Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
File: u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft (raw, json)
Hash identifier: qcthThzh0pHL0B61W3H2Q556Ot5L3Xe0scgUWBRsfjU=
Subject key identifier: 3B:78:78:BE:A0:BE:C9:96:3E:58:23:FC:23:D9:04:58:5B:8D:2C:78
Authority key identifier: BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
Certificate issuer: /CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Certificate serial: 019D3865FCA9DCBE8C477479054B823779C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
Manifest number: 0280
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: SGCJMFXuQqkQ66hRX-BwbZShDeQ.roa (hash: fC7zF6FRItdVCOIIyCz7wcwPMyIF6QXNLXbJU6mx+1Q=)
2: u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl (hash: eebeX//7gKGP10iGmPFiWiTDur2D/0pHhtBUP7O8hsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fc:a9:dc:be:8c:47:74:79:05:4b:82:37:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7f3bfb4ed53e59cef8c4584b627470b60a820
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=3b7878bea0bec9963e5823fc23d904585b8d2c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:c4:fb:69:cc:18:15:f7:bc:ab:61:0d:99:
de:b1:2f:86:0c:c1:17:1d:75:43:db:5c:37:8b:b3:
b1:61:b6:1a:32:16:96:c5:dd:e2:50:92:9e:d6:0a:
d1:26:bb:f2:95:5f:ce:3e:b3:ed:1f:b7:75:7b:98:
5d:88:a1:3b:ce:10:a5:ca:b4:c3:a2:8e:f2:ce:0e:
c5:47:c9:07:22:9b:ac:01:a2:f1:3d:02:6b:f0:a0:
e5:55:c8:6c:29:50:fc:fc:42:94:b5:08:07:c0:76:
7f:76:b6:57:0d:6d:49:e5:c2:3c:38:6c:52:47:ec:
7c:67:4a:08:3d:1c:fe:f3:5f:53:9c:1c:eb:8f:46:
59:be:7a:5a:c4:c2:bc:3a:f6:b1:a4:7b:c7:96:5b:
17:3f:a6:e7:90:1e:d2:0c:24:d9:24:b6:b3:04:fa:
7b:4f:07:94:e8:79:7f:6e:91:c1:2a:3a:40:93:87:
57:32:58:1a:8e:ac:82:5e:83:a2:f6:08:bf:02:35:
25:78:2a:ed:78:9d:34:59:99:24:b1:72:14:41:81:
93:1d:33:a6:69:fc:d8:df:a9:25:bc:ea:e7:22:0c:
02:9d:c0:eb:5e:95:68:3d:63:f3:5a:cc:c7:3a:04:
65:4f:68:d9:2f:84:93:87:aa:0b:9d:13:79:ef:21:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:78:78:BE:A0:BE:C9:96:3E:58:23:FC:23:D9:04:58:5B:8D:2C:78
X509v3 Authority Key Identifier:
keyid:BB:F7:F3:BF:B4:ED:53:E5:9C:EF:8C:45:84:B6:27:47:0B:60:A8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_fzv7TtU-Wc74xFhLYnRwtgqCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2ef040-a617-4c91-8038-3d485b7cdf5c/1/u_fzv7TtU-Wc74xFhLYnRwtgqCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:62:65:e9:53:3f:89:9e:a6:82:b8:5e:e7:7a:08:51:f2:51:
6a:14:71:62:9e:e2:7c:a6:56:bf:bf:f3:08:77:94:9d:77:cf:
fe:a8:07:65:a5:35:65:02:94:8a:ba:e1:46:74:a4:f4:5f:aa:
06:1d:76:ec:22:d5:16:db:9f:3c:dc:4a:ee:6d:e9:e0:0a:20:
aa:a9:e6:ef:53:cb:8f:21:8e:b4:1a:5a:70:54:9a:a4:7e:1d:
5a:3e:95:3c:b5:f6:6e:fb:d4:46:13:f6:7c:67:28:3d:22:13:
6a:0e:9f:9f:87:f8:19:fd:91:b3:f3:ff:fd:2f:1f:08:ea:b5:
c7:3e:92:68:0b:48:75:6d:2d:4a:1b:07:75:76:7c:ac:c2:25:
74:2e:a2:a7:1f:dc:18:9e:93:4f:05:ef:02:13:7c:40:f8:31:
e1:e9:1d:c2:16:60:c9:01:ab:79:9c:79:62:c5:fb:7d:f6:99:
87:32:18:03:bf:12:b6:fe:7f:69:f2:cc:85:a4:a9:18:7a:86:
05:3a:32:fa:63:1a:53:ab:df:86:c3:77:59:a8:2a:87:14:03:
28:ba:c2:a1:8a:0e:b0:98:a0:96:18:bc:f7:6e:aa:72:2b:c9:
a0:f2:bd:13:9c:6b:a8:f2:7d:f5:8b:96:aa:ae:53:b6:a3:3b:
9b:e0:3b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zfyp3L6MR3R5BUuCN3nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdmM2JmYjRlZDUzZTU5Y2VmOGM0NTg0YjYyNzQ3MGI2
MGE4MjAwHhcNMjYwMzI5MDcwMTQwWhcNMjYwMzMwMDcwMTQwWjAzMTEwLwYDVQQD
EygzYjc4NzhiZWEwYmVjOTk2M2U1ODIzZmMyM2Q5MDQ1ODViOGQyYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/nE+2nMGBX3vKthDZnesS+GDMEX
HXVD21w3i7OxYbYaMhaWxd3iUJKe1grRJrvylV/OPrPtH7d1e5hdiKE7zhClyrTD
oo7yzg7FR8kHIpusAaLxPQJr8KDlVchsKVD8/EKUtQgHwHZ/drZXDW1J5cI8OGxS
R+x8Z0oIPRz+819TnBzrj0ZZvnpaxMK8OvaxpHvHllsXP6bnkB7SDCTZJLazBPp7
TweU6Hl/bpHBKjpAk4dXMlgajqyCXoOi9gi/AjUleCrteJ00WZkksXIUQYGTHTOm
afzY36klvOrnIgwCncDrXpVoPWPzWszHOgRlT2jZL4STh6oLnRN57yHRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt4eL6gvsmWPlgj/CPZBFhbjSx4MB8GA1UdIwQY
MBaAFLv387+07VPlnO+MRYS2J0cLYKggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgt
M2Q0ODViN2NkZjVjLzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yZWYwNDAtYTYxNy00YzkxLTgwMzgtM2Q0ODViN2NkZjVj
LzEvdV9menY3VHRVLVdjNzR4RmhMWW5Sd3RncUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmJl6VM/
iZ6mgrhe53oIUfJRahRxYp7ifKZWv7/zCHeUnXfP/qgHZaU1ZQKUirrhRnSk9F+q
Bh127CLVFtufPNxK7m3p4Aogqqnm71PLjyGOtBpacFSapH4dWj6VPLX2bvvURhP2
fGcoPSITag6fn4f4Gf2Rs/P//S8fCOq1xz6SaAtIdW0tShsHdXZ8rMIldC6ipx/c
GJ6TTwXvAhN8QPgx4ekdwhZgyQGreZx5YsX7ffaZhzIYA78Stv5/afLMhaSpGHqG
BToy+mMaU6vfhsN3WagqhxQDKLrCoYoOsJiglhi8926qcivJoPK9E5xrqPJ99YuW
qq5TtqM7m+A7Gg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:13 2026 by rpki-client