Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: /nF3pz8HQSHCQ15xvaHBO9ibnUO0gjhVw553FTW96Dc=
Subject key identifier: A5:9E:A4:4D:90:8E:12:E0:C4:6E:88:16:97:88:DF:94:CD:7D:46:37
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019CB2B6C3CD25996D24C6C874A13679F317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 169E
Signing time: Tue 03 Mar 2026 08:00:47 +0000
Manifest this update: Tue 03 Mar 2026 08:00:47 +0000
Manifest next update: Wed 04 Mar 2026 08:00:47 +0000
Files and hashes: 1: O4qisZjMz_TlzxauHwEfDI5TsP0.roa (hash: muXbteFHgChoq3WJN/PDx8uR8jDZ4/OEJL5H/qtfY98=)
2: uO8v4qEzsPiIb_H7c9t8DjNxgOA.roa (hash: nUJy2fer8h/4jVRpU3LmVramNvZUAM8xqmb4QHsCcQI=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: AJzn+aBHaiEBi8XIR2PxFxr75QHLcYAkxzzlCzRduKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:b6:c3:cd:25:99:6d:24:c6:c8:74:a1:36:79:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Mar 3 08:00:47 2026 GMT
Not After : Mar 4 08:00:47 2026 GMT
Subject: CN=a59ea44d908e12e0c46e88169788df94cd7d4637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:15:ba:24:39:3a:ef:3a:a0:d7:c9:b9:d0:
6e:d2:c9:dd:17:01:02:73:e2:c2:75:8d:a4:66:85:
0a:8e:68:30:0d:c3:d1:09:04:8e:2f:93:8d:5e:06:
63:c9:f2:78:d5:4d:d2:5c:ab:4e:71:be:4d:88:e3:
79:dd:c1:84:4f:32:16:b7:5d:e5:29:b9:53:93:c6:
f4:2e:32:3c:bd:d0:06:39:1f:87:e7:ea:bf:20:1b:
9e:d6:7b:da:66:8d:d4:ca:ec:13:62:2f:aa:16:d1:
bf:62:99:cc:63:54:c5:b7:32:63:e3:c4:45:3c:6a:
83:a4:23:2e:11:a8:8c:8e:a5:1e:e4:53:99:a0:36:
73:a0:c4:6c:0e:b9:57:f2:3b:62:24:51:04:29:61:
85:16:48:03:c2:c3:5f:e7:43:08:8d:2d:4f:7e:0c:
04:18:3d:1c:ae:b9:e1:f1:8a:4f:ea:d0:c0:64:d3:
07:81:8b:63:b7:1e:11:94:bf:d3:34:2c:d9:83:61:
8e:21:a0:11:1f:92:67:9e:ec:67:9a:91:43:d8:9b:
53:54:6d:b5:9c:2b:24:42:91:fc:2e:57:d7:6b:d2:
0d:de:c1:20:a2:20:b0:ff:f5:5a:11:d5:ba:a4:be:
66:99:a7:68:8e:cb:ea:69:81:97:80:df:6c:37:63:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:A4:4D:90:8E:12:E0:C4:6E:88:16:97:88:DF:94:CD:7D:46:37
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b3:d8:5e:0d:89:aa:90:87:d2:42:a2:44:19:51:27:4b:1e:
e3:3d:13:13:a7:be:5a:e1:d6:df:d9:28:2e:34:97:3d:3d:02:
9a:44:0a:0f:81:7a:26:46:ef:b7:0f:c9:95:82:d8:86:a5:4b:
fe:e9:95:82:af:7c:dd:18:9f:e6:cd:82:81:4d:2a:52:e1:78:
8e:c6:ba:a0:2d:d5:f8:58:2d:75:aa:fd:fa:53:b6:e8:b8:1f:
08:e6:a6:dd:09:56:d3:7e:07:44:f2:d1:dc:98:9d:a0:9e:ee:
43:01:67:a3:45:ca:92:e8:39:6f:2d:11:51:a1:f9:00:de:4d:
5e:39:64:b4:ba:19:71:bc:0f:8d:3e:0a:8d:8b:de:15:a8:7a:
bd:2a:07:7d:f3:93:7c:83:5f:07:f0:36:da:ad:b8:6c:ab:d6:
b8:9e:66:83:4c:36:fa:7a:6c:05:1a:17:b8:40:6c:3c:79:4e:
00:51:93:aa:06:c6:33:4b:44:10:5a:bd:bf:72:6b:86:08:16:
24:b1:01:50:83:00:05:ab:4f:80:94:1e:ea:a3:fc:39:a9:c4:
6e:4f:80:03:45:3d:93:13:c8:52:02:8c:bb:1a:44:cd:7c:59:
1d:b4:19:1b:2b:b5:84:53:d9:51:db:38:20:a1:f6:33:f1:e2:
4f:cd:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:44 2026 by rpki-client