Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: 1AFrAAxIAbfDT99boqey9cdjUZTFJVcVr883nn4wC44=
Subject key identifier: E3:98:89:45:22:63:09:DC:A4:15:0E:83:22:F2:64:28:BC:47:84:45
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 019CAA8F72EC59BFDD2E381C727FC41F1AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 18:00:53 +0000
Manifest this update: Sun 01 Mar 2026 18:00:53 +0000
Manifest next update: Mon 02 Mar 2026 18:00:53 +0000
Files and hashes: 1: ny9j0kdOILJWp2147BBuq8zAUi4.roa (hash: R/3Kz0+7hhy0EpV+pM7qwZ7FqiiZAGr/HoDJvTKAiaU=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: D5z8D0WjF5mLTUzRiqywfnVvw5HSx8+haqN69TqrpS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:72:ec:59:bf:dd:2e:38:1c:72:7f:c4:1f:1a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Mar 1 18:00:53 2026 GMT
Not After : Mar 2 18:00:53 2026 GMT
Subject: CN=e3988945226309dca4150e8322f26428bc478445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:6b:8d:f3:d3:9b:77:a4:42:90:92:27:09:
b1:59:da:d9:0a:81:d1:ca:9c:cd:76:f1:14:ec:4e:
8f:50:4f:56:dd:26:f9:c9:13:1a:3f:9a:fe:12:9e:
ad:e6:79:d7:38:b7:95:7b:8f:09:b7:07:5b:98:d2:
f2:ad:e3:bd:b9:62:47:f3:76:4e:25:91:f9:80:2b:
e8:a0:c0:ee:48:6b:f9:d3:57:e4:21:18:f8:3f:e5:
4b:bc:56:91:83:87:24:03:b1:3a:2c:9b:f7:3b:8b:
17:5d:0d:22:3e:2d:7b:da:4c:bd:67:0d:97:1f:93:
45:ba:5d:f7:3a:da:5e:d7:7e:8e:6a:72:b5:7f:e0:
e9:a3:92:38:6b:5d:42:6c:5d:96:62:39:74:b4:25:
08:6b:3f:ae:d1:70:68:b8:6d:10:22:bb:8b:c4:a5:
36:8e:1f:16:1f:4a:f3:28:79:01:90:03:44:08:32:
d3:7e:5c:5c:2b:11:a9:77:68:65:0d:9d:7f:3c:08:
2a:3e:44:bd:5a:17:28:5d:cf:f0:b3:5a:f1:08:4c:
7f:b3:48:2b:ee:05:d2:b4:10:2c:ca:2f:7a:1d:32:
6c:66:d0:fd:9c:06:0d:ab:5f:2c:27:f9:23:84:00:
ea:40:35:e8:02:20:71:6e:3d:78:97:b2:d0:8a:58:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:98:89:45:22:63:09:DC:A4:15:0E:83:22:F2:64:28:BC:47:84:45
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4b:94:ab:24:c9:47:22:31:77:dd:ec:bb:d8:5a:30:cc:44:
f9:55:67:44:de:00:2b:fe:39:de:58:89:6c:e3:3a:db:76:ea:
c4:dd:53:92:c4:89:45:87:42:1e:27:11:11:39:6e:b0:8e:fd:
60:df:49:03:a8:84:d1:80:6d:e4:56:e8:b5:52:e7:dd:9c:ab:
37:b4:d3:f0:7c:b1:bf:a0:68:18:4d:1b:e5:07:a9:5f:53:40:
23:08:88:22:27:40:fd:89:13:42:bb:e2:1f:90:51:ae:8f:1f:
b5:86:a8:2a:23:43:68:a7:5b:d6:63:e5:86:b3:46:ca:b0:3d:
0f:8e:5b:c9:9e:7f:0d:9a:ea:42:5b:39:a1:a7:12:ff:c4:6b:
3b:f6:cc:3c:a4:8f:6b:27:08:f1:21:22:2c:99:37:e8:4e:95:
50:e8:b3:a7:65:88:df:7c:6d:af:76:5b:25:ca:53:b5:fd:25:
9b:2b:d4:cf:7a:18:ac:a9:28:25:8b:5e:ff:e6:2f:85:02:b9:
1e:c5:49:22:14:f6:bc:81:43:0f:40:bc:a3:ee:fd:00:34:e7:
b6:48:e9:81:9e:3b:1f:04:39:2d:b8:25:4e:78:aa:8a:ec:03:
6f:0a:7b:58:e0:e8:62:0c:4d:d4:83:ef:58:83:34:cc:0a:ba:
95:87:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:11 2026 by rpki-client