Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: D0rnL9MXiqAYIbBz8N61CIP/PoY0a/Plbomcvt3Z5UI=
Subject key identifier: 26:77:62:75:AA:45:A7:F9:3F:EA:92:33:CB:A0:64:96:3E:02:16:C5
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01A08C0D00A64470FE54B0B5E691D52A5E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 151F
Signing time: Thu 10 Sep 2026 16:00:57 +0000
Manifest this update: Thu 10 Sep 2026 16:00:57 +0000
Manifest next update: Fri 11 Sep 2026 16:00:57 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: SoOOELOLO/XUfPVbnG2zUDXN0N8+sFPyxyFRHtd+l+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:00:a6:44:70:fe:54:b0:b5:e6:91:d5:2a:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Sep 10 16:00:57 2026 GMT
Not After : Sep 11 16:00:57 2026 GMT
Subject: CN=26776275aa45a7f93fea9233cba064963e0216c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:e5:fb:2e:60:b1:cc:c9:bf:24:a3:67:de:
f7:eb:a3:66:9c:35:e2:3a:93:60:8d:41:f4:0b:d7:
fb:f0:e5:d7:02:2f:91:97:a8:4d:3e:b5:97:e3:16:
8e:23:9c:9e:36:22:ac:c8:e9:9c:2e:e2:06:c6:b9:
40:3e:04:ee:c4:7d:21:dd:7f:68:76:10:10:83:d2:
eb:80:1a:e3:c3:12:9c:9a:50:a1:70:d9:5e:4c:b8:
c8:7c:ae:3b:68:e2:87:94:e0:86:06:f5:62:03:ee:
c0:7d:cc:3e:29:d2:88:bc:a5:c2:2e:0b:43:7c:49:
11:7e:b4:80:bc:17:e5:30:ad:90:1c:ae:25:dd:29:
43:76:8b:9e:96:c8:c9:76:6b:85:de:7c:88:c1:5f:
d7:36:11:88:13:df:16:5a:03:0c:f4:f9:b6:2d:0a:
7c:3f:21:51:cc:cd:d4:a3:6a:68:3f:6f:a6:0d:1a:
bd:f3:a6:95:54:e2:de:68:35:47:04:5a:78:90:f0:
91:8c:cd:6e:2d:aa:8f:5d:be:3c:2b:0b:36:2a:64:
5d:cc:18:7a:1d:93:82:a3:38:2b:36:89:c8:f0:27:
31:d4:50:07:89:09:45:cb:a3:66:22:95:41:ad:d1:
91:09:c8:25:bd:f8:a3:e5:fd:8e:e2:f1:74:7b:a0:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:62:75:AA:45:A7:F9:3F:EA:92:33:CB:A0:64:96:3E:02:16:C5
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:50:22:68:25:d9:4a:84:3e:92:94:05:91:fe:66:45:da:20:
ef:6a:2f:dd:a0:5b:03:dc:60:62:d7:42:b4:80:b7:96:b2:8f:
43:cb:31:35:74:b2:a2:f7:ad:90:66:97:9b:50:7f:5d:3d:78:
d5:ed:4a:28:7b:24:ce:14:65:a7:16:a3:dc:02:9d:99:98:c8:
35:f8:ba:eb:f6:60:24:21:74:b3:bb:09:d0:7f:5e:c7:cb:ec:
c1:35:29:dc:83:58:5c:c7:a1:76:d9:25:44:1e:13:ec:a2:3a:
f3:28:33:2a:4a:21:9d:29:71:b8:f9:3b:f5:bc:d3:e8:44:42:
1d:83:06:e4:17:02:02:f1:4c:7b:d1:3f:18:fd:7b:cf:3c:31:
a5:8c:46:b9:fb:2c:45:ef:e1:04:0c:92:8a:a6:21:71:5d:b6:
0d:71:22:5d:cc:e0:11:7c:76:9d:a3:6b:77:40:bf:7e:c6:e7:
b6:48:93:f2:82:bd:ff:85:ed:e2:a7:13:ea:de:eb:8f:67:05:
48:90:6b:fb:46:01:2c:f7:aa:19:94:73:75:c2:1e:03:43:86:
1f:c5:6a:57:d4:6b:5f:4b:c0:e7:55:00:05:86:2c:fa:58:d4:
dd:cd:0c:f7:6b:21:2b:f7:f7:6a:cc:83:fa:f0:37:c8:1a:a5:
56:2e:f0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:34:55 2026 by rpki-client