Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: Ecm/LXh8hu2B7YFPJ1F+1AuuLWJU+m+ERMgvpaKD4MU=
Subject key identifier: 66:D1:9F:34:FB:AC:84:1C:0D:EB:24:7D:69:13:70:EB:3F:BD:96:E8
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019EC25C7E870993EF153C39371DAEBA3002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 1432
Signing time: Sat 13 Jun 2026 19:01:41 +0000
Manifest this update: Sat 13 Jun 2026 19:01:41 +0000
Manifest next update: Sun 14 Jun 2026 19:01:41 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: eomCGa/dqw4xoHxZY42/sGusG6alWRjTuf+u2BYTPIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:7e:87:09:93:ef:15:3c:39:37:1d:ae:ba:30:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jun 13 19:01:41 2026 GMT
Not After : Jun 14 19:01:41 2026 GMT
Subject: CN=66d19f34fbac841c0deb247d691370eb3fbd96e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:f1:8e:5a:ac:f8:c8:4d:cf:1f:e1:d9:d3:
3d:c9:f3:ff:68:ce:b9:52:2d:a0:3a:6a:97:50:7f:
b2:68:12:fa:98:12:48:26:68:5b:34:37:f5:08:27:
14:aa:4d:7c:6c:e9:be:51:a2:e5:0b:12:76:49:df:
2e:31:63:52:1c:8b:5c:82:3d:42:7b:5f:0e:78:5d:
51:a1:e3:60:d4:dc:d0:20:0e:57:ce:4e:52:2c:78:
a3:87:79:7b:ec:54:90:63:ac:29:e8:a1:e1:d7:f3:
ec:eb:06:82:cb:8e:fc:35:40:b8:02:ff:40:13:08:
7f:c1:b7:08:b5:7f:e3:23:47:75:2f:28:59:6a:26:
b6:d1:67:89:5f:0e:eb:9c:32:99:4f:dc:d8:46:e2:
92:bc:00:df:12:80:f6:b7:9b:ce:0f:06:c1:ff:63:
f3:49:0e:23:cf:91:c8:44:35:43:c4:ac:ac:86:52:
26:03:57:a2:e2:21:a5:55:d3:40:7a:df:c6:1b:54:
83:93:90:0e:d4:76:90:8c:8f:f1:ea:12:36:80:7c:
09:d3:8b:28:4e:c4:47:21:6b:d4:54:d6:39:0e:51:
cd:b6:9e:6c:af:73:a9:4a:c0:c3:0b:3f:24:ed:82:
ea:0a:17:30:06:af:a7:89:a6:4e:ff:6c:4a:84:de:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:9F:34:FB:AC:84:1C:0D:EB:24:7D:69:13:70:EB:3F:BD:96:E8
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:86:2b:b9:fa:a8:fd:59:5e:59:bd:99:d0:51:0b:9d:95:95:
17:21:f5:9c:86:a4:f8:ef:a7:f2:2d:98:2c:59:af:f7:d3:60:
c1:42:e1:b1:e7:51:44:92:a0:60:7c:0e:57:48:d6:16:38:c9:
b4:a1:86:4c:7c:93:77:7a:d7:ab:8c:7f:91:f6:e6:e7:52:1c:
38:aa:40:6f:c6:6e:63:28:a9:cb:df:a2:bd:c2:b3:62:7c:79:
12:f1:2d:a1:45:6b:20:ef:76:5c:dc:ca:2e:b8:88:1d:72:7a:
ce:35:bf:c1:9f:ba:11:23:4f:44:aa:f4:0c:d1:36:e0:8a:48:
71:e4:92:ef:be:44:cb:6f:1d:37:f6:1f:00:3d:16:9e:5e:a9:
c4:36:19:9d:e2:dd:4c:0d:d5:2a:d9:c5:9f:e2:5c:be:c8:78:
c9:4a:9c:19:cc:77:9d:55:58:5c:16:d8:02:47:05:07:db:3d:
0d:0a:33:30:e6:eb:bf:e3:00:b2:f4:a9:78:64:83:0d:f9:84:
c6:c9:24:44:f2:90:db:ad:ce:08:0d:33:9a:af:bf:e5:fc:1d:
2e:17:b8:74:a6:94:72:3d:f3:de:f5:42:69:62:42:1d:30:84:
7e:e4:79:af:0d:97:08:be:98:43:af:5b:f3:f8:13:bd:43:98:
0b:94:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:01 2026 by rpki-client