Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
File: u8y6drQ5_a39OU1vR37mgbwzgy8.mft (raw, json)
Hash identifier: 8PNnUMEmEjo8HwV1QaYFBetLdjXeiL7YlJUY0Gn9zVE=
Subject key identifier: 19:9A:5E:48:C5:19:6B:7D:69:2E:AC:72:6C:C4:5B:7B:9A:FA:77:25
Authority key identifier: BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
Certificate issuer: /CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Certificate serial: 019D9B879E681D4B24F3384814FCAD3CE431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
Manifest number: C2
Signing time: Fri 17 Apr 2026 13:00:49 +0000
Manifest this update: Fri 17 Apr 2026 13:00:49 +0000
Manifest next update: Sat 18 Apr 2026 13:00:49 +0000
Files and hashes: 1: jbPn_huaTii3UeZHQ_d9dvrziA4.roa (hash: WDTKgP7OatpD7hZS6aOF7SUbKrJNGnHp02sDeSf2/f4=)
2: u8y6drQ5_a39OU1vR37mgbwzgy8.crl (hash: iOb42TL7grwv/OSiqv0NC47LXsq9VjpN+ce/AX2VHPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:9e:68:1d:4b:24:f3:38:48:14:fc:ad:3c:e4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Validity
Not Before: Apr 17 13:00:49 2026 GMT
Not After : Apr 18 13:00:49 2026 GMT
Subject: CN=199a5e48c5196b7d692eac726cc45b7b9afa7725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:52:8d:dc:a5:ea:e7:9f:38:17:de:60:87:
02:32:f2:3b:04:23:1e:55:32:af:4c:33:29:b7:ab:
65:98:f0:13:d1:9c:d3:9f:49:2e:94:09:c1:86:61:
a5:43:17:2a:36:34:27:fd:2b:06:b5:6d:e5:35:15:
2a:ca:1d:3c:84:cb:ca:fd:35:3d:ec:1b:1f:ab:2a:
bb:c0:da:ab:2f:e1:32:ab:82:51:b7:10:89:53:45:
7e:b3:a5:3b:1e:93:6c:06:1e:dd:cd:c7:7c:f0:1b:
a3:05:2f:1f:e9:5d:3a:2d:5f:df:e3:99:64:00:04:
c4:4e:23:5b:0a:39:e7:57:62:7f:fd:28:70:0f:bf:
3b:99:9b:33:bb:82:22:39:e4:3b:1f:81:e8:cc:52:
ec:95:d4:19:45:7e:58:be:a2:02:3a:ea:4d:81:bf:
cb:60:55:1f:de:3a:71:a3:4d:70:85:b5:f9:e2:65:
9e:b6:5b:78:d8:d7:86:e3:a8:6a:14:df:36:6e:23:
7f:3a:87:4a:fc:49:e1:3c:02:b5:84:34:c7:61:fc:
76:d5:61:db:24:51:76:60:5d:c8:40:10:e0:0f:13:
c6:ef:74:d9:1f:c0:56:d7:9b:1e:ff:9e:8d:81:62:
87:31:6f:3b:3c:ff:b2:0f:91:f8:c4:fe:87:9d:bc:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:5E:48:C5:19:6B:7D:69:2E:AC:72:6C:C4:5B:7B:9A:FA:77:25
X509v3 Authority Key Identifier:
keyid:BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:30:56:3c:1a:63:e9:9a:93:b6:53:15:34:1d:ec:68:f3:58:
d1:b0:e7:67:f0:d2:65:56:0a:b4:61:2f:85:15:0a:89:47:ef:
f4:0a:28:85:58:2c:cc:5c:52:19:09:76:21:f3:b1:d4:43:27:
44:3d:fd:9e:c9:90:30:05:95:39:78:ad:be:6c:45:dc:50:bd:
04:0e:74:91:b0:6e:ce:df:7d:b1:00:64:28:42:89:65:9a:46:
ae:5a:00:3c:ea:47:71:38:68:5a:bc:f4:59:ea:6e:94:71:ab:
6d:da:da:78:4f:a3:0a:25:b6:9b:09:2d:a9:fa:dd:cd:ce:15:
5e:90:1b:73:4a:0f:91:d0:9f:d9:58:73:7a:57:ac:cb:75:f5:
e6:bd:7a:54:5e:48:b8:0e:26:9c:d7:57:cd:6e:64:d6:4a:55:
86:bf:80:dc:47:7e:1e:d9:11:5a:d6:51:68:ba:29:06:36:f0:
a7:b7:4f:e3:1c:23:cd:38:c9:66:94:0c:0f:77:9b:62:8a:4c:
8f:5a:30:22:8d:f6:28:8d:3c:ca:1a:74:c2:5d:93:53:85:9e:
2a:a1:ca:89:f2:97:01:00:34:e7:18:8f:3d:b0:9f:ae:db:e2:
33:c1:9b:52:55:ad:3f:d1:24:8b:70:03:ee:4e:89:35:78:09:
e4:ba:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:00:29 2026 by rpki-client