Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: QYIBhATdAw/5TrncQT6yo//Y43vmMv9kZMabD2w3Lxk=
Subject key identifier: C0:05:8E:13:0D:3C:66:97:59:37:7C:3C:32:10:D8:2E:8B:C6:07:25
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019CC63DB08338EE2D6642D1E09488E40ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0FE3
Signing time: Sat 07 Mar 2026 03:00:57 +0000
Manifest this update: Sat 07 Mar 2026 03:00:57 +0000
Manifest next update: Sun 08 Mar 2026 03:00:57 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: Xkzk2EyEeK2zjBNx02a2/uzIH0zFFGt/MQ8d8PeUJ8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:3d:b0:83:38:ee:2d:66:42:d1:e0:94:88:e4:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Mar 7 03:00:57 2026 GMT
Not After : Mar 8 03:00:57 2026 GMT
Subject: CN=c0058e130d3c669759377c3c3210d82e8bc60725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:6a:1c:e4:59:95:b5:89:3d:3b:1e:01:1b:
9f:3a:ea:cc:2f:a5:ba:f8:b8:10:ad:1e:85:3a:a2:
03:18:d7:55:0c:e5:a6:07:67:01:bc:75:ef:ae:40:
e1:c6:b4:83:33:34:18:f7:5b:4e:87:4c:50:cc:eb:
fa:e0:bf:50:cb:6d:58:b4:05:3a:3f:0e:a2:da:87:
e2:14:28:a4:12:25:d9:a5:57:66:3f:4c:06:f8:7d:
38:06:64:dd:11:5d:e4:e5:06:6d:f1:c6:eb:0b:64:
d8:ef:00:44:71:90:18:4a:0e:36:16:c2:d9:3e:18:
0d:23:c3:ec:89:72:a9:98:1e:7b:8d:eb:95:64:9e:
17:ed:bc:1a:80:aa:3d:19:55:ae:2a:b9:55:7a:6c:
c1:96:ea:32:65:54:48:17:1a:9a:fd:1e:d2:b1:60:
44:5b:6b:79:73:bc:f7:61:40:95:0c:52:80:c3:a6:
cd:a8:09:02:c0:39:79:2f:97:53:52:d0:a6:55:f2:
4a:0c:04:85:bc:8c:cb:27:49:57:f1:bd:ef:d9:55:
34:73:33:fa:c1:48:50:02:54:1f:9d:b3:e2:0a:ca:
3c:68:a1:48:9a:6b:73:7b:39:1b:d2:a2:e6:22:a0:
7b:fd:73:46:9c:b0:07:fe:30:d1:5c:0c:e3:a2:3e:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:8E:13:0D:3C:66:97:59:37:7C:3C:32:10:D8:2E:8B:C6:07:25
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f7:5c:d6:f5:f2:96:5b:54:7b:27:cd:26:93:4b:ec:69:c3:
e3:e4:70:b4:18:2e:b1:96:c2:68:a7:64:25:cb:cc:07:2a:42:
1f:7d:10:d6:61:b1:04:c1:dc:49:11:ef:cf:88:56:0c:96:1e:
48:71:4f:15:bc:73:c0:e6:7e:b5:cc:6d:8f:b5:b8:7b:b0:1d:
ea:b7:2f:6f:aa:46:36:16:f1:c4:14:b5:76:79:89:d3:ba:ea:
5b:33:e8:28:22:7e:18:c6:56:55:8d:0e:35:f4:bc:d9:96:c8:
5d:ee:85:7d:37:fb:50:61:cc:8c:4c:74:c8:b4:97:a4:b1:57:
97:ac:a2:a7:5f:d2:34:c9:49:4b:ed:63:6c:21:c5:ce:63:68:
ee:cf:11:6f:c1:44:17:ba:de:d5:e0:68:f8:af:8c:fd:cb:dc:
9a:35:fe:27:93:3c:b7:cd:31:ea:e9:b6:5d:1e:d8:62:55:f1:
aa:6e:9a:63:5b:33:5e:f6:b9:ff:01:11:ed:a7:9a:2f:b3:26:
57:2e:7f:c9:04:80:df:88:63:f9:10:dc:d7:f1:51:48:03:f5:
3c:27:bc:dc:17:83:d4:b1:c9:83:98:6d:16:cf:33:1c:ee:c9:
e8:86:ae:ed:0a:e7:6b:f2:3d:6e:37:33:78:e0:5c:1a:80:4e:
91:bc:78:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzGPbCDOO4tZkLR4JSI5Aq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjYwMzA3MDMwMDU3WhcNMjYwMzA4MDMwMDU3WjAzMTEwLwYDVQQD
EyhjMDA1OGUxMzBkM2M2Njk3NTkzNzdjM2MzMjEwZDgyZThiYzYwNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1xqHORZlbWJPTseARufOurML6W6
+LgQrR6FOqIDGNdVDOWmB2cBvHXvrkDhxrSDMzQY91tOh0xQzOv64L9Qy21YtAU6
Pw6i2ofiFCikEiXZpVdmP0wG+H04BmTdEV3k5QZt8cbrC2TY7wBEcZAYSg42FsLZ
PhgNI8PsiXKpmB57jeuVZJ4X7bwagKo9GVWuKrlVemzBluoyZVRIFxqa/R7SsWBE
W2t5c7z3YUCVDFKAw6bNqAkCwDl5L5dTUtCmVfJKDASFvIzLJ0lX8b3v2VU0czP6
wUhQAlQfnbPiCso8aKFImmtzezkb0qLmIqB7/XNGnLAH/jDRXAzjoj7W6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAFjhMNPGaXWTd8PDIQ2C6LxgclMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvdc1vXy
lltUeyfNJpNL7GnD4+RwtBgusZbCaKdkJcvMBypCH30Q1mGxBMHcSRHvz4hWDJYe
SHFPFbxzwOZ+tcxtj7W4e7Ad6rcvb6pGNhbxxBS1dnmJ07rqWzPoKCJ+GMZWVY0O
NfS82ZbIXe6FfTf7UGHMjEx0yLSXpLFXl6yip1/SNMlJS+1jbCHFzmNo7s8Rb8FE
F7re1eBo+K+M/cvcmjX+J5M8t80x6um2XR7YYlXxqm6aY1szXva5/wER7aeaL7Mm
Vy5/yQSA34hj+RDc1/FRSAP1PCe83BeD1LHJg5htFs8zHO7J6Iau7Qrna/I9bjcz
eOBcGoBOkbx41Q==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:01 2026 by rpki-client