Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: 7NZORQNAM+4TkIqhYr7FdLEu4e75wp/C3wufPgjY9Yw=
Subject key identifier: E9:E0:17:8D:B2:F4:AB:67:E3:BB:44:40:26:08:35:06:DB:67:A0:54
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 01A002B8ABB3E4D0589FDA03B245E8DFBC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0EA2
Signing time: Sat 15 Aug 2026 00:00:52 +0000
Manifest this update: Sat 15 Aug 2026 00:00:52 +0000
Manifest next update: Sun 16 Aug 2026 00:00:52 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: LuQAFHnYkR10j5TTPnQP/FPToNqg72oPbI6ir7YfDYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:ab:b3:e4:d0:58:9f:da:03:b2:45:e8:df:bc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Aug 15 00:00:52 2026 GMT
Not After : Aug 16 00:00:52 2026 GMT
Subject: CN=e9e0178db2f4ab67e3bb444026083506db67a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:67:c6:14:28:9f:76:0f:d8:38:82:94:6d:
ce:4a:cc:c7:3e:8f:b7:87:48:bd:e9:be:5a:99:94:
d1:4e:e1:5a:1d:6a:37:9c:c7:77:10:7b:8a:19:0d:
43:c0:a2:44:10:60:f8:31:3f:85:2b:10:b7:15:b9:
6f:96:ce:ab:db:16:bf:36:e9:13:cd:26:74:d5:ea:
c4:8c:23:cc:33:d9:9d:8b:7b:63:46:5c:9b:66:e8:
46:40:8b:7e:f2:b0:81:47:dc:08:4b:57:9e:52:ed:
52:34:a1:18:50:f9:89:d4:0c:50:d0:c7:b9:e8:cf:
69:82:3c:ba:e2:77:05:75:a4:93:2d:3e:1a:85:d1:
c3:07:8b:49:80:c6:6e:87:34:16:02:c5:7e:43:f1:
ed:38:ad:cf:26:30:19:9e:60:db:3a:ff:2f:38:d8:
fd:c3:26:7c:e6:80:5f:57:f5:fe:58:e7:25:32:b9:
35:5f:b8:b1:2a:a3:b6:e5:ab:f1:70:62:bb:1f:6f:
5c:86:a0:f0:93:5d:32:f3:7a:d5:e7:b4:2c:8e:b3:
48:77:17:33:73:21:4a:93:44:ad:78:8c:70:df:39:
d5:6b:73:22:09:40:67:85:ab:c8:9a:bc:49:90:38:
57:fc:9e:a2:cd:db:22:08:4c:ca:5e:0a:a3:7c:83:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:17:8D:B2:F4:AB:67:E3:BB:44:40:26:08:35:06:DB:67:A0:54
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:97:72:5f:3d:a5:28:53:2f:9d:96:30:02:ad:be:4a:05:2c:
b3:d0:8c:3a:95:b7:4f:6d:79:2c:9a:1e:a5:5b:c9:03:e6:89:
ed:5f:d6:69:f5:58:73:27:97:9a:ab:d4:a8:09:a1:c9:78:90:
3e:46:45:e3:e8:46:a4:2c:23:66:c5:7d:72:90:5a:5d:68:ac:
c7:bf:30:67:7c:7d:78:e2:41:1b:07:45:7f:27:c4:6b:2b:64:
ba:0d:2d:51:f8:42:e3:d7:eb:7b:94:ec:57:d3:08:bc:6f:5b:
87:ee:fa:c6:da:15:a6:65:ce:a6:47:67:a8:80:0b:3a:3f:e4:
d4:94:88:3d:2e:75:bc:91:9d:06:f5:52:62:24:7e:0f:bc:7c:
1d:23:2b:79:6f:b1:47:89:9a:e0:20:24:b8:8e:fc:ef:2e:b2:
4a:35:49:59:60:e0:e2:62:fa:de:fa:39:eb:a1:ab:f3:04:5f:
c2:dc:78:c5:be:e1:b1:04:c1:52:f7:ac:d7:ff:2a:c0:e7:52:
6a:d9:59:16:3f:bc:fc:26:6c:bd:d6:b4:0c:68:4d:37:fe:15:
b6:4a:f5:b1:73:51:d1:2d:f3:8c:cd:21:82:6a:aa:a6:bd:97:
0c:e6:c0:62:43:22:3e:9b:cb:0f:ef:e2:15:b9:4c:d5:cb:54:
ad:0f:1e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:16:32 2026 by rpki-client