46:bb:30:1f:17:22:
5b:ba:86:23:11:69:6d:ca:e9:10:53:ad:f7:8b:15:35:0a:80:
3a:26:02:b1:d5:03:f6:8c:c7:55:78:c1:f5:74:17:6a:07:48:
1a:ab:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:40 2026 by rpki-client