Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File: u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier: 0CFkvZofgSUNTiNnteSoV+zPvc00rqYSf1frOrIrzPE=
Subject key identifier: 56:4A:C5:DF:23:7B:67:53:E3:58:4A:BA:8E:47:E7:BB:2F:F6:74:5F
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019D39AF1AAEA01867440CAADD8CB6E46D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number: 10C4
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa (hash: 8g2DS5hok2boyqGwi6mRMIyZrAjJcysDPJI7SQulhxM=)
2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: Mm2ng5SwT6cwuRZMUVHTE5uyNswKxxZ1K0b+slilL9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1a:ae:a0:18:67:44:0c:aa:dd:8c:b6:e4:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=564ac5df237b6753e3584aba8e47e7bb2ff6745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:69:91:a3:6e:51:d6:a7:bd:49:9a:10:85:
aa:e8:74:34:63:e5:13:10:19:44:0b:09:82:ba:a2:
95:62:d8:f6:cf:df:29:db:39:99:ed:40:b8:b3:50:
d0:9e:ed:96:c4:91:c6:bb:d2:05:9f:04:8a:b7:e0:
ab:88:0a:50:bc:9d:8b:05:67:c7:3b:e6:92:92:7e:
71:6c:6d:fc:6e:4d:ba:49:f8:f6:ef:1e:67:b7:3f:
64:1f:19:23:9c:6e:f5:da:17:34:15:fa:90:f7:83:
de:f5:6e:e2:03:d7:1d:e1:9e:ce:4f:33:9b:f6:81:
23:d2:4e:c4:14:d2:10:75:36:94:81:47:30:5a:8e:
aa:46:42:9c:d9:27:b7:28:dc:7e:7e:cb:27:9e:aa:
96:a6:47:dc:ec:e5:fb:c3:bb:6a:96:5c:c4:3f:bd:
64:91:21:3a:ab:47:87:f4:ca:55:49:f0:89:96:32:
ce:0a:fb:ba:01:49:07:fe:af:a9:0b:9c:01:e8:42:
6f:4a:a3:63:66:1c:ad:70:3f:4a:04:ea:9a:7d:fd:
aa:2d:f4:da:44:7b:a3:06:1d:f3:52:c2:ea:b1:00:
94:87:a6:68:d5:1c:49:97:b4:aa:6c:37:f1:e6:78:
c6:ac:a0:af:e4:e6:e0:28:54:a4:27:98:dd:95:13:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:C5:DF:23:7B:67:53:E3:58:4A:BA:8E:47:E7:BB:2F:F6:74:5F
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:79:19:1a:ab:5b:f7:26:cf:2e:2d:95:18:5b:c2:ed:d9:c9:
83:b7:6c:f2:34:e5:c6:79:be:4e:a5:f2:f7:40:fc:7d:91:39:
fd:f7:b0:53:28:9d:e5:50:0a:d5:0b:bb:0b:9c:77:83:b7:f6:
02:fc:d5:c0:69:e3:e3:39:f7:40:a7:f6:e5:d6:3d:09:27:8f:
d9:2a:da:30:6e:0b:cd:17:53:08:fd:99:bb:29:0a:60:a1:28:
48:11:36:3f:64:5f:0b:10:87:b1:cd:50:e4:fb:03:06:44:b5:
fb:57:5d:69:93:90:c9:16:e9:4a:5c:9e:a9:a9:12:1d:80:23:
76:70:39:2b:d0:61:81:90:78:03:b3:d7:60:92:c8:c1:42:17:
1a:51:72:ae:14:6d:cf:14:c2:5b:e0:2a:0a:cb:05:aa:51:57:
6b:e6:98:6a:90:2f:e2:9c:fd:15:e3:40:77:43:22:d8:08:5f:
d6:10:86:ad:9e:51:e6:75:3a:1f:16:1d:72:20:f8:0b:8a:f8:
c2:2c:5c:02:c4:a0:d4:aa:e1:38:95:ef:9e:c4:ab:3f:9b:5f:
2d:9b:aa:c8:4d:59:f5:3a:42:f1:cc:30:25:ad:cc:c4:0e:2f:
d9:9d:40:fa:06:29:ac:5c:d2:76:db:26:8d:01:00:dc:1d:90:
db:09:74:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:47 2026 by rpki-client