Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: Q3Fy1pvU7vauVE3fRABN816Uke9ajGqoQZiREExovGs=
Subject key identifier: 20:79:F5:C7:93:04:E8:53:43:56:A7:E0:DC:BC:53:E3:5C:BA:F4:E9
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019CAD22493D7AE8DF0B424DD6791F9920BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0CE8
Signing time: Mon 02 Mar 2026 06:00:31 +0000
Manifest this update: Mon 02 Mar 2026 06:00:31 +0000
Manifest next update: Tue 03 Mar 2026 06:00:31 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: bGewEm3ayQeJexDknPxT0E+P0ZyL6vIHpHd7gy9UV4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:49:3d:7a:e8:df:0b:42:4d:d6:79:1f:99:20:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Mar 2 06:00:31 2026 GMT
Not After : Mar 3 06:00:31 2026 GMT
Subject: CN=2079f5c79304e8534356a7e0dcbc53e35cbaf4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:eb:11:4b:e2:b1:79:b7:f8:84:3c:8a:1c:
fc:59:98:88:3d:25:f5:9b:85:81:8a:f0:7f:9b:43:
e2:4f:43:8f:d3:e2:2c:20:8b:e8:ac:c6:cd:74:5c:
c2:40:a4:05:42:ad:32:a5:67:1c:28:0a:cc:9d:a5:
b1:60:80:29:5d:ea:25:03:c1:45:df:14:b5:72:1a:
5d:cc:01:30:2f:b9:6a:b0:3c:f5:b9:2c:99:a5:2d:
c4:f0:ed:9f:33:bf:ae:20:33:fe:bc:30:04:b7:d5:
4d:7b:d0:52:02:e3:1b:80:08:e4:09:6f:11:9b:42:
7d:a0:f5:46:db:41:d5:2b:f3:e7:71:5b:a1:1e:37:
2e:a2:ab:69:9a:47:6a:0f:5f:12:d1:fb:9c:62:67:
ab:90:6a:d3:e2:d5:83:70:22:c6:0c:5e:87:05:d0:
82:2b:a8:9a:26:d7:7b:5b:50:8e:95:be:c4:7b:9f:
e4:d7:e4:c8:83:f0:84:db:55:10:6a:0f:a1:0e:70:
26:82:9f:11:16:ea:fe:0a:8e:6e:f1:d8:5a:61:78:
6c:65:bf:a3:ec:13:0e:5e:33:a7:81:ad:ff:8c:62:
fb:6f:4c:e8:36:37:31:c3:3c:02:12:ef:3c:18:6f:
d4:cf:13:e7:d1:f2:06:46:af:d9:d6:6d:02:a5:a2:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:F5:C7:93:04:E8:53:43:56:A7:E0:DC:BC:53:E3:5C:BA:F4:E9
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:9c:cc:6a:89:c5:0a:f7:c9:4f:be:86:ff:bf:f2:c0:fb:
62:5a:4c:41:56:32:7f:13:9c:00:5b:33:b9:c7:ba:23:b2:34:
7d:6e:0a:43:ae:ca:f0:65:e4:33:81:e2:72:10:27:53:1c:bf:
31:f9:9d:df:7f:9e:7f:0d:ba:26:28:86:aa:f5:d8:06:16:b2:
37:fd:c2:89:b2:6b:0f:18:7e:3c:33:59:1f:51:11:d7:78:ff:
56:94:06:1d:91:9d:94:e9:22:25:5c:f6:ab:ca:3b:b9:3d:2d:
16:c8:b5:a6:25:41:2e:b0:f5:66:bc:de:83:df:89:92:21:00:
3b:13:8b:8d:cc:a0:4a:57:1f:a3:2f:da:63:2f:9b:da:0c:46:
62:81:8f:29:34:5c:61:de:ea:aa:98:3a:3f:12:08:5e:ad:e4:
ce:bb:44:4b:cc:56:c8:53:ba:c1:07:03:8f:85:ad:59:e3:5d:
0c:63:22:49:b8:bb:05:65:7d:9c:64:4d:4b:e5:03:90:80:bf:
ce:98:f4:a1:b8:43:81:4d:4e:df:8d:8d:bd:6c:46:e7:93:8e:
62:0e:33:2a:bb:64:60:82:d3:39:78:c9:e0:26:0e:83:19:3c:
d3:20:f6:69:70:7f:6f:ac:67:98:8d:7b:cc:43:85:3d:39:39:
ac:8b:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:40 2026 by rpki-client