Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: BNUonymVKYgwqzIfpLG93vnDsFcixIb/R6SoUtwPa8I=
Subject key identifier: 30:3F:6A:BA:13:CC:D1:0B:EB:2D:C7:B4:8C:D7:20:98:2A:3D:FA:46
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01A06D9551352CEC24E453B6D3C20EAD107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0D6A
Signing time: Fri 04 Sep 2026 18:01:37 +0000
Manifest this update: Fri 04 Sep 2026 18:01:37 +0000
Manifest next update: Sat 05 Sep 2026 18:01:37 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: Mbn+269cOJijFKYUmOqYLGI6J70A23f9cfTlvb1pViI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:51:35:2c:ec:24:e4:53:b6:d3:c2:0e:ad:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Sep 4 18:01:37 2026 GMT
Not After : Sep 5 18:01:37 2026 GMT
Subject: CN=303f6aba13ccd10beb2dc7b48cd720982a3dfa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:d6:c6:1c:80:6f:d7:b6:0b:d2:f8:5e:21:
b6:fd:32:2b:17:98:b6:23:b2:32:e2:6d:e6:af:13:
2a:f8:ca:94:cb:b7:e4:61:68:c7:0a:7c:26:bc:36:
59:33:e2:cb:af:57:3d:c2:50:ab:f2:93:aa:6c:ab:
9e:b6:c2:e0:b7:65:a7:e9:bd:2e:1d:00:35:a1:84:
9e:5d:51:a1:2f:90:19:c8:7f:ee:30:a5:97:0d:a0:
7d:46:02:83:87:89:a8:24:2e:72:cc:89:7d:20:24:
96:5d:05:49:0a:7b:59:1b:12:ca:a9:9f:77:25:3a:
12:95:66:1d:e7:e5:4e:6a:4f:68:62:af:ab:de:e5:
7d:4f:9c:8d:e6:74:4a:a2:b5:5d:14:20:e1:b5:36:
4f:75:6f:1e:a3:f6:6a:8e:5c:97:0c:4b:f7:49:70:
14:52:3b:16:cb:d9:3a:2e:e9:db:5b:d9:62:ae:29:
05:ef:e4:7b:64:e4:75:d3:a9:dc:b8:43:71:da:cd:
02:b4:83:b4:78:85:54:0e:a6:e5:87:f0:c1:a8:9d:
d2:9a:94:26:75:df:75:97:d9:15:78:e5:e1:19:58:
34:a4:57:f3:30:cb:f8:cd:64:3a:92:ac:17:f5:a7:
34:4b:89:45:a0:fc:fb:4f:67:54:1e:18:ee:e2:7a:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:6A:BA:13:CC:D1:0B:EB:2D:C7:B4:8C:D7:20:98:2A:3D:FA:46
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:08:7a:3a:7f:7e:ad:3d:d0:12:08:c5:81:1a:9e:e7:46:
1f:ad:0a:b5:ab:82:97:50:36:b3:23:27:b6:f1:36:af:24:95:
3a:12:a5:46:01:c5:2e:3c:03:1e:d4:40:33:a5:a1:3b:eb:b4:
c4:26:dc:bf:34:3b:8b:c3:1e:20:1e:e4:35:fe:2b:97:21:4f:
39:46:cf:5d:97:21:6c:81:f2:c6:69:99:b6:68:a0:64:2f:a0:
ff:65:c2:b7:b8:4d:19:4b:8e:d5:0a:8f:a9:7a:97:ba:a1:94:
07:3f:e2:a5:4a:f6:7a:ef:ec:c6:22:d9:7c:d4:66:c3:b3:2a:
ea:68:ac:bf:18:26:14:b0:af:40:82:9f:34:54:fa:d4:2a:b4:
5b:80:9d:d5:1b:d8:01:60:ec:a9:de:23:ed:f2:52:a3:57:1c:
d4:c2:1a:60:f6:e2:bd:45:69:49:72:42:aa:6d:c8:2a:e2:97:
f0:63:39:93:1a:40:fa:84:d7:17:63:c1:be:47:be:a5:c8:06:
16:5c:d9:96:0d:f9:a0:50:4e:d3:83:c9:e9:ba:ba:a0:d3:7b:
eb:60:d8:ce:32:87:6f:3e:96:b7:7e:b8:6f:df:56:06:36:86:
73:cb:79:39:d7:6e:7b:2a:3d:27:72:ba:31:e4:36:99:0c:69:
af:e8:39:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlVE1LOwk5FO208IOrRB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz
MTUwZTkwHhcNMjYwOTA0MTgwMTM3WhcNMjYwOTA1MTgwMTM3WjAzMTEwLwYDVQQD
EygzMDNmNmFiYTEzY2NkMTBiZWIyZGM3YjQ4Y2Q3MjA5ODJhM2RmYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8LWxhyAb9e2C9L4XiG2/TIrF5i2
I7Iy4m3mrxMq+MqUy7fkYWjHCnwmvDZZM+LLr1c9wlCr8pOqbKuetsLgt2Wn6b0u
HQA1oYSeXVGhL5AZyH/uMKWXDaB9RgKDh4moJC5yzIl9ICSWXQVJCntZGxLKqZ93
JToSlWYd5+VOak9oYq+r3uV9T5yN5nRKorVdFCDhtTZPdW8eo/ZqjlyXDEv3SXAU
UjsWy9k6LunbW9lirikF7+R7ZOR106ncuENx2s0CtIO0eIVUDqblh/DBqJ3SmpQm
dd91l9kVeOXhGVg0pFfzMMv4zWQ6kqwX9ac0S4lFoPz7T2dUHhju4nrSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA/aroTzNEL6y3HtIzXIJgqPfpGMB8GA1UdIwQY
MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt
NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1
LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4oIejp/
fq090BIIxYEanudGH60KtauCl1A2syMntvE2rySVOhKlRgHFLjwDHtRAM6WhO+u0
xCbcvzQ7i8MeIB7kNf4rlyFPOUbPXZchbIHyxmmZtmigZC+g/2XCt7hNGUuO1QqP
qXqXuqGUBz/ipUr2eu/sxiLZfNRmw7Mq6misvxgmFLCvQIKfNFT61Cq0W4Cd1RvY
AWDsqd4j7fJSo1cc1MIaYPbivUVpSXJCqm3IKuKX8GM5kxpA+oTXF2PBvke+pcgG
FlzZlg35oFBO04PJ6bq6oNN762DYzjKHbz6Wt364b99WBjaGc8t5Oddueyo9J3K6
MeQ2mQxpr+g5aQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:20 2026 by rpki-client