
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: Rn+jltmXxfNZ27FkkWNwl4TKXaDvBWodS/qFlBJBZuc=
Subject key identifier: FF:91:41:0E:C0:FB:0A:6F:55:52:B0:1F:CB:83:42:77:71:98:E5:0B
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 019CABA21A264F1EF4C43E29ACCF2F77F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 076A
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: 06mRNlOSaGSq/526GXoqwif6drI5NmIkbiMP9wI4Zy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1a:26:4f:1e:f4:c4:3e:29:ac:cf:2f:77:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=ff91410ec0fb0a6f5552b01fcb8342777198e50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:1b:67:97:17:d8:8e:3a:50:55:e7:02:94:
45:01:da:2d:dd:f8:da:86:6d:d0:df:40:ca:7d:23:
34:f5:ac:27:2e:9a:a2:60:19:a8:5c:3e:85:6a:bb:
39:28:df:7b:c3:28:4b:c8:f4:b7:3a:b9:cc:a1:18:
94:8e:e8:e8:fd:7c:c4:65:dd:52:c8:ac:f0:b0:12:
d4:b3:1d:50:87:90:5c:48:b5:04:77:0e:e7:c2:a6:
93:ec:2d:58:9d:2d:21:47:e7:1b:d1:24:12:7c:4f:
f3:4f:85:96:ed:a0:74:d1:ef:c5:d5:82:ef:a6:a0:
0e:5a:fb:fd:a9:95:5e:d3:30:cb:7e:3d:7e:ec:e5:
38:f3:9b:cc:04:89:ea:ea:df:74:c2:3e:bf:21:b5:
fb:87:e5:16:18:e4:74:16:34:cb:94:7e:6c:91:7c:
fb:cb:69:0f:e7:d4:19:ce:db:6b:63:98:1f:34:48:
6a:5b:3e:45:49:02:9c:b0:76:0e:e1:56:ec:62:fe:
c7:77:96:e4:a8:8e:4b:24:71:ab:f3:6a:0f:d6:fd:
ed:90:fc:f8:68:15:a4:88:e8:36:bc:fb:ad:12:a5:
99:44:0f:04:c4:6e:9c:6a:ea:fe:a4:e3:7e:50:9e:
83:21:27:d2:0a:5c:77:0c:f6:3f:0b:2e:5f:a3:d0:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:41:0E:C0:FB:0A:6F:55:52:B0:1F:CB:83:42:77:71:98:E5:0B
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:65:d9:1a:b9:93:d7:27:c8:ac:53:36:03:18:9f:7d:ee:
68:3a:6e:23:1a:91:e3:94:c4:10:a3:cd:16:9d:63:86:44:2c:
02:c8:b2:a7:b0:ee:3a:03:f1:4e:6a:45:97:d6:79:b4:af:0b:
a1:ff:c7:45:d0:f9:20:83:c4:b0:f4:25:a6:9f:2a:16:2c:1c:
46:6e:7d:86:46:7d:53:c4:12:c4:96:19:7c:aa:16:a3:26:aa:
7f:cf:e1:22:93:1e:36:53:5d:27:9c:fa:50:35:d1:09:ec:30:
2f:11:52:31:62:3b:58:32:52:b2:30:60:7f:78:b8:cc:9e:21:
b0:5f:7a:37:38:2f:85:0d:70:80:8f:32:b0:d7:79:36:55:e1:
15:76:02:7c:a0:13:2a:5a:c9:8c:ed:05:7a:ec:dd:df:b0:7f:
fb:d9:ec:80:11:91:8d:69:3c:d4:15:8c:58:75:08:c8:c8:68:
30:84:54:76:c6:83:9c:e1:01:81:2a:d4:85:b3:5c:0b:c2:5c:
a5:29:64:54:18:5f:6d:91:a8:03:1a:6a:cb:d6:ec:05:dd:65:
79:e2:79:ed:14:ff:5a:48:e9:98:06:8b:9a:f2:b5:74:6e:1c:
19:74:41:dc:0a:94:b4:c8:94:d7:5e:87:d9:f3:7c:7a:54:9c:
88:25:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:20 2026 by rpki-client