Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: jW+M5iXbcEcE7uE9cXzg+hOVggnmtf2uItIL2Mgk04s=
Subject key identifier: 59:53:47:28:CF:9D:E7:17:B5:41:4E:04:CC:49:D6:65:66:A5:97:95
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019E9B84F8F2DD47FA6546A3201DE52915F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 10D6
Signing time: Sat 06 Jun 2026 06:00:43 +0000
Manifest this update: Sat 06 Jun 2026 06:00:43 +0000
Manifest next update: Sun 07 Jun 2026 06:00:43 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: DyemIbvo/g3jYKfj8eOlRNOrBleiARqaeDmizG7KUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:84:f8:f2:dd:47:fa:65:46:a3:20:1d:e5:29:15:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jun 6 06:00:43 2026 GMT
Not After : Jun 7 06:00:43 2026 GMT
Subject: CN=59534728cf9de717b5414e04cc49d66566a59795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:33:f7:30:ae:02:54:b9:30:5e:99:a3:07:
88:24:15:a4:ee:2f:86:0d:ab:92:da:63:f6:96:59:
78:19:45:9d:a7:a6:db:9d:a9:eb:2d:4d:27:68:17:
22:80:de:9c:0c:09:1a:da:95:1f:db:c7:1f:55:6c:
73:6e:77:57:7f:fc:28:b7:7c:2c:59:45:6b:b2:56:
7f:b2:cc:4c:92:ae:93:31:cd:0b:f5:14:78:24:5a:
88:f8:4f:fa:7f:a3:47:25:48:80:79:4c:fd:c6:b4:
6b:54:43:07:f4:71:be:0f:f1:37:1e:e6:3d:eb:6c:
28:08:c8:c3:e9:36:27:c8:fd:22:8d:5c:1b:85:56:
6d:9b:0c:11:fc:a6:27:f0:3d:9b:66:6c:e8:9c:6c:
ec:8d:a3:45:6b:2a:42:c4:95:d1:94:d9:5e:5e:ee:
f3:43:b6:4e:85:dc:1d:cf:b3:4f:cf:15:21:c0:e1:
00:87:a7:fc:7e:55:59:19:3f:04:16:93:37:c9:13:
f9:06:82:f4:ed:b0:c2:7c:19:74:fe:3f:00:56:9e:
33:4b:3b:19:25:4f:14:15:28:02:37:a2:fa:af:98:
ea:16:14:a2:41:8a:b1:ac:5b:4a:75:23:4a:ac:82:
02:c7:72:35:9e:48:ae:ff:7a:64:9f:65:4f:ba:3e:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:53:47:28:CF:9D:E7:17:B5:41:4E:04:CC:49:D6:65:66:A5:97:95
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:f0:37:47:90:ba:f6:94:3d:e1:36:50:13:c5:1d:42:72:
aa:d8:3c:55:86:eb:59:f4:f4:b2:0a:c2:e6:b2:c0:d9:4c:45:
8d:46:67:16:7d:bf:8e:3d:f8:dc:36:d0:61:b7:e3:13:be:d2:
3a:a9:24:ed:b7:d2:78:14:af:4f:b3:55:81:f2:21:2a:ef:ac:
6a:6c:1a:ca:26:2d:22:5a:53:37:65:f9:e3:1f:3d:26:6f:85:
27:3a:86:11:54:bb:4a:57:7f:69:04:4d:1a:90:3f:2a:ca:00:
a2:08:b6:9b:04:cd:49:d7:2e:97:e4:74:b2:7b:c6:9d:1e:94:
a8:7a:27:96:06:7a:9c:73:06:90:0c:75:0f:b1:4a:29:48:97:
9d:60:8c:bc:62:e7:63:b9:3c:b8:7e:e4:72:2b:8f:7d:80:95:
ef:66:a0:9f:0c:df:c4:9e:86:41:f0:ce:07:4f:e9:f8:85:ae:
d1:c3:35:58:ba:12:cb:2f:30:d9:a1:6d:4e:85:33:9a:64:63:
f8:01:bb:43:b2:de:f8:eb:c5:1e:4d:64:8a:3e:12:40:9f:c2:
2e:d6:48:33:15:d8:e4:b0:a7:fe:cc:6c:ce:7e:2f:f2:d3:32:
b1:dc:e7:58:8d:71:ea:22:93:c7:bb:95:b3:27:22:9d:6a:bb:
2a:46:5d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:12 2026 by rpki-client