Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: BG0Fqz7j6AavRCSaIcAEZBrSvp3R0SMl5FagjEqLQRA=
Subject key identifier: E1:BC:FD:89:7C:5F:57:FE:19:FD:C2:F2:FF:72:17:FC:F7:F3:BB:CA
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01A06EDEEE85AEFF6C8E6889BD05FE08EE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 11C8
Signing time: Sat 05 Sep 2026 00:01:38 +0000
Manifest this update: Sat 05 Sep 2026 00:01:38 +0000
Manifest next update: Sun 06 Sep 2026 00:01:38 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: B3InNmgbg/PPEGJEwYF6+LeF9zqqlyCMNbVdiU77uKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:ee:85:ae:ff:6c:8e:68:89:bd:05:fe:08:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Sep 5 00:01:38 2026 GMT
Not After : Sep 6 00:01:38 2026 GMT
Subject: CN=e1bcfd897c5f57fe19fdc2f2ff7217fcf7f3bbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:a7:d5:67:90:a9:b8:a6:c5:c2:6b:50:eb:
23:a3:b0:51:0f:aa:d5:76:9a:d0:94:e3:26:02:16:
f7:1c:74:be:cd:92:66:d0:3e:c8:53:be:97:0f:b2:
68:f0:67:e3:38:a0:75:f9:26:f1:4a:c3:59:9c:1f:
a3:11:9c:c3:ac:29:ec:22:aa:0b:58:19:bc:4d:b6:
a1:8f:bc:df:b1:f0:72:0a:45:d8:b6:fb:2f:f1:7e:
c3:6b:56:7c:f4:a8:5d:30:c8:42:28:cd:64:72:5c:
b1:1e:97:e8:6c:12:1b:9f:cf:18:04:a1:11:69:6e:
8e:40:4d:f3:58:ac:a0:4a:34:d4:50:57:d6:7f:e2:
bc:90:15:85:1f:79:16:11:a1:9c:4e:c9:de:fc:e9:
6d:43:09:6e:13:b4:29:0b:2f:26:76:23:8d:9c:dd:
b7:e9:8f:95:18:0c:ab:9b:71:9f:58:8e:06:ba:a0:
5a:1f:7e:6b:77:23:0a:fc:46:25:fa:00:ee:9e:bf:
11:5d:1d:26:42:02:5f:c1:2c:53:ee:5f:c3:25:8c:
ca:a4:c8:c8:8c:74:af:d5:dc:04:0f:0e:27:a4:e3:
23:6f:52:55:98:07:2b:24:25:7d:27:59:5c:77:54:
d1:3e:f3:56:53:70:d4:2c:40:6d:9e:4f:09:b3:b1:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:FD:89:7C:5F:57:FE:19:FD:C2:F2:FF:72:17:FC:F7:F3:BB:CA
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:c5:36:6f:ce:01:9f:3c:44:85:84:82:f3:71:c2:68:fc:
67:57:86:b5:4f:ad:d7:f9:f9:75:41:6d:eb:4b:2c:7f:a8:22:
04:42:a8:86:19:78:7e:94:39:72:a1:48:17:92:53:3b:a1:24:
a1:58:f6:4d:50:e9:cd:aa:ef:04:76:0b:bd:cf:c1:19:f0:c4:
3b:f6:99:d6:84:9b:c5:87:d9:fc:41:6c:1a:47:1c:93:22:60:
b7:a1:cb:4f:43:79:2c:7c:c5:2f:89:18:a5:20:52:41:1d:e8:
3c:b6:ca:53:91:a4:8d:4d:ce:79:37:4a:18:27:e5:00:f9:cb:
c4:1c:2d:e5:56:f3:b8:97:ae:5d:0e:b3:3b:a3:f5:dd:87:87:
53:d1:cc:74:ae:db:d5:e8:57:37:37:da:b8:d6:e7:92:56:a6:
79:69:8d:35:2f:24:ac:fb:1e:38:c2:aa:43:04:0e:58:8c:6c:
a7:b9:c9:60:a5:2e:44:54:9f:e2:ce:82:55:36:50:41:8f:3e:
0a:d4:38:e9:67:60:ae:99:c1:9b:ce:1b:06:21:0c:0f:d6:e4:
cb:07:ce:54:a1:d1:7f:9f:3e:5d:d1:bf:ea:30:09:95:ee:dd:
71:e2:01:ff:85:da:08:10:29:8c:43:48:dd:7a:bb:9c:72:cb:
64:b3:48:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3u6Frv9sjmiJvQX+CO6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjYwOTA1MDAwMTM4WhcNMjYwOTA2MDAwMTM4WjAzMTEwLwYDVQQD
EyhlMWJjZmQ4OTdjNWY1N2ZlMTlmZGMyZjJmZjcyMTdmY2Y3ZjNiYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Imn1WeQqbimxcJrUOsjo7BRD6rV
dprQlOMmAhb3HHS+zZJm0D7IU76XD7Jo8GfjOKB1+SbxSsNZnB+jEZzDrCnsIqoL
WBm8Tbahj7zfsfByCkXYtvsv8X7Da1Z89KhdMMhCKM1kclyxHpfobBIbn88YBKER
aW6OQE3zWKygSjTUUFfWf+K8kBWFH3kWEaGcTsne/OltQwluE7QpCy8mdiONnN23
6Y+VGAyrm3GfWI4GuqBaH35rdyMK/EYl+gDunr8RXR0mQgJfwSxT7l/DJYzKpMjI
jHSv1dwEDw4npOMjb1JVmAcrJCV9J1lcd1TRPvNWU3DULEBtnk8Js7GfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG8/Yl8X1f+Gf3C8v9yF/z387vKMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMzFNm/O
AZ88RIWEgvNxwmj8Z1eGtU+t1/n5dUFt60ssf6giBEKohhl4fpQ5cqFIF5JTO6Ek
oVj2TVDpzarvBHYLvc/BGfDEO/aZ1oSbxYfZ/EFsGkcckyJgt6HLT0N5LHzFL4kY
pSBSQR3oPLbKU5GkjU3OeTdKGCflAPnLxBwt5VbzuJeuXQ6zO6P13YeHU9HMdK7b
1ehXNzfauNbnklameWmNNS8krPseOMKqQwQOWIxsp7nJYKUuRFSf4s6CVTZQQY8+
CtQ46WdgrpnBm84bBiEMD9bkywfOVKHRf58+XdG/6jAJle7dceIB/4XaCBApjENI
3Xq7nHLLZLNIXw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:53 2026 by rpki-client