Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: UemAQpbvvOJ0HtJp5oJ1+CL40RT+l0WrquLnb/2PPDg=
Subject key identifier: E8:1C:C5:E0:90:F4:E7:55:D5:D7:50:31:46:CE:0C:7F:51:60:C7:39
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 01A03E291A1F4D807DF3D377C1B818D9DEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: 0257
Signing time: Wed 26 Aug 2026 13:01:16 +0000
Manifest this update: Wed 26 Aug 2026 13:01:16 +0000
Manifest next update: Thu 27 Aug 2026 13:01:16 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: foAu5o9GfOMXbgYP/upU3C7McQWE1M+MxSjVPSsKDqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:29:1a:1f:4d:80:7d:f3:d3:77:c1:b8:18:d9:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: Aug 26 13:01:16 2026 GMT
Not After : Aug 27 13:01:16 2026 GMT
Subject: CN=e81cc5e090f4e755d5d7503146ce0c7f5160c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:55:9d:46:90:5a:dd:1a:c6:06:25:1c:ec:
14:cb:08:d1:a1:a3:be:9b:55:41:69:ce:3f:30:89:
d6:1f:4e:ca:56:98:3c:cc:d0:11:87:52:c5:73:b1:
86:e6:44:c1:d4:70:7f:6e:fe:9c:d7:f2:2e:e9:ad:
7d:8c:36:cd:32:d4:09:ba:e8:92:46:56:6a:83:c9:
85:be:69:bc:66:56:40:fa:21:c3:ca:bd:41:00:8a:
e0:b8:c9:53:e9:60:b9:79:91:ce:ec:b9:ca:38:fe:
24:a2:5f:2f:14:94:43:2b:eb:7f:94:ee:e5:f9:09:
69:4d:1a:36:00:bc:f7:e4:ef:3e:01:b2:06:89:05:
d3:24:a8:bd:a2:38:3d:a4:dc:23:ad:3b:a3:0d:c9:
13:ab:05:9c:4a:f0:a3:4e:8b:96:54:e3:6a:ff:94:
9f:95:4d:e4:c4:07:90:50:6a:53:63:47:b4:5b:0e:
9f:0b:98:fb:1f:57:4e:74:72:43:1b:f5:e0:95:3b:
53:f4:59:9c:04:cf:a8:3f:cd:c0:75:62:64:01:e7:
35:6b:5c:69:9f:37:54:d8:fd:e1:94:05:ca:6c:f2:
0b:ff:a7:c9:73:f1:33:ec:6c:b3:05:f4:26:10:bb:
92:2f:36:42:c1:f2:99:5f:5a:a0:df:4b:02:f2:f0:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:C5:E0:90:F4:E7:55:D5:D7:50:31:46:CE:0C:7F:51:60:C7:39
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6f:db:c8:b7:25:5d:d6:4a:f0:76:69:ef:76:38:be:ad:b5:
c1:c1:f3:45:b5:db:24:b4:9d:26:34:10:03:b6:6c:22:05:92:
eb:f3:5c:a8:66:38:20:4f:4d:81:62:6c:b6:22:1d:51:2a:73:
c0:b1:9e:df:e4:89:25:7c:94:f0:c4:ce:39:d0:4b:06:d4:86:
e9:45:02:0d:6f:30:e7:2f:db:30:12:84:4b:7b:60:f3:00:13:
ba:ef:cc:05:f9:61:95:e4:9e:28:9d:eb:a6:50:17:79:f3:fa:
ce:c9:8e:92:49:b1:8a:b2:e2:66:4d:01:9c:57:ed:f6:19:0a:
8c:b0:a3:74:48:22:8c:10:47:45:86:81:38:43:08:70:d7:49:
3b:67:28:3c:b4:b1:e7:cf:b9:9e:6e:7f:ee:6c:ab:9a:97:89:
7e:19:3e:98:6c:63:c0:08:17:5e:aa:00:9f:4d:bb:5a:d8:25:
24:80:15:ed:77:17:9f:f6:72:9b:32:11:cb:2c:57:be:ef:39:
cd:4f:bb:f7:9b:74:d5:d3:71:e2:34:f0:d1:81:50:8b:f8:92:
65:08:fe:cc:9a:74:cf:81:7d:18:50:54:3c:64:30:bb:45:1e:
71:62:d6:79:10:c7:70:bf:32:f8:53:93:a5:24:84:fd:c5:8e:
4c:bd:d5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+KRofTYB989N3wbgY2d6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx
ZTFiOTMwHhcNMjYwODI2MTMwMTE2WhcNMjYwODI3MTMwMTE2WjAzMTEwLwYDVQQD
EyhlODFjYzVlMDkwZjRlNzU1ZDVkNzUwMzE0NmNlMGM3ZjUxNjBjNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGJVnUaQWt0axgYlHOwUywjRoaO+
m1VBac4/MInWH07KVpg8zNARh1LFc7GG5kTB1HB/bv6c1/Iu6a19jDbNMtQJuuiS
RlZqg8mFvmm8ZlZA+iHDyr1BAIrguMlT6WC5eZHO7LnKOP4kol8vFJRDK+t/lO7l
+QlpTRo2ALz35O8+AbIGiQXTJKi9ojg9pNwjrTujDckTqwWcSvCjTouWVONq/5Sf
lU3kxAeQUGpTY0e0Ww6fC5j7H1dOdHJDG/XglTtT9FmcBM+oP83AdWJkAec1a1xp
nzdU2P3hlAXKbPIL/6fJc/Ez7GyzBfQmELuSLzZCwfKZX1qg30sC8vAvvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgcxeCQ9OdV1ddQMUbODH9RYMc5MB8GA1UdIwQY
MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt
ODljNWQ2ZDhkY2MwLzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw
LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2/byLcl
XdZK8HZp73Y4vq21wcHzRbXbJLSdJjQQA7ZsIgWS6/NcqGY4IE9NgWJstiIdUSpz
wLGe3+SJJXyU8MTOOdBLBtSG6UUCDW8w5y/bMBKES3tg8wATuu/MBflhleSeKJ3r
plAXefP6zsmOkkmxirLiZk0BnFft9hkKjLCjdEgijBBHRYaBOEMIcNdJO2coPLSx
58+5nm5/7myrmpeJfhk+mGxjwAgXXqoAn027WtglJIAV7XcXn/ZymzIRyyxXvu85
zU+795t01dNx4jTw0YFQi/iSZQj+zJp0z4F9GFBUPGQwu0UecWLWeRDHcL8y+FOT
pSSE/cWOTL3VHA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:06:40 2026 by rpki-client