Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: U6zZGp2YIFZ3a40YhAYVUIbzv162oSkuZFLGH2vfFdM=
Subject key identifier: 9D:D2:51:17:B1:75:1B:C2:9A:B6:7F:0D:6A:AB:AE:41:CA:94:3D:1C
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01A1781548CDAC2186E4602034C813E1046F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0DF4
Signing time: Mon 26 Oct 2026 12:00:22 +0000
Manifest this update: Mon 26 Oct 2026 12:00:22 +0000
Manifest next update: Tue 27 Oct 2026 12:00:22 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: f/2Z2WXrieAC/j7PaDulB4gxT7TrgqfXjFw6Mo8zICc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:48:cd:ac:21:86:e4:60:20:34:c8:13:e1:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Oct 26 12:00:22 2026 GMT
Not After : Oct 27 12:00:22 2026 GMT
Subject: CN=9dd25117b1751bc29ab67f0d6aabae41ca943d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cc:2b:13:9f:ef:77:f8:63:40:a3:ba:76:cd:
c3:d3:67:2b:bc:15:a6:e4:f1:a5:54:c1:75:47:05:
47:47:1f:f9:1e:1e:95:87:d7:6b:aa:e8:b5:2d:77:
0d:5a:f8:64:66:4e:f2:60:d0:62:89:4a:88:63:91:
d1:bf:57:28:9a:14:c5:76:ea:94:a5:6b:2b:6e:d9:
a5:73:b6:6a:e0:01:8c:2f:47:b2:08:39:55:37:d8:
70:0e:dc:40:e9:77:04:58:b0:cf:80:1c:46:68:7e:
3c:67:cd:0f:1f:e4:a2:29:6d:4a:2c:c9:39:64:6e:
35:a2:8a:62:00:08:f6:45:c3:0d:12:5b:ca:92:58:
42:2f:b6:78:07:89:ec:09:20:48:42:ab:53:25:7f:
d7:0b:6a:d8:e1:b8:b6:59:51:b8:bd:83:17:5d:f9:
0e:e0:4c:3d:1e:7f:82:63:46:7f:ff:a2:5e:af:53:
a6:8a:df:9e:4c:42:d6:ff:4e:8e:a1:e6:11:0d:14:
cd:b8:44:4d:91:23:da:8a:e8:ed:78:74:37:57:99:
02:eb:38:29:18:d0:b6:7b:b7:5b:02:59:42:5e:37:
8b:80:9a:a9:4c:fe:fb:16:42:80:14:fe:ac:b7:f0:
32:5d:6e:b2:55:52:54:bc:0f:64:3f:74:8a:16:7f:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:51:17:B1:75:1B:C2:9A:B6:7F:0D:6A:AB:AE:41:CA:94:3D:1C
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3f:85:63:5c:6f:19:43:e3:ad:e7:f6:86:bb:54:2e:5e:b9:
f4:37:c0:55:28:5d:b0:0c:09:cb:1a:82:09:43:df:1a:7a:a0:
c2:c3:f0:35:75:3a:83:ea:84:3d:80:4e:cf:45:a8:21:02:a7:
fc:de:26:0c:8a:a5:c3:95:61:0c:28:de:33:7c:1d:33:bb:78:
67:e9:16:2e:ae:32:be:6a:fe:b6:ee:fb:97:35:cd:df:15:a3:
17:7c:9b:bf:85:67:da:02:f9:22:3c:0a:b3:3f:26:45:08:13:
88:11:5a:5b:09:fc:01:a8:39:45:43:a9:8b:f3:ec:db:8f:e8:
4f:9d:34:0c:de:48:f4:d4:dd:ba:d1:0a:26:48:81:f2:31:37:
0f:26:44:99:e6:b3:0b:64:2c:d0:9d:ae:c0:17:ef:bc:4f:0e:
74:3c:16:68:a5:d6:c9:2c:d2:91:39:b0:a1:96:62:0f:b4:48:
7e:a9:80:5d:27:14:a3:9d:64:1e:fd:12:d8:d7:9e:6b:20:bb:
22:8a:fb:10:76:af:b1:4f:75:96:55:0c:44:61:ea:09:a8:58:
69:c1:d0:e1:f8:a6:f6:4e:a6:de:cd:ea:d3:12:8d:2c:d5:2e:
ee:de:36:6a:21:1c:d7:8c:6c:23:00:da:61:99:a0:f2:0e:1b:
ee:58:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:18:37 2026 by rpki-client