Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: f3KrF4iM/VKpmWVkBzQAL6D4P73HCuwF6CGq3sw9vP8=
Subject key identifier: 06:6F:C9:A9:BD:AE:E9:0F:ED:A7:B9:74:25:02:4B:89:F2:A6:07:CF
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019EB8B4829D2BB7DFA4517550CFB2177F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 142D
Signing time: Thu 11 Jun 2026 22:01:38 +0000
Manifest this update: Thu 11 Jun 2026 22:01:38 +0000
Manifest next update: Fri 12 Jun 2026 22:01:38 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: H6jy4TMatlgN/Scpyeg9Hj6FrK+dGWc2gNimN0sNvQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:82:9d:2b:b7:df:a4:51:75:50:cf:b2:17:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jun 11 22:01:38 2026 GMT
Not After : Jun 12 22:01:38 2026 GMT
Subject: CN=066fc9a9bdaee90feda7b97425024b89f2a607cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:9d:49:0b:86:8d:2f:36:53:07:6f:3b:aa:
48:75:23:17:2e:24:73:16:86:7f:14:07:bb:42:d6:
18:70:75:36:87:fb:bb:c9:88:84:54:08:45:cc:46:
c1:60:7a:9a:ae:db:80:d7:fb:1e:6c:56:74:1e:12:
4b:91:4f:42:27:f1:b5:dc:52:b4:fe:b8:fc:4f:d8:
89:bb:46:f2:92:a7:10:2d:f3:bc:45:a4:de:8b:d5:
2b:c1:80:22:c5:bf:d5:ad:a8:ad:e3:d5:20:a6:de:
5d:3f:6f:8a:fa:8e:d2:12:f6:55:7f:61:65:61:10:
84:70:cc:fc:60:25:be:41:b7:d3:f8:6c:9b:4d:db:
73:6e:b6:02:64:30:0f:fc:a6:b3:55:16:1e:ac:a7:
b6:05:23:64:f6:c6:cd:af:d3:c8:c3:da:ef:11:50:
ca:9d:ab:aa:50:8c:e2:6f:1f:79:f5:74:26:78:01:
0f:4f:d2:56:c4:3a:96:ae:dc:68:af:6e:83:55:b2:
dc:bd:c2:dc:4e:24:6e:09:d4:38:2f:9d:f4:f4:a9:
af:ff:26:1e:9b:64:ba:54:c3:81:15:18:da:36:b3:
43:96:a1:71:1b:9f:f0:6b:89:00:ab:2c:db:55:40:
b6:36:ff:d9:c2:6f:07:09:6a:87:42:9d:ca:e6:77:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:C9:A9:BD:AE:E9:0F:ED:A7:B9:74:25:02:4B:89:F2:A6:07:CF
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5d:90:2d:54:43:f7:3a:17:dd:24:bb:7d:b0:a5:c4:d2:21:
03:67:92:e9:97:7e:8e:95:ed:19:9c:f6:95:61:64:02:dd:42:
82:72:2f:75:16:52:e0:4a:cf:7f:ed:60:d9:96:75:12:20:a5:
c0:09:4a:02:95:06:e8:58:8b:5b:2d:95:6f:95:cc:03:37:b0:
ee:a9:d3:1d:dc:e9:86:ac:36:eb:4b:83:60:8a:9c:27:8e:13:
e1:92:db:d8:90:d5:5d:0f:81:b0:30:c3:ca:05:01:8a:39:2b:
21:81:92:b1:53:08:9e:c6:6e:d8:02:7f:07:4b:33:12:be:d4:
a6:a1:99:0e:ec:d0:47:99:e7:d4:c7:b1:22:f8:fd:37:c3:b3:
37:7c:a5:e3:4b:77:17:c7:d1:65:37:48:96:3e:1e:a3:e1:9e:
93:d9:3e:13:e7:4d:0d:18:de:3f:94:f5:00:ed:c9:16:41:18:
09:41:f0:28:0a:dd:22:85:40:10:14:ea:17:39:2c:8d:ec:e8:
fb:ba:63:c2:36:3f:d1:a6:13:47:cb:33:e8:50:b9:07:4f:44:
95:ab:b8:35:75:86:35:c0:56:5e:7b:fd:6a:3d:f3:51:db:1d:
a3:4d:d3:3d:b5:fa:17:c7:45:02:bd:2f:8c:59:2f:f0:3c:e8:
f8:f6:47:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tIKdK7ffpFF1UM+yF3+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjYwNjExMjIwMTM4WhcNMjYwNjEyMjIwMTM4WjAzMTEwLwYDVQQD
EygwNjZmYzlhOWJkYWVlOTBmZWRhN2I5NzQyNTAyNGI4OWYyYTYwN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GSdSQuGjS82UwdvO6pIdSMXLiRz
FoZ/FAe7QtYYcHU2h/u7yYiEVAhFzEbBYHqartuA1/sebFZ0HhJLkU9CJ/G13FK0
/rj8T9iJu0bykqcQLfO8RaTei9UrwYAixb/Vrait49Ugpt5dP2+K+o7SEvZVf2Fl
YRCEcMz8YCW+QbfT+GybTdtzbrYCZDAP/KazVRYerKe2BSNk9sbNr9PIw9rvEVDK
nauqUIzibx959XQmeAEPT9JWxDqWrtxor26DVbLcvcLcTiRuCdQ4L5309Kmv/yYe
m2S6VMOBFRjaNrNDlqFxG5/wa4kAqyzbVUC2Nv/Zwm8HCWqHQp3K5ne98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZvyam9rukP7ae5dCUCS4nypgfPMB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB12QLVRD
9zoX3SS7fbClxNIhA2eS6Zd+jpXtGZz2lWFkAt1CgnIvdRZS4ErPf+1g2ZZ1EiCl
wAlKApUG6FiLWy2Vb5XMAzew7qnTHdzphqw260uDYIqcJ44T4ZLb2JDVXQ+BsDDD
ygUBijkrIYGSsVMInsZu2AJ/B0szEr7UpqGZDuzQR5nn1MexIvj9N8OzN3yl40t3
F8fRZTdIlj4eo+Gek9k+E+dNDRjeP5T1AO3JFkEYCUHwKArdIoVAEBTqFzksjezo
+7pjwjY/0aYTR8sz6FC5B09Elau4NXWGNcBWXnv9aj3zUdsdo03TPbX6F8dFAr0v
jFkv8Dzo+PZH8g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:57 2026 by rpki-client