Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: KbsNzFp/6Yh51UWLuSjMVXlaJXRcL0YXEJ9SqLE1RCo=
Subject key identifier: 10:CA:DD:44:75:DD:00:E6:5C:E1:81:C6:4B:0E:52:0A:0A:FF:53:F1
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019D38657C5B4E3045027F0D7964502E489F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 1366
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: kyioAXvEpkEhkg9q94C4XxzTflIFrN1P3qYPfil5xWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7c:5b:4e:30:45:02:7f:0d:79:64:50:2e:48:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=10cadd4475dd00e65ce181c64b0e520a0aff53f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:ba:f8:0c:af:8c:76:b6:6d:48:7f:27:c5:
31:e5:e5:ef:92:0f:ee:df:60:d0:f3:aa:57:58:6e:
12:45:14:7a:9d:4b:65:2b:87:af:ad:c3:3c:02:0a:
56:3a:3a:2e:67:6b:2c:f8:35:84:52:3b:ce:71:88:
61:16:3a:f6:64:e6:c9:74:97:c7:4d:ad:3e:37:91:
0b:8a:bc:88:39:93:57:51:57:87:d2:ed:82:f7:df:
4c:30:1a:dd:bd:b4:80:7a:01:f2:d7:54:b0:c8:a2:
61:8a:a8:c0:2e:5f:47:86:1d:5d:24:b4:af:0c:f1:
33:1a:c8:8b:e3:75:b4:9f:d7:b3:9e:46:e9:1f:8d:
44:37:3c:19:88:a3:3f:a4:b1:50:d5:58:28:1d:42:
05:e7:03:10:9c:b3:8c:84:61:c6:7a:5d:54:ac:d5:
34:e0:0d:80:39:63:5b:25:b4:74:23:4e:25:08:43:
00:5c:72:a2:9f:f8:84:88:a8:44:f3:13:21:16:0b:
cc:7a:c5:dc:22:b0:ed:82:b6:3f:fe:cd:4c:7e:b2:
9c:d4:09:6f:e7:8b:9f:3d:c2:ae:24:68:41:9c:46:
57:fc:d0:ea:37:07:b8:a3:2f:0b:d9:15:d1:73:40:
03:b8:64:fe:cd:31:48:9c:e2:4a:f2:da:21:41:15:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:DD:44:75:DD:00:E6:5C:E1:81:C6:4B:0E:52:0A:0A:FF:53:F1
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8e:8a:be:23:1f:f0:9d:21:37:4f:54:8f:88:5e:81:aa:81:
ea:61:94:c9:01:fe:e1:11:a8:79:b9:c2:8b:76:9e:d7:3f:6c:
24:35:43:e5:ae:b3:d3:90:90:d8:69:90:59:dd:9a:5a:2e:c4:
b6:71:40:f0:2e:46:70:da:d3:14:30:9c:84:3e:e2:08:e9:7c:
43:79:80:da:fe:b8:19:0b:d7:61:da:f5:1f:f3:4b:6e:58:ec:
e6:17:df:f9:10:62:c1:70:d8:1e:00:3f:69:63:da:0d:05:5b:
2d:a3:7f:16:fd:f7:c1:80:ae:ad:4c:2f:6b:06:ae:89:c9:7e:
e2:02:2e:b2:c2:ba:08:42:0f:ee:dd:26:3d:d5:7a:e9:f4:1d:
bf:c8:83:fd:f7:69:f2:37:69:7c:46:09:80:69:94:0b:11:79:
ff:97:8d:43:12:3d:4f:52:01:ba:4e:4d:26:58:0d:b3:16:b9:
b8:da:75:6d:28:c6:d0:09:98:c8:e5:f3:5e:86:4e:c3:84:9c:
24:4d:04:df:2e:95:b3:3e:b6:6e:00:d3:bb:36:e4:1e:7f:3b:
ee:0d:ba:5b:8c:1d:be:f3:91:4d:1e:7a:f2:c8:6c:7d:cc:46:
3f:50:1d:bc:40:bf:59:d3:68:47:2f:78:69:f3:78:9b:5a:c4:
dc:74:47:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:40 2026 by rpki-client