Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
File: u8y6drQ5_a39OU1vR37mgbwzgy8.mft (raw, json)
Hash identifier: 9A7m1kht+yWO1M3o+2QlnAcCT/sGll5jA1ntaurzZ6A=
Subject key identifier: CA:FA:78:37:78:EE:86:5D:A0:13:34:00:FD:07:9A:21:0F:E5:C2:1B
Authority key identifier: BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
Certificate issuer: /CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Certificate serial: 019CAFECB14DA40989D6D7E4D4D94CCF93B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
Manifest number: 48
Signing time: Mon 02 Mar 2026 19:00:50 +0000
Manifest this update: Mon 02 Mar 2026 19:00:50 +0000
Manifest next update: Tue 03 Mar 2026 19:00:50 +0000
Files and hashes: 1: jbPn_huaTii3UeZHQ_d9dvrziA4.roa (hash: WDTKgP7OatpD7hZS6aOF7SUbKrJNGnHp02sDeSf2/f4=)
2: u8y6drQ5_a39OU1vR37mgbwzgy8.crl (hash: ZGYHAd+P+Q6+TRuQgCsuYvl0Exb4FBmgnB044+bFw2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:b1:4d:a4:09:89:d6:d7:e4:d4:d9:4c:cf:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Validity
Not Before: Mar 2 19:00:50 2026 GMT
Not After : Mar 3 19:00:50 2026 GMT
Subject: CN=cafa783778ee865da0133400fd079a210fe5c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:0c:f3:d8:f3:f8:da:45:61:81:43:89:d1:
9a:93:b8:ea:d9:93:94:9c:3d:9c:15:bf:68:60:ca:
68:ee:2d:c5:c2:21:91:c0:ae:ef:db:df:22:4a:88:
f2:66:8b:97:8b:fe:d2:36:23:00:87:fc:0d:c1:49:
c1:ff:6f:60:59:b3:43:26:60:1a:fb:56:e7:f0:43:
64:7e:d9:22:6e:d2:c5:13:c0:9e:73:0f:48:7f:d8:
02:90:6f:5a:e2:6c:76:90:60:74:5a:1f:5d:ca:6f:
b3:70:bc:be:01:b3:c0:0f:92:32:1f:00:04:35:0d:
a0:0e:bb:69:12:ed:35:be:fc:82:0f:8e:85:13:b5:
60:09:1b:49:98:d7:b0:9c:6c:15:89:40:20:f8:f6:
08:39:6b:90:a6:c3:ff:66:fd:6a:54:1b:4b:fe:ff:
a8:20:b6:b1:44:39:de:fe:26:6b:d0:25:5e:08:73:
2c:0c:ba:0f:42:94:9e:ea:c3:ff:62:93:ae:5a:68:
70:f3:57:cd:cd:34:13:60:0b:c4:ed:84:81:fd:31:
6c:3c:70:7f:bb:c2:91:9a:86:40:14:e7:ee:c4:d6:
55:a9:15:48:74:b4:44:9b:69:f0:0c:55:87:38:30:
54:01:15:d1:b5:66:6a:72:bc:2b:88:72:3b:f1:45:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:78:37:78:EE:86:5D:A0:13:34:00:FD:07:9A:21:0F:E5:C2:1B
X509v3 Authority Key Identifier:
keyid:BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:54:04:91:09:f1:88:da:75:85:ce:30:ef:48:50:15:be:
8a:51:14:87:3e:8b:00:a5:63:a4:8d:4b:d6:94:15:3c:11:63:
9e:a6:fa:c4:c2:dc:26:a4:76:e4:d1:8e:4c:18:d9:9f:8c:64:
c1:16:0f:a7:b5:b5:c0:51:6f:ec:19:fc:a5:7b:1a:93:bb:aa:
91:70:38:df:20:9f:f2:64:2a:60:61:5f:c3:68:a3:4f:94:6b:
c5:b7:bb:5e:50:cc:76:be:b5:78:e6:87:01:52:ae:f1:bb:13:
41:2f:59:2b:2a:83:05:8c:85:61:79:9c:60:7a:96:05:7a:98:
b1:fe:cf:af:43:24:c6:fe:c3:86:11:9e:70:de:09:3f:4c:c3:
c9:9c:37:a1:ee:af:6c:20:25:37:58:21:6c:2a:a5:09:f6:3e:
31:bd:d2:8c:43:b2:e6:bd:48:70:07:11:7f:1f:26:66:53:4b:
fc:dd:01:45:41:53:42:97:99:47:cf:da:fd:31:7a:e8:d4:be:
b9:24:e1:7e:a9:08:69:7f:49:b5:d1:d6:72:ed:76:d8:c1:0d:
59:09:54:46:a2:3c:2f:67:2f:84:af:bd:d9:f7:40:56:66:f8:
01:58:12:ca:02:8a:5f:9a:08:8d:99:93:c3:b5:93:67:00:e5:
7d:c9:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:25:14 2026 by rpki-client