Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: mGfBdTVXNpiM4rODUVo0cxls3PnqEAo+j0F7XAuoMjQ=
Subject key identifier: 1C:39:8E:C6:1D:46:AF:85:FD:41:7C:01:CA:06:6C:16:5A:C8:FD:2E
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019EF0B50AC43A6DC0DD5683CE369E309B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 17C8
Signing time: Mon 22 Jun 2026 19:00:56 +0000
Manifest this update: Mon 22 Jun 2026 19:00:56 +0000
Manifest next update: Tue 23 Jun 2026 19:00:56 +0000
Files and hashes: 1: e9599L9ny9UV4AthdrySgjWWRfY.roa (hash: w2tYDeATkvXbeHWaWyKizc90tHXCmX/rUf5tN2rCNto=)
2: jaE8nn1rO58pvqUua1UrZ-d0dAA.roa (hash: Sx5Ur+2c1QVItDTXbKf1TR4pTl+o+P/WqOx/ljx3+2U=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: zDk+FjPj5Cr5HiOEin25ZH5ppsIShR0/9UqExbjJ6wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:b5:0a:c4:3a:6d:c0:dd:56:83:ce:36:9e:30:9b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Jun 22 19:00:56 2026 GMT
Not After : Jun 23 19:00:56 2026 GMT
Subject: CN=1c398ec61d46af85fd417c01ca066c165ac8fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:4b:62:88:0f:8e:eb:06:c3:87:dc:63:a0:
bf:5d:5d:52:91:04:6c:ab:17:d8:a7:b6:d4:f7:ad:
10:be:1c:4b:78:84:98:d6:ef:fe:db:43:d1:6b:66:
a7:0b:2f:a2:b3:38:12:60:54:9b:74:8b:18:f0:19:
81:32:b0:16:dd:e7:94:2e:4b:93:29:9a:80:ea:f0:
de:37:21:40:6e:bf:dc:10:2f:b7:28:77:c6:32:19:
4b:6e:b4:2a:b9:f7:79:29:24:8b:c0:b0:94:9c:ad:
74:34:15:09:84:da:9c:a8:ff:92:6e:d6:72:0d:74:
3f:dd:ab:2a:84:91:37:43:59:67:1b:4d:03:79:14:
d3:53:81:0e:b9:77:29:25:d3:58:4a:8f:76:23:4c:
64:27:40:ed:3f:8f:e8:a0:9d:d9:c1:e8:fb:05:ea:
1a:cd:38:7d:0f:40:18:4b:07:06:eb:c7:9e:dc:85:
a8:01:68:f6:14:73:b6:da:97:84:5b:03:41:89:c1:
d0:e0:67:5d:41:00:38:a3:02:73:f9:b3:e4:d1:20:
a7:49:52:dd:9c:35:35:3c:34:1f:d1:fd:1f:82:8c:
03:b8:9e:60:d4:c2:b9:63:23:14:4d:e8:e5:b4:07:
a8:84:f0:a2:9c:37:9a:8c:78:e5:4c:46:2b:7c:85:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:8E:C6:1D:46:AF:85:FD:41:7C:01:CA:06:6C:16:5A:C8:FD:2E
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:62:29:9f:1d:a3:da:87:db:3b:d0:99:de:87:f2:52:9b:
f8:fe:11:d1:20:4c:e1:37:95:e3:3e:d7:28:40:1d:fb:ca:36:
9d:04:0d:58:38:fe:ce:e3:b8:d7:c4:9c:f7:3c:8a:4e:6f:1a:
c5:32:71:54:02:2a:e0:2c:ae:9c:83:4a:c8:fe:e6:4d:b4:de:
9f:76:09:fc:86:16:ec:b4:cf:af:43:56:00:e8:00:c5:29:71:
93:71:c7:e5:88:21:a8:a4:b9:08:95:f2:f4:41:28:2a:9f:d1:
4e:e1:ab:33:84:10:2c:b5:12:e9:e3:61:dc:c2:34:17:36:39:
ac:58:4e:6e:75:65:0a:e1:bf:cc:f4:29:2c:8f:d4:08:bb:f0:
cc:85:23:2d:60:81:78:bf:f1:a8:46:41:4a:f9:72:f6:2c:3f:
20:eb:26:95:ef:e8:9c:33:97:a3:9b:8c:29:b5:f8:83:5e:55:
03:fe:bd:ed:bf:20:e9:90:12:54:58:0b:18:16:e5:da:75:50:
9f:f2:bb:ec:2c:28:94:88:e2:c5:6b:bf:3c:e2:53:93:80:a6:
63:b2:10:89:0b:7f:3e:db:14:50:a2:6d:ab:3c:1f:ef:ba:b9:
e3:66:cc:56:dc:b7:77:cb:fa:5a:3f:59:d8:04:7b:9c:a3:de:
a2:03:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:55:56 2026 by rpki-client