Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: BXLeDkj6xuliGll8HWhgbJGDRbmq/gMthBker3BerCU=
Subject key identifier: C0:56:66:5E:87:F2:92:2C:A2:97:46:40:51:82:9B:9D:EA:C2:D6:50
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 019D3977D2E1BA744C33FEABEA71CCFB5108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0BC2
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: uIo95toyzTsPJRhnwDkZJwBSVlU.roa (hash: H/MmcUvrGoaPLtgLMTpLeQaEN4NDpxo/KSd9m/v1Q2I=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: UfEnFdNy+4lmWMiQXeH9ZelM136K5/K0sTrmiOlZ9ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d2:e1:ba:74:4c:33:fe:ab:ea:71:cc:fb:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=c056665e87f2922ca297464051829b9deac2d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:04:71:8d:ee:30:4e:5c:6a:be:6a:5a:54:
d6:54:f3:69:83:89:52:81:e1:6d:1b:91:af:99:89:
d5:a5:65:66:26:57:ef:bc:42:b8:9e:04:ab:42:9f:
18:f7:80:01:b9:e9:5c:f5:b3:db:a7:f0:d3:47:6a:
99:52:b5:de:88:0a:e2:d1:f4:75:f5:4b:3b:e4:f9:
14:66:f7:59:58:5a:78:3a:c4:b9:1d:1b:09:80:5b:
1e:1f:29:15:f1:86:0a:42:ac:10:ec:78:5d:27:10:
3b:05:43:4e:b0:46:a8:43:49:f0:3a:2d:24:46:7c:
7c:85:93:64:90:b9:b0:0d:95:15:be:e2:59:af:57:
b8:fd:21:b2:78:61:d5:eb:cd:ec:6b:6a:76:19:27:
90:45:7c:b6:c6:31:16:ea:76:90:fe:1c:f1:34:7a:
b8:fb:84:a3:5f:19:77:b1:86:92:92:1b:a8:d6:7f:
e5:f5:b0:64:de:9d:10:f3:51:c5:7a:77:dd:27:ae:
76:ee:63:d4:f1:1c:8a:eb:10:4e:42:c1:eb:ad:c8:
fa:2a:16:27:f7:ba:65:41:43:40:bf:5c:94:a7:4f:
e0:59:9c:f9:ee:71:43:de:e1:4c:14:97:06:4a:2f:
d4:17:18:7e:98:2d:11:cc:bc:c5:f8:a0:d8:5f:5c:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:66:5E:87:F2:92:2C:A2:97:46:40:51:82:9B:9D:EA:C2:D6:50
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:d8:ce:a0:d0:74:5d:c2:c9:b2:6b:b5:9f:b5:1d:e8:0e:66:
d7:9f:16:3a:bd:ee:a2:5d:f0:30:33:b1:fd:88:f4:34:fd:43:
1d:6b:b7:75:6b:24:29:40:a2:d5:28:b2:85:89:cf:1a:f9:36:
71:e0:a8:59:23:80:5f:e9:d0:9f:cc:49:58:84:89:ba:d6:22:
6b:95:24:ca:c7:32:fe:59:83:6f:c8:8b:aa:91:38:32:06:f7:
2f:81:69:11:65:ff:8c:8f:55:91:8f:4e:79:7e:f4:ea:1f:80:
c8:6b:f6:9e:66:ba:d2:4c:67:af:19:04:52:83:c4:fd:3b:67:
82:f0:d9:c9:39:a6:e5:38:9f:8f:da:b9:64:89:af:d6:3e:0c:
94:aa:0d:07:7c:45:74:7f:7e:76:6b:2f:db:68:cd:15:e3:17:
f0:14:0b:e0:28:81:fa:9c:6b:97:fe:cd:45:c1:56:a4:3a:e5:
aa:7c:97:c8:b9:ca:f4:64:0e:74:66:7c:d4:55:e3:8b:76:d4:
39:d3:fa:a6:f9:dd:e1:80:d3:76:95:67:bb:47:4a:9c:59:31:
43:a4:87:60:eb:d2:1c:38:a8:00:34:97:fa:4b:07:79:b3:9f:
bb:bf:70:06:10:f6:bd:56:e2:6f:56:4c:15:10:a5:3b:d7:d1:
af:40:d8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:45 2026 by rpki-client