Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: Mrz3f56m0FY7YUsyVbdWQphJvsruuOJ//8bHdOVrsRA=
Subject key identifier: 82:E3:23:E4:33:6B:8F:CD:C3:9B:79:1A:43:F9:EF:63:4C:C0:6C:BB
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019FAC08EEC1E5B0784BB81F34D86D26958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 14AB
Signing time: Wed 29 Jul 2026 04:01:34 +0000
Manifest this update: Wed 29 Jul 2026 04:01:34 +0000
Manifest next update: Thu 30 Jul 2026 04:01:34 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: K29+m89OlK2/CDXpzul6TpjvLh3Ld+893OMkEaUATZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:ee:c1:e5:b0:78:4b:b8:1f:34:d8:6d:26:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jul 29 04:01:34 2026 GMT
Not After : Jul 30 04:01:34 2026 GMT
Subject: CN=82e323e4336b8fcdc39b791a43f9ef634cc06cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:49:cf:e3:30:01:39:01:a6:c1:e4:5a:50:
4f:c9:e6:81:d8:ae:f9:95:b2:31:26:62:66:ed:1c:
3d:de:43:a1:19:df:34:91:07:79:5e:36:bf:20:a7:
3c:ab:34:99:aa:4a:5d:97:e1:67:1a:46:52:9a:1f:
3e:85:af:70:fa:cf:b4:2b:db:6e:cb:41:02:b6:55:
c9:e6:99:29:b3:23:17:97:c7:07:aa:d4:a2:40:4e:
19:bd:19:41:50:fe:89:af:03:f4:ea:82:ad:c5:64:
69:8c:36:78:58:3d:10:75:5c:ee:b0:b0:aa:9f:83:
89:56:f0:47:cf:43:b4:22:ce:e7:29:cc:e4:96:29:
5d:54:ac:c5:50:9f:11:7e:3d:a2:de:db:fd:7f:d5:
c3:74:48:93:cf:cf:a4:27:61:d9:2b:da:92:74:39:
84:4a:27:49:f7:0b:a9:6f:d5:04:1f:42:81:0d:9f:
34:7f:ce:fe:b8:ea:74:fe:4c:1c:f6:54:9a:eb:be:
5d:65:bd:54:be:01:a9:32:80:c6:ec:59:f3:6e:b5:
81:47:04:c7:97:d1:fd:9a:47:21:09:f0:0b:74:c0:
70:92:1b:b9:e1:eb:63:66:71:00:52:42:af:c8:84:
af:fd:b0:2f:9d:d6:38:b3:be:a9:55:ea:e4:f4:a6:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E3:23:E4:33:6B:8F:CD:C3:9B:79:1A:43:F9:EF:63:4C:C0:6C:BB
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d5:3a:31:82:d2:ec:2d:ca:db:87:2e:7e:81:b0:73:0d:bd:
d6:dd:82:63:36:08:28:a2:23:0a:ef:87:c8:2d:57:17:3a:95:
94:e0:f0:16:9a:03:30:41:29:46:a2:03:1d:0a:d1:0f:d2:bf:
da:67:d9:32:68:c5:94:a3:0a:4a:1c:da:cd:63:12:14:bc:aa:
92:98:ea:d5:f6:64:b6:04:c6:c2:5f:7c:c3:93:3d:26:f0:09:
c8:02:42:d0:64:78:94:50:5c:44:1c:5b:7d:ad:dd:a8:b5:97:
e6:84:de:3a:a4:1c:aa:01:73:11:3f:36:0e:a2:1d:60:4f:d4:
ab:24:dd:c4:15:cb:c3:f5:87:5e:c0:2a:7e:24:a3:50:ad:c4:
c0:c8:85:b9:d3:51:3d:9b:e7:b5:27:e9:3f:41:02:ad:ed:e8:
98:7b:59:1a:07:bd:74:ec:c6:1b:f1:6c:c9:e0:9f:8a:27:f2:
a0:45:f3:f6:1f:d9:17:b0:ea:58:4b:64:35:16:82:99:e5:9f:
49:93:c3:2b:c6:55:00:71:42:80:25:eb:f2:27:69:85:a2:f0:
47:6e:c0:0c:69:99:35:4d:8e:3f:8d:cd:aa:27:fe:57:5b:bf:
74:3b:99:07:20:75:ef:d0:11:78:8d:bf:12:18:30:8b:a0:ea:
97:34:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:24 2026 by rpki-client