Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
File: u0CY4P3tthLyOdpSSgS14N6kxT8.mft (raw, json)
Hash identifier: Ma0zZSXy8rJ/WW4c9NNOTM6QlHw5x54UMdDlilDN1LQ=
Subject key identifier: 81:6C:06:FA:87:6E:C0:90:76:C1:77:36:6A:1F:C5:08:B1:A0:8C:9D
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 019D38D3A0F3AA61952BB164ABE03C7C14CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
Manifest number: 1381
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 3m8zarPnlqwdXSG76YhthijxX1g.roa (hash: USeXs8epvdq+0Re4PFbEYSoGmA1DkDP8lYHE0nVtdxI=)
2: u0CY4P3tthLyOdpSSgS14N6kxT8.crl (hash: YlCzS5RE/O6oE2Gt6QiRf3xtCoPbLhbLnQm8Ce4fs0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a0:f3:aa:61:95:2b:b1:64:ab:e0:3c:7c:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=816c06fa876ec09076c177366a1fc508b1a08c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:59:57:66:09:ea:d2:4e:9d:d7:19:57:6b:a2:
81:ab:c2:1d:f4:98:b0:4a:6e:cc:d0:d5:52:24:ab:
6f:65:c9:c8:4c:50:dd:05:d3:86:00:2a:eb:1b:91:
c2:f4:2d:db:29:46:0b:31:ad:00:9d:59:84:2a:3e:
5c:e3:6b:6d:57:58:1e:45:43:ff:eb:3a:fe:6b:db:
87:3c:5a:4f:b3:57:49:e2:e5:84:73:d6:ac:65:91:
07:1d:f6:d7:be:d9:77:40:42:df:48:5b:8d:75:cc:
9c:10:c8:bf:91:e4:c7:3a:6a:2b:d7:8c:55:95:b1:
15:fa:8d:c6:4e:d4:a8:8f:62:45:da:b4:37:07:7d:
3c:11:ae:55:64:b1:39:1e:09:5b:47:fe:86:66:db:
1a:5c:35:3f:8e:87:3d:6b:61:08:f3:7e:85:e7:bb:
cc:4f:bc:6e:88:3e:27:ca:33:83:ae:e2:28:62:be:
ee:64:c5:41:78:37:6b:62:5b:4a:5a:9e:32:49:81:
d8:10:4c:03:f0:e2:06:83:53:c9:f1:8f:6f:23:4e:
3c:49:fe:cf:80:48:6b:2c:97:60:c6:d1:57:55:f4:
fc:5d:26:1e:c3:8f:72:38:24:92:d5:68:8b:2c:88:
da:07:e8:c5:63:5d:bd:ba:95:64:c3:0c:41:59:5b:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:06:FA:87:6E:C0:90:76:C1:77:36:6A:1F:C5:08:B1:A0:8C:9D
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:62:cc:a7:fa:6e:c9:67:70:72:08:a9:bb:ed:10:a9:bc:21:
4e:23:80:e1:dd:62:b0:bf:8c:44:24:75:2d:59:7b:35:5b:bc:
f0:23:43:35:ae:ac:7b:51:31:f5:42:70:f3:59:ae:7b:a1:8c:
66:34:e0:77:c4:31:90:92:c2:e6:70:48:18:c9:9d:68:d2:f1:
8f:e5:ce:b8:a6:13:9e:ad:d5:5b:31:26:5f:bc:3d:85:f0:4c:
05:43:89:5f:29:e1:e3:25:58:7d:dc:4f:2e:d5:4a:47:3a:7d:
1a:b7:87:c3:cf:71:50:c4:8d:2c:b6:22:bb:1b:34:e4:c0:7b:
42:ca:ef:9c:cd:4e:be:d6:87:3a:ee:c3:0a:35:db:5f:2c:04:
56:be:15:f5:a1:e7:b5:ca:a2:65:73:a2:ef:76:11:f9:a1:35:
0d:f2:9c:91:a0:06:d7:b6:d0:57:d7:d2:36:d4:1a:8b:8b:4f:
8a:28:a7:31:2d:3a:57:f7:70:86:b3:de:9c:77:14:4a:93:5f:
af:6a:e3:2f:69:9e:18:5e:04:3f:8d:f6:67:4c:00:53:0b:81:
b0:fe:8c:67:a9:0b:ef:6e:11:5c:14:8a:d0:ea:c5:81:0e:06:
1a:0e:2e:04:8d:3a:d7:26:00:c4:ee:e7:42:d8:a1:5b:df:b8:
67:f4:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:56 2026 by rpki-client