Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: rQcZOOyi3VaDoEgtw5Ks0DPnrYGiM0kxuXB91CkIsoA=
Subject key identifier: 43:72:F3:65:A6:DC:4C:16:F1:42:47:49:39:31:F3:C2:89:AD:A5:1C
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 019FCD826167E0FD36DB8E424CA10D3651D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 09B8
Signing time: Tue 04 Aug 2026 16:01:41 +0000
Manifest this update: Tue 04 Aug 2026 16:01:41 +0000
Manifest next update: Wed 05 Aug 2026 16:01:41 +0000
Files and hashes: 1: angOMGRdc3adpd1I_is4-dwikO4.roa (hash: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: +saiBWq/P0RR8VJl/htBLNWiqRwGR/O7Sjq/41v26wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:82:61:67:e0:fd:36:db:8e:42:4c:a1:0d:36:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Aug 4 16:01:41 2026 GMT
Not After : Aug 5 16:01:41 2026 GMT
Subject: CN=4372f365a6dc4c16f14247493931f3c289ada51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:85:af:d7:8a:24:6a:9c:e6:94:c3:71:f1:
e8:ba:85:e1:cd:3e:ff:b9:59:22:13:e5:25:7d:70:
2f:e0:0d:6d:56:16:08:f3:f2:ed:3d:7b:fd:f8:f3:
33:9e:03:a4:cb:62:66:82:17:e6:ad:1a:07:f2:fb:
a0:49:3b:3d:58:49:f6:e7:30:8a:37:b2:73:8d:da:
78:b5:1f:00:70:59:13:94:e9:f1:07:cf:86:30:b5:
00:e4:dd:3f:86:97:10:c5:7a:35:f2:25:39:6c:8c:
cf:5c:3e:a6:8c:c4:c5:43:4e:2a:cf:4f:73:32:57:
c1:b1:12:21:8e:d3:84:9f:59:99:84:0a:90:7f:23:
c1:01:bf:47:c2:11:ac:6d:29:e0:2b:27:ff:f9:c5:
99:91:c1:76:dc:a4:bd:a5:1f:d4:e2:1a:bf:80:e9:
d5:d7:03:2e:18:3a:59:e6:af:f1:99:57:39:36:3c:
84:64:88:85:42:69:ea:4a:f0:ea:d1:10:75:9f:01:
d3:d7:04:cc:38:5d:72:71:18:72:8f:ac:97:80:92:
34:05:3a:f3:c0:99:ed:99:3d:2d:91:2c:3d:c0:0b:
d4:82:44:6b:59:41:c9:6b:73:c3:be:f3:3e:1c:4e:
13:7d:0c:4a:9a:51:97:c7:a7:27:c1:e8:4e:94:ca:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:F3:65:A6:DC:4C:16:F1:42:47:49:39:31:F3:C2:89:AD:A5:1C
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:93:f3:30:ed:33:e0:41:77:da:77:32:e7:20:2d:a0:11:
72:55:a2:00:f2:fe:47:fa:24:35:e3:bd:2a:0d:97:08:1b:b1:
f4:a9:ad:58:4d:2c:83:52:ca:fb:d9:56:15:53:10:95:97:d3:
17:06:b7:8c:c2:2f:36:f9:28:6f:fc:ef:c4:c5:15:01:cd:39:
a9:25:f6:a6:19:74:da:d9:4e:a2:95:95:4e:66:29:eb:a9:dc:
d4:dc:4f:30:04:d0:b0:63:d5:8b:bb:8f:56:b3:66:57:68:47:
09:f3:50:6a:b4:ed:99:56:b9:b0:25:f8:0f:b7:69:7d:00:a0:
a5:e5:df:ab:ca:3f:98:b6:10:8f:3f:7e:44:aa:ee:c4:04:ae:
8c:19:c9:81:f4:d0:cd:48:80:b6:fd:27:f7:f1:e9:73:d2:5b:
62:72:da:f2:99:72:d5:88:96:a8:1e:bf:0d:d1:6e:de:2f:8e:
e5:09:17:12:5b:2b:e9:c0:e0:e3:3c:3f:b4:fa:81:7b:5e:b9:
33:f6:0b:24:1e:4d:cc:eb:39:59:6a:db:7e:e2:e4:52:2b:1e:
48:49:ba:64:31:d3:b6:7e:ff:cd:9c:0d:c0:55:7d:2b:b3:bf:
e3:7b:45:c3:b9:d5:1e:c4:ef:1a:55:8d:a1:52:e0:3d:a2:f3:
e8:5a:5a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NgmFn4P02245CTKENNlHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm
NDE0NzMwHhcNMjYwODA0MTYwMTQxWhcNMjYwODA1MTYwMTQxWjAzMTEwLwYDVQQD
Eyg0MzcyZjM2NWE2ZGM0YzE2ZjE0MjQ3NDkzOTMxZjNjMjg5YWRhNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp52Fr9eKJGqc5pTDcfHouoXhzT7/
uVkiE+UlfXAv4A1tVhYI8/LtPXv9+PMzngOky2JmghfmrRoH8vugSTs9WEn25zCK
N7Jzjdp4tR8AcFkTlOnxB8+GMLUA5N0/hpcQxXo18iU5bIzPXD6mjMTFQ04qz09z
MlfBsRIhjtOEn1mZhAqQfyPBAb9HwhGsbSngKyf/+cWZkcF23KS9pR/U4hq/gOnV
1wMuGDpZ5q/xmVc5NjyEZIiFQmnqSvDq0RB1nwHT1wTMOF1ycRhyj6yXgJI0BTrz
wJntmT0tkSw9wAvUgkRrWUHJa3PDvvM+HE4TfQxKmlGXx6cnwehOlMpOYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENy82Wm3EwW8UJHSTkx88KJraUcMB8GA1UdIwQY
MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt
NjRiMGU2MTRkMDA0LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0
LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwOT8zDt
M+BBd9p3MucgLaARclWiAPL+R/okNeO9Kg2XCBux9KmtWE0sg1LK+9lWFVMQlZfT
Fwa3jMIvNvkob/zvxMUVAc05qSX2phl02tlOopWVTmYp66nc1NxPMATQsGPVi7uP
VrNmV2hHCfNQarTtmVa5sCX4D7dpfQCgpeXfq8o/mLYQjz9+RKruxASujBnJgfTQ
zUiAtv0n9/Hpc9JbYnLa8ply1YiWqB6/DdFu3i+O5QkXElsr6cDg4zw/tPqBe165
M/YLJB5NzOs5WWrbfuLkUiseSEm6ZDHTtn7/zZwNwFV9K7O/43tFw7nVHsTvGlWN
oVLgPaLz6Fpa3A==
-----END CERTIFICATE-----
Generated at Tue Aug 4 20:12:40 2026 by rpki-client