Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: tMKubiePMMJTxjID18Ym+RSgyv9R1MRXE4nOdrJ2lhw=
Subject key identifier: 8A:76:8F:86:64:B1:24:3C:26:BD:1D:84:90:1B:42:BD:12:F2:6F:8F
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019DAFE9FE42D2901787F0C692D3D3BFECCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 105C
Signing time: Tue 21 Apr 2026 12:00:40 +0000
Manifest this update: Tue 21 Apr 2026 12:00:40 +0000
Manifest next update: Wed 22 Apr 2026 12:00:40 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: q1CsWoNK6gKdFEVs5uJJtnze+CJJ3J3Ouw2dj8K1mbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:e9:fe:42:d2:90:17:87:f0:c6:92:d3:d3:bf:ec:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Apr 21 12:00:40 2026 GMT
Not After : Apr 22 12:00:40 2026 GMT
Subject: CN=8a768f8664b1243c26bd1d84901b42bd12f26f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:0d:75:c3:3a:88:ae:b9:cb:08:5e:4f:7b:
bc:d3:a5:fc:19:97:8b:a4:f4:9e:99:4f:d4:3a:80:
cb:03:02:64:22:b5:29:8b:36:89:d5:ad:30:ba:4f:
07:b6:b4:1f:93:2b:2b:29:15:88:85:ca:82:14:e8:
ad:f7:9c:2d:0c:31:13:0c:0f:89:4b:02:6f:e4:39:
b5:05:d7:fd:33:30:35:6b:c3:ba:4c:fc:ff:54:ca:
97:bf:95:ca:ac:91:f2:1e:3e:1f:b2:ff:d2:d3:c9:
b8:55:9f:70:33:93:54:81:22:ad:cf:35:83:6b:c4:
2d:82:3b:1e:93:19:2f:fd:b4:3c:c0:c3:36:eb:db:
64:a2:27:ab:16:23:6e:74:36:7b:28:dd:1d:58:90:
9f:bf:f6:e0:4c:44:f9:d7:11:65:5d:52:27:37:51:
25:c1:ab:25:1d:77:0c:9b:f7:87:90:2e:df:6a:dc:
34:aa:b3:e9:16:5a:c8:e1:3e:f1:d0:58:d5:ae:e5:
1e:eb:c6:d8:f4:a5:f8:ff:53:d7:26:2f:97:3f:3a:
65:61:d5:37:c8:ee:b5:af:2f:0a:a3:64:32:3f:62:
cd:24:dc:44:cc:47:d6:93:fa:13:f2:e1:39:2f:24:
8c:d4:69:d9:22:24:fb:41:bd:7c:ce:40:bb:16:e3:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:8F:86:64:B1:24:3C:26:BD:1D:84:90:1B:42:BD:12:F2:6F:8F
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5b:2e:fa:78:72:0b:5d:19:f9:b4:af:f2:05:db:e4:5f:4a:
67:84:c5:fb:22:e5:87:ac:f3:4f:e7:50:18:67:cf:1c:ba:e0:
b7:ed:db:84:61:f8:e4:59:55:80:36:54:4a:bf:ea:af:fb:6f:
31:45:3b:ba:9b:43:50:a1:2f:2d:95:23:43:43:1d:02:fd:02:
43:ce:bc:e6:29:13:06:7a:a8:a7:0e:79:bf:60:37:a9:87:18:
ad:d8:43:34:b6:69:6b:31:3b:ea:e5:4b:2b:cd:1e:0e:1b:97:
ae:c0:ea:b8:51:66:68:c3:11:f7:51:b5:31:35:15:30:e5:3e:
41:20:89:41:03:13:f1:98:4c:af:0f:74:2d:65:4d:53:ec:56:
3d:58:ec:41:18:96:54:a1:f5:4b:a6:ea:12:d1:40:bf:c7:dd:
ce:55:fe:ad:8c:53:62:32:3a:b6:62:a3:d0:f9:9f:77:4a:9c:
c9:a9:d9:13:5c:a1:5e:61:80:d6:b4:11:50:c4:2c:f7:c6:46:
ce:80:23:27:d2:ff:7d:a3:7b:18:77:8a:9e:23:69:14:ba:e4:
a6:93:c0:f5:b0:7b:45:0f:44:70:7b:c4:44:7c:02:1d:f5:02:
6b:2b:20:a1:b7:81:76:09:c3:d3:97:eb:38:6a:ac:17:97:4e:
eb:ce:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:06:31 2026 by rpki-client