Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: zza/JWC9f7PMzuZ+JxfqY1V2f0Gqn631Y/H55t9h87o=
Subject key identifier: 32:B5:8E:B1:68:8B:91:3A:91:91:0F:C1:A3:9D:1C:B1:44:CC:E2:DC
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01A16DC93FBCFB7417A90B60E2832D2CA473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 124C
Signing time: Sat 24 Oct 2026 12:01:07 +0000
Manifest this update: Sat 24 Oct 2026 12:01:07 +0000
Manifest next update: Sun 25 Oct 2026 12:01:07 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: R4FkjLonokNxePJ5cSWsRgJgI4zmmhEQiPZugbBMyUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c9:3f:bc:fb:74:17:a9:0b:60:e2:83:2d:2c:a4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Oct 24 12:01:07 2026 GMT
Not After : Oct 25 12:01:07 2026 GMT
Subject: CN=32b58eb1688b913a91910fc1a39d1cb144cce2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:eb:82:6d:96:e4:08:fb:60:c0:8c:d3:21:
fb:e7:24:7f:33:e1:b1:32:6a:e2:4a:9f:42:6d:27:
3b:be:3e:78:aa:b5:30:dc:66:1a:de:71:32:18:da:
4f:8b:b6:55:1d:07:37:e2:4f:88:6d:09:12:ab:c7:
00:05:de:e1:42:94:67:97:1c:20:1d:a1:0f:68:8d:
b6:ca:d3:35:c7:bf:86:71:e0:8d:f2:61:b6:a9:48:
ab:6c:a7:02:5f:e4:22:a8:08:e5:5d:4f:44:e7:a4:
4e:47:df:53:d8:8a:9e:f4:1c:95:0e:0e:56:65:fc:
3d:24:73:a2:90:2a:f0:29:76:79:a7:b9:11:a4:22:
18:36:86:66:c3:0e:5c:9a:64:93:d8:26:d0:16:00:
6a:31:60:2b:d5:94:67:e9:72:35:27:3e:7b:fa:bd:
ea:83:75:70:4a:56:26:ee:9e:b0:c3:7a:0a:d6:6c:
e8:44:7c:fb:b9:b1:e4:0f:11:75:0c:b1:b3:c5:49:
9f:07:f1:b1:4a:b2:32:c8:88:f3:1d:b9:6e:2c:fe:
e8:7f:43:db:8b:29:bf:d9:c6:56:ce:65:c0:6f:15:
2f:de:bd:63:61:b8:aa:42:9c:07:57:5c:b4:0d:d5:
6e:6c:a5:05:4a:44:e2:18:53:7d:d2:94:97:db:8c:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:8E:B1:68:8B:91:3A:91:91:0F:C1:A3:9D:1C:B1:44:CC:E2:DC
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:84:66:8b:93:13:88:df:c7:fb:fd:0c:82:67:a4:fb:8c:
21:a2:ec:bf:63:fe:24:10:b3:91:4f:1e:1b:46:27:06:67:25:
ae:b9:9d:3e:b9:fa:44:9e:22:37:1b:ca:92:cb:e7:21:26:61:
43:0c:bb:4c:87:97:11:d2:f4:d1:62:92:64:3f:20:bd:fe:0b:
5b:a5:56:0e:98:9c:ea:0d:26:18:fd:a7:57:6d:11:be:33:ad:
9a:55:53:bb:74:29:40:9f:67:6c:16:4f:ab:26:29:07:0d:f2:
c3:88:dc:5e:f6:3e:9b:11:8f:4d:bb:f5:25:6d:93:69:80:0c:
35:58:55:e1:26:75:55:a7:c8:cb:b5:f5:e2:9a:5f:62:28:70:
58:f0:ba:43:ac:90:66:95:c2:76:46:01:a4:f4:f8:4c:5f:0a:
bc:56:99:b9:9c:af:23:ea:6c:cb:1c:77:ff:7f:44:41:11:3b:
a0:a4:08:82:b4:9e:f9:62:89:ad:71:d1:8d:d3:9b:fc:a4:27:
fc:c1:80:a1:76:ee:fd:33:6a:39:cb:94:03:fa:50:16:b7:69:
09:5a:d4:77:74:ce:8d:81:ff:ba:4f:d0:5d:c5:c1:f8:3f:ec:
fe:58:e7:43:bf:e3:4c:4a:30:ae:6d:f5:4a:a2:64:84:d0:c3:
d4:0a:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:36:28 2026 by rpki-client