Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: ATDGkzJiAEt+Ov9dWfNOUaVm+mHbfzHQRZl07/gAI9U=
Subject key identifier: 8A:AF:C8:59:13:9D:4E:3D:4B:77:C3:44:97:50:8E:30:A0:2F:07:64
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019EC2250CB6B2DAB19158EB53D7C7B46DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0DFC
Signing time: Sat 13 Jun 2026 18:01:08 +0000
Manifest this update: Sat 13 Jun 2026 18:01:08 +0000
Manifest next update: Sun 14 Jun 2026 18:01:08 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: 8qqtiDTP3p8/kfHWRvU4iZLo+BCtF1SOXQcVIl8nppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:25:0c:b6:b2:da:b1:91:58:eb:53:d7:c7:b4:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jun 13 18:01:08 2026 GMT
Not After : Jun 14 18:01:08 2026 GMT
Subject: CN=8aafc859139d4e3d4b77c34497508e30a02f0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:1f:38:a5:bb:36:8a:03:b4:ac:93:54:ff:
d0:a7:76:ef:cc:13:72:7d:2a:fb:99:e9:60:9f:4d:
9b:80:7b:fc:0c:bc:b1:63:bf:af:c0:06:2f:2a:9d:
49:d7:e1:0a:72:a0:89:d9:45:cc:90:ba:10:31:6c:
7a:61:a8:fd:43:13:15:26:a9:03:fa:19:b6:d7:5c:
cc:65:5e:7f:29:5e:80:18:d6:2e:f5:cf:4d:34:91:
c5:63:f0:43:08:ab:ef:4a:48:ff:df:b7:d3:d1:9b:
ef:70:ec:be:cf:9b:df:56:4b:e0:57:e8:8a:ca:d0:
f3:9c:24:c9:c3:58:8b:75:32:36:3b:a7:ec:93:b6:
68:1a:b4:70:8d:d6:f8:90:c4:ce:14:1b:8f:28:1a:
a9:a4:00:3e:2e:05:8c:62:74:1a:6a:cb:9d:5c:30:
4a:bb:93:d2:51:84:34:9c:c5:92:25:98:da:cc:d5:
85:dc:c7:61:33:25:52:7c:39:0f:4f:d1:78:ac:7b:
86:6f:e8:b3:eb:72:fc:59:79:9a:9c:f0:b5:72:d5:
a5:f9:07:a2:be:e3:10:5e:9f:6e:34:43:f3:5f:86:
2d:1c:49:d9:f7:3e:74:c0:0a:60:24:85:e5:5e:ee:
8b:0f:6f:9a:68:10:36:f1:da:8e:15:a0:44:ec:db:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:C8:59:13:9D:4E:3D:4B:77:C3:44:97:50:8E:30:A0:2F:07:64
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:40:d8:7b:56:80:b9:4f:5a:d0:7f:9e:3e:ff:9e:db:53:
ab:b5:75:63:56:74:6b:90:c3:94:b8:a3:e4:1a:b5:0b:ee:e2:
c3:16:61:b5:3d:58:89:e6:a8:18:aa:b5:5a:03:45:5e:77:ab:
1c:dc:70:3a:76:7e:df:19:c5:c3:76:4b:aa:02:94:46:bc:da:
42:15:90:f1:f7:d5:fc:4d:a8:b2:15:e2:28:33:0f:0f:93:b1:
37:ab:40:f1:07:26:85:3f:07:d5:d5:d3:50:d0:5f:d3:5e:fe:
d1:97:64:ef:95:39:75:74:25:11:f4:b1:10:e9:47:a3:f8:35:
3a:a7:bf:0c:58:80:df:b2:93:5f:f8:69:02:ab:62:35:1f:1f:
d8:b1:54:17:63:0a:14:e0:6d:d0:a8:60:00:9e:f1:5b:3d:37:
bc:dc:4b:25:6e:36:8b:53:88:69:1c:fe:2b:1a:88:6a:7f:cd:
42:7e:3c:3c:cf:ca:b5:f9:61:36:25:c3:59:95:9e:19:1f:2e:
c3:ca:b5:67:5a:c1:2a:b6:16:70:eb:c7:a8:da:0f:aa:17:b8:
12:25:20:37:e4:b9:27:01:73:65:38:92:68:1d:74:48:07:03:
38:8f:a4:81:85:1f:41:07:f3:9f:8d:fe:af:3a:89:34:cf:7d:
a6:cf:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:05 2026 by rpki-client