Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: Hut3s/wvScy+iTuIWjg1DbyvzQJLM4ZA/D0QWevMmpg=
Subject key identifier: 3F:84:FC:28:4D:09:E3:5E:D7:36:3F:91:DE:F3:23:0C:19:06:4F:57
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01A0DB3B39B8CAD7C215121E0E19AECC1F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 1548
Signing time: Sat 26 Sep 2026 01:01:26 +0000
Manifest this update: Sat 26 Sep 2026 01:01:26 +0000
Manifest next update: Sun 27 Sep 2026 01:01:26 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: ljoPgOcfB+iHoml7gIC4Ab5GfzjEkDhzFXKbSyCAcf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:39:b8:ca:d7:c2:15:12:1e:0e:19:ae:cc:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Sep 26 01:01:26 2026 GMT
Not After : Sep 27 01:01:26 2026 GMT
Subject: CN=3f84fc284d09e35ed7363f91def3230c19064f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:db:01:8b:92:5d:98:84:d1:34:e7:ee:aa:
f4:f1:7c:43:a9:99:02:62:57:58:95:c5:90:60:42:
2d:9a:20:56:b4:25:b1:94:50:51:ce:e3:a7:80:37:
56:99:fd:50:40:e6:13:92:41:94:6d:bc:5e:03:30:
98:97:1d:58:24:98:da:21:89:9a:b4:45:5c:39:7f:
79:cd:a1:e1:4a:c6:c9:a6:15:d1:fb:b6:5d:d5:35:
53:a0:1c:18:39:d0:9e:13:71:29:23:2f:a9:3a:00:
47:18:b1:96:fc:89:99:7d:69:76:57:9f:0b:be:c1:
56:1e:f1:b5:f3:3f:31:69:4f:d4:6e:b3:b0:94:9a:
3d:3b:23:a3:1b:e4:f3:8a:54:22:24:91:c6:49:aa:
de:61:c4:33:84:a0:d1:e8:8c:d4:85:a2:93:f5:b8:
ef:2b:c1:6e:72:dc:36:99:64:cd:c4:23:21:1b:fd:
cf:9c:d9:30:90:7a:76:40:46:5b:b7:03:ac:ea:21:
9b:b9:77:a2:d3:ee:95:d7:2e:bf:63:df:de:d6:9e:
4f:57:36:59:00:be:e9:ee:86:57:6c:c9:4d:c2:19:
b1:a1:9f:1c:87:5b:90:5f:14:bc:38:05:a3:8b:8b:
54:da:5b:bc:e1:ac:c6:36:11:9f:da:f8:23:7d:b5:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:FC:28:4D:09:E3:5E:D7:36:3F:91:DE:F3:23:0C:19:06:4F:57
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:fc:dd:3e:1c:96:02:a7:2c:89:b7:df:2d:3b:07:22:45:
e3:61:7a:8d:e9:e1:3f:19:97:63:75:d9:cf:2d:2d:1a:b1:24:
16:3c:20:d4:98:50:a7:e0:a2:4d:28:06:b1:12:2a:02:bb:c3:
ce:1e:05:70:19:9d:50:60:70:91:32:93:4c:e0:66:84:1e:80:
56:f8:bb:8c:71:ef:06:86:a1:7f:ae:80:9a:e1:a2:ed:12:e6:
7c:c3:fa:70:c4:16:fb:f8:63:ce:a8:fa:d3:3e:c0:5b:9a:55:
be:b6:d9:33:97:bf:75:25:8d:9d:87:63:f9:fd:f1:29:b7:cb:
4e:55:b9:ab:ed:9e:4e:86:44:c4:1b:15:47:80:c2:02:86:cf:
6d:68:a8:52:bd:ae:f1:30:2a:86:91:28:a1:55:22:3a:3f:3a:
f5:52:d2:50:c0:95:48:b3:9b:05:8c:96:62:aa:44:67:08:77:
38:03:58:e5:d4:fc:6a:eb:bd:84:23:f7:5e:69:54:cb:9c:88:
99:3e:c0:29:af:4a:18:40:24:b4:f6:cd:3a:c4:7e:97:e2:4e:
f1:99:89:a5:1f:25:0a:1e:92:26:60:e0:53:51:70:11:e6:8e:
06:3c:f9:3a:f5:1f:67:5f:97:ea:0d:2d:9b:ac:3b:f8:e8:a3:
71:2c:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:49:26 2026 by rpki-client