Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier: 4Z9olg6ihLrGp2gpG9u9oDlCcsVCBiHNAg2YMfcM78A=
Subject key identifier: 6F:E8:7C:21:03:85:EF:4F:65:54:B6:33:50:E0:1C:9A:7B:20:C6:4A
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial: 019CAF4891F340B36A30491068476E427699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number: 0239
Signing time: Mon 02 Mar 2026 16:01:34 +0000
Manifest this update: Mon 02 Mar 2026 16:01:34 +0000
Manifest next update: Tue 03 Mar 2026 16:01:34 +0000
Files and hashes: 1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=)
2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: o+azm4ri+43dBW1szaf90xndMTgyQAy5e5biyM1J1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:91:f3:40:b3:6a:30:49:10:68:47:6e:42:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Validity
Not Before: Mar 2 16:01:34 2026 GMT
Not After : Mar 3 16:01:34 2026 GMT
Subject: CN=6fe87c210385ef4f6554b63350e01c9a7b20c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:91:fd:09:e9:5b:c5:14:97:dd:b7:28:08:
f3:d4:f3:3c:d3:2a:cc:51:79:78:93:5b:0c:92:56:
3f:64:cb:5d:6c:d5:5f:f0:1a:63:ae:41:f0:c2:bf:
17:1a:2e:fb:88:0d:3a:21:61:30:67:26:db:b7:b2:
81:b6:cc:03:ef:e1:9c:14:51:54:5c:85:af:c8:e4:
9e:8b:f0:ca:f0:85:88:c7:44:2e:59:31:dc:02:11:
a9:39:e8:a0:62:02:fe:cb:02:f6:5d:33:f1:fe:0a:
89:9a:45:a0:21:7d:7f:50:8d:ae:80:9a:27:99:29:
7a:7a:cc:df:ae:78:d5:f4:8f:3f:62:07:d1:38:8c:
32:9d:f9:be:96:cc:c2:ff:10:09:33:77:dc:41:5c:
95:cf:39:28:0e:48:75:11:f5:7e:59:e3:67:ce:40:
fd:0b:4f:32:65:12:4d:e4:24:06:1e:43:ac:8f:1c:
25:c4:2e:d8:bf:e5:25:bc:a8:e5:0e:82:3f:de:e9:
85:1d:53:2f:9a:e2:52:9b:14:81:22:93:3e:64:65:
72:ce:8b:ad:ab:4c:d3:3f:2e:1b:2b:42:b8:e0:fa:
74:21:17:3f:10:c8:3b:e7:46:0f:74:19:ed:b4:b9:
2a:f8:33:1f:8d:e1:7b:d9:03:a9:9a:03:6a:92:09:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:7C:21:03:85:EF:4F:65:54:B6:33:50:E0:1C:9A:7B:20:C6:4A
X509v3 Authority Key Identifier:
keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ac:4a:7f:c3:0e:08:f6:f8:3d:74:70:88:23:d5:ad:7a:7b:
e2:6d:11:1c:e8:c6:b9:a6:8c:7a:4e:3d:6e:98:49:19:b6:e2:
4f:a1:50:07:cc:9b:a8:17:75:85:f2:f1:8d:cf:4e:32:f0:5b:
8b:6c:55:63:63:06:e1:1f:59:fb:f1:81:c4:70:37:c4:56:8a:
c9:c8:e6:a3:97:6a:3d:81:3b:34:f0:fb:86:6f:24:ed:cd:28:
e3:a9:3a:3a:32:ae:d1:99:48:62:d6:b9:13:6f:6a:d7:8b:e1:
70:77:d5:4b:70:73:3b:42:59:18:e3:bc:5b:87:4b:5d:72:06:
6a:23:66:b7:03:ed:0f:54:9b:1d:5c:c2:23:3a:1a:08:2b:d4:
5a:89:d5:92:49:bc:6d:17:81:34:d0:35:5b:45:90:bd:a1:3e:
70:25:ff:5c:dc:fa:1a:f1:da:e7:12:28:fa:27:08:6e:3a:d4:
6d:c1:a8:67:4d:9d:2a:0a:38:0f:53:80:ba:6d:70:04:0f:c0:
98:3d:75:d9:d3:ab:56:27:83:34:9b:4c:22:7a:38:18:87:2a:
bb:26:8a:1e:1c:46:77:01:1f:1e:b9:53:55:6e:8d:fb:ac:c0:
2c:e1:cd:78:39:99:e7:e9:31:6d:8c:65:b3:f9:c2:66:a7:85:
86:c0:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:33 2026 by rpki-client