Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: XGrmnm51WMFM8K16iS6bC0eaJG0HSXDI5ZldwqmAclY=
Subject key identifier: B8:E0:39:CD:70:EA:D1:D5:BF:E5:B1:6D:4E:37:FA:4B:BF:4E:72:27
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01A1852C8BFE51749889CFFA4E7EBBB6017F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 15A0
Signing time: Thu 29 Oct 2026 01:00:51 +0000
Manifest this update: Thu 29 Oct 2026 01:00:51 +0000
Manifest next update: Fri 30 Oct 2026 01:00:51 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: 3E5uztny2/3QO/g506pbSeeYQomv4pUC63cOhAi+xbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:2c:8b:fe:51:74:98:89:cf:fa:4e:7e:bb:b6:01:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Oct 29 01:00:51 2026 GMT
Not After : Oct 30 01:00:51 2026 GMT
Subject: CN=b8e039cd70ead1d5bfe5b16d4e37fa4bbf4e7227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:b5:b2:15:0c:a2:2d:b8:fd:8c:2c:1c:e2:
31:31:32:d3:84:2b:b6:c8:fb:43:ac:f6:33:94:59:
39:96:ee:00:37:e2:0d:bc:e0:67:a3:97:b2:d3:44:
19:ab:64:ab:5e:51:3c:8f:05:3b:c1:b1:99:2e:3c:
54:21:77:59:db:ed:e6:38:1a:f1:07:22:78:2d:a2:
8c:0e:e1:87:58:1c:a2:da:6e:65:88:d4:61:6b:bf:
aa:6e:82:c0:6e:32:c1:d1:af:a9:f3:d7:e5:b5:a2:
6c:81:07:37:c5:c8:26:a1:8a:7e:11:21:10:ab:68:
fc:f0:f1:76:d8:37:68:2f:e7:2e:ec:42:6d:b7:d8:
3b:1b:22:61:f5:6e:35:19:37:4b:c6:5c:cc:5f:2f:
a7:33:87:9f:65:a7:6e:10:d9:06:bc:62:35:02:d2:
38:93:95:5c:f7:5c:d6:19:0c:2e:42:8d:e5:9e:1a:
bf:7a:8a:3e:ea:77:9c:dc:7f:b9:8f:f7:c8:05:fb:
ab:f3:b3:c5:88:ed:fd:9b:c5:71:ff:2e:95:70:ad:
bb:05:f8:32:4f:b4:71:9e:73:0d:40:70:4d:7a:c2:
b0:69:17:0c:eb:45:21:a6:f9:fc:b0:66:d3:e6:aa:
28:81:9d:5b:62:e9:c9:0a:68:88:95:4f:f8:0f:be:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:39:CD:70:EA:D1:D5:BF:E5:B1:6D:4E:37:FA:4B:BF:4E:72:27
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:49:0a:5d:f9:4c:b3:5c:ea:44:97:84:22:93:f7:68:29:
8d:29:47:ac:7c:8d:1b:91:98:bc:12:fe:ee:3c:97:dc:40:51:
d4:5f:dd:95:02:75:a4:1c:e6:72:f1:27:47:ee:9c:73:e3:db:
f9:1e:d1:b2:e8:05:de:85:6e:a1:df:3d:13:35:8d:3a:75:40:
54:8c:58:f2:38:fb:f7:14:6b:cd:ba:73:b2:e5:af:e3:14:00:
29:04:04:de:eb:95:7c:60:9e:5b:34:81:52:33:e5:21:ea:db:
8a:0f:c7:81:31:5c:b5:9f:aa:8e:eb:ce:b3:c8:3a:16:f9:d4:
40:c1:2e:31:3a:16:53:64:91:70:5f:c9:62:8a:0c:cd:58:71:
31:62:d0:28:9a:6b:3a:d0:b0:f0:5a:60:c5:da:ff:1e:80:ea:
70:a5:76:3c:29:47:9c:7f:7b:fe:04:ad:cd:9a:b4:00:7f:43:
f6:36:5f:06:6e:f0:2c:1d:76:49:c6:4e:af:06:0b:c7:ea:11:
70:c1:ec:c1:48:79:e9:a8:d7:28:3a:dc:d3:3d:bf:26:f0:be:
90:95:01:ac:68:fb:b5:6e:d9:36:92:a5:76:0d:b2:37:4f:e6:
83:b8:c8:09:62:83:61:91:89:2c:e3:a2:23:d6:b3:0e:a9:e4:
a8:22:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:47 2026 by rpki-client