Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: Sh3nDak+HGaHAcPfVhlrfNIpWR2EkASN0LZc+/tWySY=
Subject key identifier: 3A:4F:86:E7:41:C2:97:04:E8:5E:5F:9A:29:EB:97:AF:37:13:CD:8E
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 019CABD8ED2038D6CBC126244E3BEB0C004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0A99
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: 1-hnniNiqKhghSmVXCidavYogegc.roa (hash: Jduthbq3o8EtI4RJz3qiljL6aUb5nGCPK55RrxKoNyI=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: nxqQmJiMp+yS1kiPn+s3Ul5sum95oe2E4rYTEpZ9J28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ed:20:38:d6:cb:c1:26:24:4e:3b:eb:0c:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=3a4f86e741c29704e85e5f9a29eb97af3713cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:e1:56:7e:6e:53:d0:db:4e:54:59:af:ed:
14:bc:9b:9d:fc:ca:97:46:7c:33:96:2d:a1:51:d5:
4d:b1:19:81:1e:e7:20:6a:6b:17:4b:8e:bd:2d:85:
b7:d2:70:e3:69:7c:1b:0f:7b:36:27:8e:e4:75:70:
f1:87:ff:34:6e:35:a6:d9:70:6f:39:f5:d2:7c:ab:
98:5b:76:e1:7d:83:86:07:28:cf:93:f6:8f:a6:ba:
04:94:dc:49:69:c4:87:a2:6e:21:97:2d:ca:12:49:
35:4a:4d:d1:74:ec:fb:be:05:82:62:5f:f2:4a:a4:
47:aa:da:f0:1b:aa:33:03:a1:da:9e:90:f7:88:21:
41:68:8e:76:85:a6:93:c1:c8:97:37:7c:39:03:d3:
97:e0:56:e8:93:a0:ea:c0:dd:54:26:63:47:ff:7e:
76:63:ba:36:7f:a1:49:10:9b:90:4f:07:0b:9a:a6:
be:dd:54:88:e2:f2:f9:ec:a0:30:88:96:6e:e3:6f:
bf:86:b4:4c:a3:b5:a2:ed:56:5b:ea:db:59:0c:29:
87:4b:c2:74:36:88:84:bb:2e:2e:e9:a1:7a:bf:31:
75:c1:73:a4:83:5d:f7:2c:d1:33:9b:36:39:b9:5b:
07:3e:ce:83:31:fa:a9:cb:55:ec:01:10:03:ff:b0:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:86:E7:41:C2:97:04:E8:5E:5F:9A:29:EB:97:AF:37:13:CD:8E
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:37:44:e1:50:92:08:be:0a:b8:9f:bd:59:2e:e9:46:01:3c:
80:b2:18:6f:2b:55:0c:35:84:72:6c:6c:4b:c8:45:03:6b:ff:
30:fc:6b:ed:76:41:8c:99:d0:5f:99:70:85:1a:f0:03:31:5e:
3b:91:eb:72:40:04:76:ed:1c:ab:79:70:1e:a1:5c:7f:12:0d:
56:65:13:aa:dc:86:a8:a0:9d:5d:f2:7f:50:8f:39:80:33:91:
0c:4f:79:2b:e8:d9:32:42:4d:05:a8:ba:86:72:20:3b:6c:40:
c6:90:2a:7b:33:06:ca:18:ec:83:bf:b0:40:ed:67:a6:93:87:
f7:17:ae:98:0f:34:7f:5c:a2:24:c8:ee:77:53:71:56:b5:50:
de:3b:e0:72:db:c1:7e:57:33:4c:9a:28:92:ff:de:b7:bc:12:
1f:bf:40:63:20:19:d9:a6:4d:4f:42:7e:3c:67:8e:71:49:2a:
70:44:bb:0b:b5:24:3e:e7:60:db:46:b7:9c:5c:0e:33:20:c9:
3f:53:d8:64:f2:84:a2:be:83:18:aa:ad:96:0b:15:16:99:d3:
15:30:7c:8f:d4:ae:0a:6e:a2:70:ae:a9:ba:a9:9c:32:0e:5e:
e8:e1:15:10:23:8a:31:b4:76:7f:66:3c:8d:16:a7:bb:b5:7b:
4e:3d:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:39 2026 by rpki-client