Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: c0764UGVTlGM0QYWl8163mpZHiIj1S79J/eyxMOViJw=
Subject key identifier: 87:0F:1D:6B:91:06:CD:D7:EA:03:CC:39:DA:E1:4B:91:D7:E8:99:84
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019EC0A42EF04F438B174D130208133264E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 11:00:45 +0000
Manifest this update: Sat 13 Jun 2026 11:00:45 +0000
Manifest next update: Sun 14 Jun 2026 11:00:45 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: NHBEkxabWDlObqgpK1q/6Rr6Far+rbgvWAOI7QDhhGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2e:f0:4f:43:8b:17:4d:13:02:08:13:32:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jun 13 11:00:45 2026 GMT
Not After : Jun 14 11:00:45 2026 GMT
Subject: CN=870f1d6b9106cdd7ea03cc39dae14b91d7e89984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:cc:41:15:8a:a5:eb:cf:0f:0b:0a:18:78:
9e:af:31:c8:b6:49:67:0a:9c:52:51:39:57:74:4b:
da:a4:86:e0:1b:8c:24:72:81:7e:6c:a2:fd:d1:9b:
f0:70:94:63:18:e5:76:0f:d6:90:70:75:84:14:dd:
1c:f0:c8:3f:f4:a9:6a:45:a0:d6:f7:cf:6e:0b:fe:
75:b6:67:37:6f:92:01:c3:d4:76:27:93:7e:03:b9:
8e:7f:86:97:87:24:12:4e:3d:f7:bc:a8:cc:e5:9e:
eb:9e:8c:32:f4:d6:d4:35:6b:5c:88:53:80:59:76:
c5:74:1b:d2:c9:e0:06:8a:74:8d:69:3c:37:8c:ba:
77:96:28:dc:73:73:db:d2:1a:27:48:1f:49:0e:02:
6f:67:04:00:85:cb:eb:3c:54:b1:70:99:00:4d:ac:
30:1c:0b:94:0b:93:cd:75:fe:eb:fc:98:5c:4a:68:
55:8c:ce:b7:6c:15:e2:1f:e6:89:b4:b7:94:9c:12:
14:b7:c9:34:f4:06:3a:b3:38:45:53:09:3c:00:24:
da:6a:5b:99:31:d0:c9:91:b6:2d:63:77:55:ec:31:
a6:d5:4c:68:d8:3b:bd:f2:0f:51:b4:8b:58:e5:b5:
7a:48:cc:6a:6b:81:67:84:60:3e:b6:dd:29:86:3c:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:1D:6B:91:06:CD:D7:EA:03:CC:39:DA:E1:4B:91:D7:E8:99:84
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:45:77:b6:a3:46:33:3d:75:3b:f0:8b:b0:9d:ad:d2:6e:35:
13:f4:2f:12:06:08:f8:ae:27:e1:39:02:dd:2b:4a:cc:11:a8:
08:2c:bc:42:74:94:b7:ef:3f:60:4a:6e:61:6e:30:1c:8d:5e:
71:61:d2:66:a5:f5:07:17:6c:91:ca:07:a6:6a:d5:83:f5:55:
5c:12:5b:6f:93:23:59:75:2b:d0:03:5b:9e:bd:7c:a4:3d:d1:
ad:b3:c6:f3:64:46:fd:d1:10:18:da:2c:17:3c:d5:41:e8:86:
3a:01:55:5f:3c:39:a0:b7:d9:8e:66:cc:79:ad:7a:f8:3d:b4:
67:2c:ee:0d:8d:49:01:c8:d9:f1:68:7d:e5:b8:c5:31:e3:21:
f9:15:7c:5e:e8:37:58:0b:cc:c7:5f:55:ed:1c:f6:65:98:2c:
6b:6e:d1:2a:1c:d6:59:b5:33:a8:96:dd:a3:fa:9e:8e:a9:00:
e8:67:c1:0b:99:90:06:a2:ba:5e:fa:8c:09:0d:06:82:ce:d4:
e4:95:f1:3c:de:95:aa:f8:1d:a6:53:7c:d6:63:cb:11:fd:04:
a9:c8:f8:35:49:19:c1:d6:d8:5d:fe:20:04:2e:f4:14:b6:ad:
4d:67:aa:30:7a:46:6c:fd:d1:fc:84:5d:ba:0c:ec:83:bd:8e:
69:16:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:25:52 2026 by rpki-client