Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: gibH1GTstqlg408XL/PJ4iqBP1R4sZfL3+BOhzXsNfo=
Subject key identifier: D0:B0:D6:6D:4A:F6:7A:74:01:F2:40:F4:1C:96:F5:05:C6:2C:A4:75
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019E54B5C7CC34D4AB8A752BBAE37633422A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0C54
Signing time: Sat 23 May 2026 12:00:59 +0000
Manifest this update: Sat 23 May 2026 12:00:59 +0000
Manifest next update: Sun 24 May 2026 12:00:59 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: skH7/QXuLS0triIhOlViJUj/B1hUmebddgPtmsVjF2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:54:b5:c7:cc:34:d4:ab:8a:75:2b:ba:e3:76:33:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: May 23 12:00:59 2026 GMT
Not After : May 24 12:00:59 2026 GMT
Subject: CN=d0b0d66d4af67a7401f240f41c96f505c62ca475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:bf:c5:3e:99:27:70:17:69:6f:fb:bf:87:
d9:22:72:95:21:58:85:0b:12:e2:1a:da:94:24:fa:
79:5f:42:ce:0c:11:b5:a2:63:bf:c4:b2:c6:56:3e:
41:2e:a8:da:8f:05:0d:04:2a:c4:3b:85:a0:68:dd:
ab:a9:dc:db:3f:85:75:2e:45:15:cd:bd:04:51:eb:
ac:93:e9:4c:65:11:1c:ef:ed:4a:f4:b7:70:26:81:
7f:6c:23:0a:dd:d6:1e:02:13:75:23:8d:22:d2:b1:
bd:91:b4:bb:a4:f2:52:f0:b3:3a:75:5f:27:5f:1f:
4b:3a:7f:ff:44:c2:20:03:39:ad:45:63:e1:63:7a:
30:35:51:76:07:66:8d:20:4b:f1:73:59:eb:b2:76:
bc:15:98:a9:f7:67:4e:82:b9:4e:a0:92:4d:13:0f:
45:90:8e:db:57:12:15:d5:7a:c8:eb:7c:50:38:76:
7a:e5:9f:dc:da:73:dc:fe:3d:38:9f:8e:52:15:4d:
70:5c:89:9b:5f:ef:03:69:60:93:db:c7:bc:11:a8:
7c:49:b3:12:c6:f0:69:df:64:62:94:3f:63:e6:71:
33:c7:99:0c:1a:1d:c5:49:5d:51:65:66:7f:d3:3f:
9a:27:75:69:5f:f6:9e:46:de:e0:82:c4:6b:d4:f4:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B0:D6:6D:4A:F6:7A:74:01:F2:40:F4:1C:96:F5:05:C6:2C:A4:75
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:97:1e:b6:3d:d2:51:70:2e:61:63:01:13:35:20:54:70:
15:71:66:30:88:65:d6:3f:45:6d:42:77:e9:2a:83:1c:1b:fe:
8a:42:33:f1:dd:00:42:9a:c4:f3:15:89:9e:d1:92:56:e4:73:
c6:34:08:5d:df:81:56:4b:57:df:80:99:7e:7a:19:69:f2:8d:
17:16:96:ef:fa:2f:f7:ef:95:14:0c:19:a1:cf:d2:ff:9a:c6:
81:25:0b:3d:46:52:c8:9e:08:8b:40:de:d6:42:6c:3e:b1:2f:
52:bc:1b:df:c6:9f:2c:80:49:14:b1:a5:96:83:b8:ea:cb:e1:
ad:59:8c:87:9f:8f:21:05:e6:d8:ba:68:c8:d8:03:16:9a:27:
0f:5b:f9:9d:e1:9e:52:95:a2:ef:61:bb:44:4c:9b:c9:7d:75:
22:b6:6c:8e:29:43:0e:13:e8:65:93:84:20:37:e3:a6:8c:00:
4d:8b:33:6b:85:8d:db:ff:73:2f:cc:22:b7:0e:7c:3b:c8:6a:
65:41:4a:15:bd:9f:da:4b:54:7d:88:d2:40:6b:ad:7e:1d:3a:
b3:13:62:90:36:59:01:1d:f7:c0:89:91:b5:82:0b:27:a7:3b:
f6:1d:0b:07:8b:a4:9c:05:44:ce:7f:e4:fd:aa:27:65:98:00:
c6:73:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 23:06:24 2026 by rpki-client