Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: qOKPErG2udYjUKu9L2bVVtEnl6y1857AuIC4EEpQx4A=
Subject key identifier: 14:1B:FB:D0:3A:81:2E:40:3C:54:52:D0:E6:39:9B:62:BF:63:81:EE
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019E7FD709C0DA93078D63237063F5930EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1658
Signing time: Sun 31 May 2026 21:00:59 +0000
Manifest this update: Sun 31 May 2026 21:00:59 +0000
Manifest next update: Mon 01 Jun 2026 21:00:59 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: k+KrMpKcGvQYO9hpu/Z59bKiru6p+A1GXDDtPRj0Fsg=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:d7:09:c0:da:93:07:8d:63:23:70:63:f5:93:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: May 31 21:00:59 2026 GMT
Not After : Jun 1 21:00:59 2026 GMT
Subject: CN=141bfbd03a812e403c5452d0e6399b62bf6381ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:92:e5:cf:5d:7c:3c:a3:d6:48:5e:49:06:b0:
f1:b8:1f:ce:88:62:e3:93:17:97:8a:2d:26:55:f5:
88:b2:fe:b0:39:2a:aa:e1:53:69:87:15:3f:b4:f0:
38:2e:da:81:ae:7d:7b:62:d3:20:aa:77:53:e3:9a:
61:ae:52:79:d0:cf:d0:04:8b:03:93:fc:64:2b:08:
dc:b3:97:71:d6:a8:c3:8c:14:eb:d6:e7:c3:6e:3f:
90:cf:c5:b3:ca:2e:1f:29:7a:7f:fe:3b:f7:3c:48:
a3:92:79:bc:cd:d1:67:79:58:a2:2f:df:d8:7b:3a:
23:a8:a4:b8:30:93:fa:e2:ee:be:9d:39:01:0e:c7:
6d:f1:7f:d3:1a:a0:4b:81:cd:9e:b6:2b:42:be:be:
16:52:b6:73:5f:46:c7:5b:5b:d2:2f:3d:3c:b8:da:
3c:30:61:49:ca:66:17:6a:8f:bd:12:da:ea:37:7f:
37:5f:61:fe:87:69:c1:f1:6e:1e:87:42:50:e4:44:
2f:6f:de:be:12:1a:ee:d7:4b:8f:15:1f:db:70:d6:
e7:3b:4b:8a:c0:ed:f1:6a:b6:d5:a0:7c:ba:6f:e4:
6e:51:ba:6d:e7:8c:52:73:67:fc:0f:b8:b4:79:9f:
7e:f3:c2:cb:14:23:cb:b2:fe:96:4a:53:5e:76:d3:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:FB:D0:3A:81:2E:40:3C:54:52:D0:E6:39:9B:62:BF:63:81:EE
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:36:4f:e1:eb:48:ab:b0:ca:59:aa:0f:39:17:30:66:8a:
76:d6:c7:2d:1e:6c:7c:fd:10:f4:7d:f0:17:51:19:8d:90:fa:
0c:bb:4c:c1:3d:a3:1d:97:15:a3:d3:86:33:69:cb:cf:ee:83:
f5:a2:a5:15:a3:ab:c2:b5:88:27:ff:e5:3f:05:20:0c:08:e9:
76:48:2e:f1:af:a7:bb:69:26:4a:99:a6:a4:73:b1:fa:6c:c5:
d3:0e:1d:78:9f:0a:03:89:8d:89:14:a7:aa:3b:4c:83:33:b7:
92:8a:f2:d2:16:91:e9:bf:42:98:93:c7:c2:1e:2f:e3:1f:90:
2f:7e:fe:1f:fe:0b:61:cb:90:bb:23:5f:27:b2:10:2b:ea:4b:
bd:99:ba:84:4e:f8:70:74:e2:31:40:b8:f5:63:da:2d:63:6b:
65:6c:08:e3:94:d8:79:0f:84:b6:68:f8:6c:05:36:7c:85:8a:
67:ab:fe:b2:5c:25:04:fa:b9:de:12:7b:4c:aa:cd:84:cc:8a:
b8:87:be:af:09:cc:cb:c4:c3:c2:b7:5e:a8:55:25:26:1a:0d:
46:84:69:9f:12:3a:ed:0a:f6:7d:43:a5:56:34:1e:cc:e3:13:
fc:21:c7:d9:b9:f1:e6:3e:69:5c:2f:c2:3a:bf:6d:2c:4e:73:
ba:aa:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 04:38:51 2026 by rpki-client