Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: vvIn7cUvDpzuAoPir0Nd3BIi/7Ai7ZnQB8EvOkM4DQg=
Subject key identifier: FD:00:7D:2B:D2:AB:43:51:8D:FA:C5:61:20:42:08:DB:20:6C:2F:03
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 019D9C2C8EED4EED6C7375EB3B94ABF59F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: FA
Signing time: Fri 17 Apr 2026 16:00:58 +0000
Manifest this update: Fri 17 Apr 2026 16:00:58 +0000
Manifest next update: Sat 18 Apr 2026 16:00:58 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 7ae6GfaVx3ncS8h/H52Zi8Yhmh76ebHmincLNa/3U2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8e:ed:4e:ed:6c:73:75:eb:3b:94:ab:f5:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: Apr 17 16:00:58 2026 GMT
Not After : Apr 18 16:00:58 2026 GMT
Subject: CN=fd007d2bd2ab43518dfac561204208db206c2f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:8c:93:44:a8:6b:0e:01:5e:77:9b:b7:22:
be:5f:e1:7c:77:d8:bf:b3:9e:dc:7b:e5:9f:4d:47:
05:86:7b:3f:67:5b:c8:cc:af:f7:ce:4e:6a:17:50:
7a:ae:fd:f1:22:6b:b7:ad:57:ba:b9:5d:9c:40:24:
e5:48:a5:e7:7a:6f:5f:c8:00:3a:c7:bd:42:a1:db:
ef:aa:d5:ba:73:37:52:a8:c3:fa:95:77:5c:b1:c3:
2e:52:ef:eb:df:dc:75:fd:b2:c3:c1:3d:a5:ab:db:
3d:88:f5:a7:7b:fb:71:03:86:3b:66:06:8c:67:ff:
fc:a6:30:dd:cc:40:3d:e3:cc:91:58:49:bd:9b:32:
75:d7:91:9b:6f:2d:63:a6:09:3f:3d:c0:ac:ef:fb:
19:17:e7:e0:50:ea:cf:5c:9d:47:d9:9c:15:93:28:
94:5d:27:89:0b:6c:96:08:64:61:99:0b:63:38:d7:
1d:ad:8a:38:6a:2d:9a:34:c9:30:ce:bb:d5:df:a9:
34:fe:77:74:a4:4c:d9:95:fa:be:48:8d:35:1d:e1:
64:16:67:d7:d1:d6:62:32:54:65:4b:a1:bc:f2:86:
0d:f2:ae:fa:f0:84:03:d4:5a:5d:62:a2:86:b7:b1:
bd:77:2f:d4:05:a5:57:4d:b2:5a:62:c5:cc:38:a9:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:7D:2B:D2:AB:43:51:8D:FA:C5:61:20:42:08:DB:20:6C:2F:03
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:fb:ca:cb:6f:9b:51:29:3a:65:6b:d8:cc:6e:b1:7d:f0:
52:79:85:47:15:89:e2:6c:1b:1b:37:bb:c0:fa:2c:bd:b1:0f:
4c:91:0d:0d:75:f2:71:f1:ce:0b:aa:2b:45:a1:44:f0:ad:62:
44:52:8a:8c:e3:6d:25:12:f0:17:0b:99:93:6b:f5:3a:5a:8e:
9d:11:9c:3d:28:52:df:89:39:eb:82:f1:15:54:67:98:b4:23:
7b:b3:d6:8d:de:94:45:b3:e5:1e:61:38:c2:58:db:7e:59:b9:
ef:db:66:82:ff:5d:0d:9c:a0:cf:24:ef:56:0f:b1:ad:95:d6:
87:22:c7:6c:92:00:3c:dd:31:f9:85:eb:3b:0c:e5:13:06:d6:
4c:07:dd:67:99:51:ee:96:4d:4e:4c:bf:79:7d:bf:75:91:74:
b2:a5:d0:67:80:fc:cd:3a:5a:d0:1b:42:16:1a:18:18:fe:0e:
08:75:a0:66:ff:56:1c:a3:57:5f:4d:7d:d5:67:25:f5:16:a6:
5a:56:31:75:d2:45:61:f6:43:d6:0a:91:f5:55:6a:bf:09:6a:
08:c6:5b:00:29:79:78:4f:bc:76:79:dd:b9:00:8e:2c:f2:69:
85:50:e3:87:f3:59:bd:f2:6b:62:ae:ca:a2:d7:c7:c2:a1:44:
89:8e:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:00:56 2026 by rpki-client