Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File: u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier: i4WKu2Vf5O7fXZGsTSujWeHoxcXcQ5FHq5zjAOGOUEQ=
Subject key identifier: 34:5C:82:C0:39:46:F8:73:F7:0B:EA:7F:9F:3C:3B:2F:31:FF:B1:C0
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer: /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial: 019D378946D041AAB6F988DD49B17CAFC9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number: 0BCE
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: OA-_Q29g0KuA0aONpveSxXZxFSk.roa (hash: tbSm3k3UWVaAwspyDOSHzLXBvf5BTv6nxCBnDZfco98=)
2: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: 0dgZaTsd63SYtMdms8TT51l+x9UlHqWy1tY2BSmsV/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:d0:41:aa:b6:f9:88:dd:49:b1:7c:af:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=345c82c03946f873f70bea7f9f3c3b2f31ffb1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:06:1f:71:04:d3:07:58:24:da:98:3a:a9:
38:53:ae:00:96:b6:ce:f6:a4:ec:9a:2d:ce:ed:18:
da:55:26:30:4d:e9:4a:6b:43:05:01:79:0b:48:c9:
29:96:17:8b:9f:ad:36:14:29:fa:9f:3d:3d:be:d1:
b5:27:b8:30:8f:2c:18:ee:79:66:3c:75:df:20:29:
84:dd:49:98:43:37:c6:5a:4e:26:7f:04:3d:6c:3a:
35:74:7f:f4:3c:c2:c7:b6:76:c8:a6:e2:18:4f:9a:
bf:f9:d1:b9:1d:cc:95:de:b9:0f:0a:14:cb:1a:68:
d7:01:11:2d:cf:e2:05:43:99:d3:ca:30:d9:00:45:
82:e3:a5:ec:a6:12:1e:46:d6:27:de:94:cb:41:42:
1e:1b:5b:80:1b:85:4c:26:9a:76:52:c5:6e:dd:16:
58:4d:a9:47:16:91:18:93:36:8e:6e:34:36:c4:7c:
7c:98:cc:a1:7c:d9:9c:84:31:c6:48:e8:ca:8b:16:
09:ac:02:ea:12:89:ca:8d:41:da:2c:33:87:54:dc:
a9:70:cd:ad:99:32:ee:07:88:27:e2:0f:92:e2:6e:
40:33:65:2f:e3:c9:fb:16:54:b2:8b:6e:3e:bf:c8:
81:24:d4:31:87:27:9f:81:2c:95:ae:87:6a:06:97:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:82:C0:39:46:F8:73:F7:0B:EA:7F:9F:3C:3B:2F:31:FF:B1:C0
X509v3 Authority Key Identifier:
keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:ac:14:67:f2:47:d0:b4:a7:56:57:38:89:f1:9f:9c:41:
9c:d7:d4:04:65:2e:77:fe:c1:48:34:e0:bc:30:25:04:62:1e:
c6:6b:2c:e4:81:a0:88:cc:4f:ba:26:1b:cd:13:fe:08:e3:f3:
04:bc:62:98:95:e4:e7:5f:f7:39:ce:ce:53:de:cb:bf:37:ab:
b4:eb:58:64:22:6f:49:65:2c:6d:8e:f5:01:a3:b2:f1:36:d0:
0b:32:75:cb:62:b2:98:40:8b:9c:20:8c:a2:e8:db:78:b9:a0:
e9:4e:aa:f2:24:ab:ab:00:fc:65:64:08:60:04:76:83:58:22:
cc:84:61:f2:68:d6:f8:60:45:81:0f:fb:02:aa:71:81:3c:52:
87:32:ea:4e:c1:56:65:01:92:42:89:56:fd:be:03:c1:2f:72:
9b:10:57:5a:89:67:56:b6:6d:de:cf:64:f2:41:e8:62:1d:09:
19:5d:52:96:b4:79:e8:e9:1c:0b:10:27:b5:10:34:b3:74:16:
01:07:76:5c:1c:f1:bb:6b:56:db:ab:90:74:b9:eb:12:2e:47:
41:c2:50:aa:fd:d4:1e:08:78:11:7b:18:6a:38:87:73:f7:7e:
86:39:9a:c4:51:27:e6:3b:5b:45:5e:43:72:02:e7:16:54:b6:
cf:60:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:38 2026 by rpki-client