Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: 0JS6f3AFoD7QpAU6aRje7xzI3Xmcm2i0G+dJaZm5W50=
Subject key identifier: 49:6B:76:A9:48:11:92:89:B3:F8:8B:01:68:6E:06:29:AF:9D:51:30
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 019D39AF6A3395CFCACC94071B763A3CCD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: C7
Signing time: Sun 29 Mar 2026 13:01:30 +0000
Manifest this update: Sun 29 Mar 2026 13:01:30 +0000
Manifest next update: Mon 30 Mar 2026 13:01:30 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 8jx0CG/txkrmf8onqcOo4OjXRT+3ZvLP/Jw6j2qtUsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:6a:33:95:cf:ca:cc:94:07:1b:76:3a:3c:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: Mar 29 13:01:30 2026 GMT
Not After : Mar 30 13:01:30 2026 GMT
Subject: CN=496b76a948119289b3f88b01686e0629af9d5130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:cb:01:02:fc:4a:01:54:b2:cf:0c:81:16:
60:a4:40:c2:ec:48:3f:1a:8e:b5:87:30:82:0f:67:
dd:2e:96:da:d5:4d:2f:ee:12:39:31:8c:ae:a7:94:
d3:f8:c0:cc:f6:91:4a:9e:91:43:96:cb:06:e7:0a:
f1:ad:7e:9b:0d:44:58:9d:30:b5:88:4d:c6:1b:49:
cd:02:9a:be:e9:c6:c2:40:d9:8d:c0:75:ed:2b:52:
5c:22:73:0d:6f:18:43:7e:8b:9b:e9:56:65:96:d4:
f3:d9:03:01:83:03:07:be:ae:50:76:50:a4:f0:e0:
f3:60:90:c4:c9:12:de:14:c3:e9:20:b5:ef:c7:df:
ef:9f:e3:7b:20:b5:bf:52:c4:07:1b:47:40:ab:f8:
06:0a:a1:c4:2e:b4:43:cb:b3:64:30:77:3e:11:a4:
20:f6:ce:5d:ca:7d:73:ed:9c:2d:34:26:a3:a5:07:
23:55:ee:a8:56:53:ee:8d:0d:79:01:e9:c0:03:af:
9f:d7:9f:c1:23:a6:c7:52:90:2e:c9:e9:d4:f4:0d:
4b:0c:bd:0c:c8:0b:d0:61:c1:e8:6c:d8:14:3e:16:
c7:ce:e0:61:02:74:8b:d6:0a:5d:62:fa:07:3d:83:
38:b3:cd:5e:da:b1:23:49:fb:f5:29:d1:a6:0d:33:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6B:76:A9:48:11:92:89:B3:F8:8B:01:68:6E:06:29:AF:9D:51:30
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:35:71:9f:f1:b2:8d:50:a1:ff:71:38:a6:07:d6:e2:44:
cf:61:32:dc:2b:02:4a:77:3e:c5:a2:6e:8b:a5:4b:a8:40:ce:
7a:a2:b3:69:ee:9a:8e:f5:e5:69:c0:21:ff:0b:67:0a:a5:0d:
18:f4:6b:ae:94:ca:88:82:c1:04:b5:b5:ea:ff:b5:49:08:a9:
90:cc:f5:39:56:c2:0d:18:f2:df:5f:52:ea:19:85:c5:19:dc:
81:17:e3:fc:1f:07:1b:25:77:6d:a8:ab:7d:89:1b:40:9d:9e:
ce:39:bf:e3:2d:db:bf:99:7a:81:26:4f:94:1d:db:be:0c:fb:
47:ff:88:62:10:eb:1d:2c:73:8d:49:84:70:de:2a:c6:96:47:
c4:3e:75:b4:38:cd:d6:a0:2b:e2:92:55:59:6f:03:ce:ec:86:
37:e0:2d:d4:fc:04:72:85:78:2d:6b:5b:cb:fb:a3:05:3a:f0:
ac:b6:42:b7:10:7a:f2:07:fd:e3:df:43:17:91:c5:08:b9:16:
56:c5:5d:fd:23:07:5e:14:ed:fd:4b:a0:b9:d7:46:ce:0e:e9:
30:dd:0b:df:cb:ff:67:e0:d9:e6:6f:5e:1c:0d:92:99:cb:84:
f4:7d:3c:9a:54:43:eb:bc:8f:7a:31:97:10:81:5e:9d:84:7f:
c0:9e:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:40 2026 by rpki-client