Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: UWLtYng0nnfF04XxwLQHj8gKZcP7qvUou3bjA3qhbuk=
Subject key identifier: 3D:99:93:D2:81:EE:F6:6B:22:B4:8F:6D:AB:05:BA:20:0C:C5:8D:D5
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 019D37F6E650AD47E443C82F8B636BD7143C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 1766
Signing time: Sun 29 Mar 2026 05:00:20 +0000
Manifest this update: Sun 29 Mar 2026 05:00:20 +0000
Manifest next update: Mon 30 Mar 2026 05:00:20 +0000
Files and hashes: 1: 7H6l8W7mloQmdCFME5bjkjpVqlI.roa (hash: T59Tl9zcDPQTjILJPoiX/wQPlxPSK4JPOrKNgwU40yY=)
2: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (hash: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8=)
3: qPRMij18b3UBdhNaWj9X6XYBXVk.roa (hash: FnJYS8FAenTkSU7Qc1cYhhd/LFBxGNSv7vOsAQbJDN8=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: aeZPy69QQrFy3FqZB4J4h5thGaagcB/XeK62DDu5F54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e6:50:ad:47:e4:43:c8:2f:8b:63:6b:d7:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Mar 29 05:00:20 2026 GMT
Not After : Mar 30 05:00:20 2026 GMT
Subject: CN=3d9993d281eef66b22b48f6dab05ba200cc58dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:79:59:3f:11:f0:cd:ef:ff:29:53:e0:94:
40:5a:a7:7a:5c:9f:98:7a:5d:c1:85:af:84:41:73:
5c:57:9b:28:04:9d:a5:a6:a8:35:8b:4f:43:f9:48:
65:33:32:75:cb:df:47:37:89:f4:be:58:15:3a:25:
10:e5:c3:2d:8f:59:d8:dc:4d:b1:de:ec:b1:3c:a6:
52:1f:2f:a1:bf:f1:d2:10:d8:23:38:7d:2e:2d:68:
74:6b:4f:63:16:fb:06:96:94:e5:72:55:8a:4e:63:
29:30:eb:37:8e:51:56:69:b8:f8:83:64:5f:02:6a:
47:c7:5d:0a:f2:cd:12:ea:5f:91:10:16:56:40:7c:
ed:b5:fe:2d:9d:f4:85:4c:06:ab:a2:36:20:7c:83:
05:86:0d:93:ab:4c:6f:89:b9:84:c6:e6:81:7c:74:
62:50:d9:34:a7:81:b6:fe:4e:2c:54:93:d4:c8:ba:
51:2f:66:9f:df:4f:f1:46:ed:3d:70:a1:fa:20:5b:
55:7c:3b:f4:5b:40:6e:e8:1d:94:d6:3b:34:1e:14:
63:ed:40:40:9d:80:61:d7:8d:9e:77:fd:02:6c:59:
15:88:a2:2f:08:d4:15:ce:a1:79:87:7d:0a:38:3e:
52:c4:e8:c9:9b:f4:d7:f4:45:17:c3:94:a3:cf:2f:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:93:D2:81:EE:F6:6B:22:B4:8F:6D:AB:05:BA:20:0C:C5:8D:D5
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1a:b6:1d:12:c4:0a:34:8e:4d:27:96:00:70:49:4b:8d:5d:
23:52:cb:1f:bf:45:cb:b9:b0:75:ed:a7:ac:b9:dd:26:d2:f1:
bb:57:fe:bc:74:79:8a:52:f4:28:29:d1:49:8d:d1:ed:18:5d:
af:06:ab:07:3b:c4:36:6c:c0:70:de:08:b2:62:ff:b5:d0:90:
78:07:ca:60:37:ff:22:a4:af:c1:17:b3:3a:60:62:4f:db:ed:
c8:62:da:45:7f:e6:d9:58:2d:df:10:0c:d7:36:f9:68:a4:c5:
ea:13:12:57:67:ff:f6:3b:45:18:8d:6d:f9:24:41:c8:3a:60:
7c:1f:03:c4:2b:40:87:77:a7:0c:93:e4:d9:83:d8:8b:cd:14:
31:10:7f:cd:74:ec:0c:0e:54:17:4b:9a:3f:07:92:14:93:c7:
1d:aa:ba:86:e1:59:9f:47:0b:36:96:b5:b0:d0:ab:40:df:d9:
57:0a:a1:83:19:bb:60:fb:2d:bf:89:ed:b5:7a:bc:ed:b4:4b:
83:ff:6f:35:9b:1f:28:b3:8d:23:40:e8:2c:46:4c:bd:73:ed:
b5:b4:43:a3:ae:8d:fb:ed:be:37:12:57:a0:f1:e0:d4:0e:01:
50:95:16:97:18:d9:ff:9d:d7:79:2f:29:7c:67:b4:39:0a:f2:
f4:e8:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client