Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: pWomT2S1idpPQmoGB53zt7x6sWSMzJu/hgqK04n+TFY=
Subject key identifier: 3E:47:9F:72:D1:E6:94:75:E5:24:B5:76:1D:81:0C:08:33:39:B3:8A
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 019CAC7DBDA097B75555D5541CB8C66C20C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0B79
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: uIo95toyzTsPJRhnwDkZJwBSVlU.roa (hash: H/MmcUvrGoaPLtgLMTpLeQaEN4NDpxo/KSd9m/v1Q2I=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: ge2LStFYOk3jWeHg6nod1YXDgvKeAzprnpN44JivxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:bd:a0:97:b7:55:55:d5:54:1c:b8:c6:6c:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=3e479f72d1e69475e524b5761d810c083339b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:26:19:0d:10:1a:1f:65:88:9a:d1:18:94:
a9:e2:34:5f:af:d3:b3:6e:6a:89:61:e3:a2:a3:61:
fa:e7:73:a7:d7:d6:bd:87:69:b5:2e:fd:4e:ef:07:
7a:35:86:8c:77:f5:b5:70:b2:65:d6:f7:fb:28:c8:
82:c5:70:68:8f:14:38:89:01:24:f5:51:35:d4:df:
dc:a0:43:f3:4c:c5:8a:cc:94:c2:19:9e:f9:d5:f5:
c8:bb:43:24:ba:f4:bb:3b:73:f5:aa:a7:83:57:96:
a3:07:79:ee:df:42:b2:ce:78:20:43:1a:94:e9:56:
11:b5:e8:a5:ed:18:b4:00:08:13:3d:cb:9f:89:fe:
f6:3d:81:bd:0f:42:bf:77:6e:92:b6:ff:5b:45:82:
8e:22:fd:2b:87:d2:7a:c5:b8:b1:67:2e:7b:4b:e9:
1e:25:53:b5:ab:48:8c:a2:54:8c:b5:df:43:3b:51:
9f:58:ba:16:ae:15:1f:9d:9d:24:1b:0c:a5:79:18:
9a:02:36:49:40:ea:b7:16:b3:83:9f:03:0a:e6:5a:
a2:47:57:42:e5:1d:0e:72:ae:12:c2:27:fa:01:fa:
1a:1e:64:d3:a1:58:38:58:9d:14:51:15:88:c3:3c:
4f:eb:b6:1f:8c:b8:27:1e:66:6d:20:b1:c7:ba:24:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:9F:72:D1:E6:94:75:E5:24:B5:76:1D:81:0C:08:33:39:B3:8A
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d1:b3:ac:c1:b9:c1:0d:a2:cf:39:94:2e:65:4b:68:6c:a7:
bb:5d:f8:03:41:ea:ee:47:75:db:cc:1d:f8:d7:b7:08:3d:6a:
58:78:45:a2:3e:ac:24:8f:ae:f6:23:96:75:fb:4a:5c:55:0e:
05:01:93:82:8d:22:b7:a2:12:b7:11:5b:03:8d:dd:7f:2e:9a:
e3:a9:bc:97:3d:fa:cd:35:70:43:39:84:74:15:a7:54:61:15:
7b:1e:bc:fb:e3:5c:6d:d8:27:bd:e1:3a:d7:ef:ad:06:2f:2a:
bb:2e:be:2d:67:77:3d:04:bf:f6:4c:a3:89:22:3c:7f:6f:64:
9d:3d:82:64:9b:7f:d5:47:21:bc:45:ea:6e:a1:fd:fb:81:cf:
32:cf:51:b7:42:38:42:89:d1:bd:fa:8e:13:bb:80:13:1e:ac:
39:3c:67:a0:0b:e2:80:e8:93:14:49:b8:8b:f7:81:25:4e:28:
39:a6:f4:a0:86:5c:ff:b5:0d:04:b4:9f:45:18:bf:c5:d2:b4:
3e:3a:35:96:13:e3:e8:82:bb:09:aa:b1:07:5f:d7:fa:b0:a3:
a0:37:c6:04:6b:5e:56:1b:85:76:3e:66:96:e5:e4:36:a5:75:
ff:08:60:f7:3c:2f:e5:a8:07:61:f3:4f:5f:6c:42:19:c7:dc:
60:ae:85:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:02 2026 by rpki-client