Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: oneGny90kXgYdGy/TOD6l2HBjAzTv2A/ReL0IrA5uJ8=
Subject key identifier: 43:0D:70:A1:60:C0:DB:5B:50:19:BE:0E:78:DB:A8:85:99:9D:EB:65
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 019CA8D8AEBDF2EF31ACAE59A06FB1B716ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: 7C
Signing time: Sun 01 Mar 2026 10:01:38 +0000
Manifest this update: Sun 01 Mar 2026 10:01:38 +0000
Manifest next update: Mon 02 Mar 2026 10:01:38 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: PykVQLqnZL6A4GH+Yue4rW3HRrsEqidvPkA4n2ejTRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:ae:bd:f2:ef:31:ac:ae:59:a0:6f:b1:b7:16:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: Mar 1 10:01:38 2026 GMT
Not After : Mar 2 10:01:38 2026 GMT
Subject: CN=430d70a160c0db5b5019be0e78dba885999deb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:3b:75:05:fa:53:e2:dc:70:f7:8e:b4:c1:
08:9a:23:3d:45:a7:f0:08:af:e7:4a:4f:7f:fe:c2:
8c:36:af:85:a8:8f:1a:57:0c:5b:b0:da:df:63:49:
81:12:50:2b:87:3c:1e:a1:fb:36:79:3e:ea:85:e1:
3b:8e:4b:24:62:45:3e:da:ca:7c:21:03:00:cc:92:
72:9a:5a:91:ea:66:5d:6d:1d:f9:b8:97:21:c5:8b:
fb:ae:13:c3:6a:07:c4:c2:5d:2f:50:a7:ee:b3:b4:
4a:3d:69:0f:f1:73:62:c7:fb:16:92:3f:61:80:54:
54:36:87:ca:7d:a5:9b:0e:7d:0c:55:cb:aa:66:2b:
51:44:c7:e8:7d:3c:92:45:6e:f9:7d:8c:c7:d3:1b:
b6:74:38:57:78:d7:64:f6:27:b4:95:fb:ee:0e:63:
07:a6:0a:7a:6d:47:e2:67:1e:b2:d9:7c:27:68:dc:
2f:6c:f8:bc:a8:97:1d:bd:1a:5b:05:19:6d:d2:da:
9c:1c:f8:93:85:a5:33:33:74:96:18:03:5f:ba:35:
c2:07:9b:39:03:3c:f0:b4:6f:a5:12:b5:c0:ca:72:
f3:b5:78:03:d8:df:38:1d:1d:60:7d:c9:aa:bd:bc:
f6:2f:45:aa:af:e0:24:36:d8:92:ae:b8:02:0b:2c:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:70:A1:60:C0:DB:5B:50:19:BE:0E:78:DB:A8:85:99:9D:EB:65
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:23:a8:01:64:4b:f4:f6:f8:fd:3c:79:a2:41:1c:1b:0e:
44:03:a1:21:fb:e4:48:26:3d:e2:6a:88:c4:a2:88:91:a5:f7:
4f:04:48:43:9a:fc:29:45:3b:7b:99:33:a5:9a:52:e2:2e:22:
4f:80:f1:82:26:be:73:a9:36:0c:f1:2c:a6:94:b8:9e:1b:a0:
c3:9c:09:e6:51:e3:95:60:3c:b7:cf:a3:54:b8:39:82:6a:d2:
95:ae:dc:5d:76:8e:01:6e:5c:1c:a6:5c:e0:76:51:da:20:6f:
cc:81:9e:66:c8:80:16:08:d7:da:69:3f:47:dd:23:5a:2c:64:
21:79:83:da:27:73:90:9a:42:84:a8:4f:37:f3:ba:f8:42:1d:
93:35:d7:73:fd:31:3f:97:b4:bf:cc:41:8c:34:72:78:8d:72:
df:d9:8f:5b:ed:23:c4:14:a5:6f:cd:1b:d1:20:dc:4f:dd:58:
62:40:1b:eb:fa:d0:fb:af:23:a7:66:87:7e:aa:3c:58:57:35:
cc:4b:ee:2a:5c:8e:88:9a:e9:0d:0c:8b:94:d8:f2:c0:fc:0a:
df:39:28:35:b0:ab:c3:a8:a4:a2:e6:34:ad:79:90:4c:27:54:
3e:3f:db:16:0f:a6:05:30:2c:1f:25:f6:43:4b:4e:d1:2a:5e:
d6:07:ea:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2K698u8xrK5ZoG+xtxbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx
ZTFiOTMwHhcNMjYwMzAxMTAwMTM4WhcNMjYwMzAyMTAwMTM4WjAzMTEwLwYDVQQD
Eyg0MzBkNzBhMTYwYzBkYjViNTAxOWJlMGU3OGRiYTg4NTk5OWRlYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXE7dQX6U+LccPeOtMEImiM9Rafw
CK/nSk9//sKMNq+FqI8aVwxbsNrfY0mBElArhzweofs2eT7qheE7jkskYkU+2sp8
IQMAzJJymlqR6mZdbR35uJchxYv7rhPDagfEwl0vUKfus7RKPWkP8XNix/sWkj9h
gFRUNofKfaWbDn0MVcuqZitRRMfofTySRW75fYzH0xu2dDhXeNdk9ie0lfvuDmMH
pgp6bUfiZx6y2XwnaNwvbPi8qJcdvRpbBRlt0tqcHPiThaUzM3SWGANfujXCB5s5
AzzwtG+lErXAynLztXgD2N84HR1gfcmqvbz2L0Wqr+AkNtiSrrgCCyxgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMNcKFgwNtbUBm+DnjbqIWZnetlMB8GA1UdIwQY
MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt
ODljNWQ2ZDhkY2MwLzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw
LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvkjqAFk
S/T2+P08eaJBHBsORAOhIfvkSCY94mqIxKKIkaX3TwRIQ5r8KUU7e5kzpZpS4i4i
T4Dxgia+c6k2DPEsppS4nhugw5wJ5lHjlWA8t8+jVLg5gmrSla7cXXaOAW5cHKZc
4HZR2iBvzIGeZsiAFgjX2mk/R90jWixkIXmD2idzkJpChKhPN/O6+EIdkzXXc/0x
P5e0v8xBjDRyeI1y39mPW+0jxBSlb80b0SDcT91YYkAb6/rQ+68jp2aHfqo8WFc1
zEvuKlyOiJrpDQyLlNjywPwK3zkoNbCrw6ikouY0rXmQTCdUPj/bFg+mBTAsHyX2
Q0tO0Spe1gfqnw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:48 2026 by rpki-client