Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: 46qyQ4/QKudvgqevI0HOj77JkyMqrL3NJwUAnPM5mn0=
Subject key identifier: 20:C7:40:51:B2:E7:40:20:FA:5D:6F:E9:FF:8C:3E:42:51:C8:CC:B3
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 019CAAFD5118105840BF8DB133647968DCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1523
Signing time: Sun 01 Mar 2026 20:00:53 +0000
Manifest this update: Sun 01 Mar 2026 20:00:53 +0000
Manifest next update: Mon 02 Mar 2026 20:00:53 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: nCFMd+ORhki2dAjPmki3uh43cLsEe/d2YSXIfarQs/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:51:18:10:58:40:bf:8d:b1:33:64:79:68:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Mar 1 20:00:53 2026 GMT
Not After : Mar 2 20:00:53 2026 GMT
Subject: CN=20c74051b2e74020fa5d6fe9ff8c3e4251c8ccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:30:ab:56:a4:ff:d9:3f:3f:b0:c9:ab:b9:
87:fd:63:be:f3:31:d4:e9:43:89:23:54:04:8e:cf:
c6:a4:00:0f:1d:12:d1:3a:ef:41:71:3b:ac:a0:c2:
5c:fc:62:f0:81:81:10:79:38:80:57:64:d8:62:a7:
14:53:d6:83:4b:50:36:98:55:c9:6b:a5:ba:95:3b:
08:17:a8:3f:e9:ca:08:62:b5:a8:1f:32:54:2d:bf:
2e:bc:5a:5c:50:59:77:e7:43:3b:18:2b:4f:03:85:
da:58:9b:84:2f:4d:87:0d:92:80:d1:e9:da:bf:9b:
50:cf:14:6b:88:bc:c3:84:e5:b5:22:c0:e6:ad:4d:
f5:35:f4:83:6a:72:a3:27:4e:3a:0c:de:57:3f:65:
16:22:6c:f9:c3:16:3c:12:88:7f:25:e8:5c:ac:02:
58:f1:56:26:83:ad:11:b2:1b:b9:df:ea:27:4a:9a:
d2:e3:3c:b0:7f:d7:5e:e2:fa:52:16:f9:cc:a1:47:
62:f0:3a:8d:74:02:cd:01:90:f2:5e:d0:7a:2b:f5:
22:57:c8:48:20:51:50:57:66:38:74:8d:76:0e:bb:
43:e4:49:ab:8c:68:a6:53:66:f1:a2:3d:cc:b5:8b:
c1:11:07:6a:36:b7:86:52:98:9a:8f:55:1d:44:27:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C7:40:51:B2:E7:40:20:FA:5D:6F:E9:FF:8C:3E:42:51:C8:CC:B3
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f1:ab:6a:65:74:56:29:2d:67:90:63:c5:87:7b:be:1f:5f:
4e:b0:41:d5:83:85:9e:a8:d1:60:93:ab:03:24:fd:e8:16:cd:
81:29:ac:15:90:ac:7a:17:b3:b4:22:1d:fb:f1:47:02:b9:8f:
0e:09:3f:32:e1:eb:38:4c:67:4b:e0:ac:b7:9d:fa:f9:ac:4a:
0b:7f:0d:f1:dd:0e:51:40:a5:fe:c8:4b:a2:ec:23:09:6b:0f:
26:44:f9:f0:62:e0:c3:b7:3e:11:a5:0a:86:f2:45:55:79:a2:
4f:2c:6c:f4:a3:d5:5e:66:38:28:28:46:6b:51:08:45:7d:ef:
7c:fe:8b:ee:d7:56:f3:c3:da:ab:2c:4d:ac:39:df:8c:5b:08:
11:ba:ac:80:f4:ee:cd:58:51:87:30:d7:e8:0a:04:90:c2:5e:
80:76:c2:08:c3:e0:ec:73:ab:93:c5:96:33:f8:c4:0b:3c:c3:
21:de:54:92:3e:60:89:e8:96:91:98:0e:aa:78:e6:dc:d0:b9:
3d:7b:77:4d:90:fd:30:4f:e9:0f:10:ed:42:98:cf:b8:7e:f4:
1c:d5:47:30:d9:27:2c:f4:0e:dc:e3:1a:c1:5e:75:14:10:b1:
c2:15:fb:72:69:4e:2e:e4:78:a1:10:70:10:0f:6d:a3:d6:25:
b6:f7:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:28 2026 by rpki-client