Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: F3HKKASk8S8cFOEP/IupL29t+fUzdrKN9hwQ0pdlWA8=
Subject key identifier: DD:C1:7B:77:93:70:B4:EC:BC:E8:89:33:2A:C9:B6:3C:A7:0E:26:CB
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019CE5913EE61016068350CA50B4F02CED82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 186E
Signing time: Fri 13 Mar 2026 05:00:26 +0000
Manifest this update: Fri 13 Mar 2026 05:00:26 +0000
Manifest next update: Sat 14 Mar 2026 05:00:26 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: JsMs03Kh6oomnX5gHha6cBw2Lt5zZiCnRv3Ev+OHboI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:3e:e6:10:16:06:83:50:ca:50:b4:f0:2c:ed:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Mar 13 05:00:26 2026 GMT
Not After : Mar 14 05:00:26 2026 GMT
Subject: CN=ddc17b779370b4ecbce889332ac9b63ca70e26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:d1:73:f6:69:2e:f5:e8:6a:17:55:82:d7:
dc:ff:8d:f1:99:43:52:dd:cf:05:29:1a:be:88:f6:
6c:57:95:da:7e:b6:3d:d8:cb:27:46:4d:b6:41:00:
d9:33:71:2c:75:9f:7a:a0:10:5d:52:6b:11:54:98:
29:6b:e2:05:9f:64:2e:6e:e2:f5:8c:17:d1:25:02:
6b:e6:99:68:61:fa:5b:fb:07:bd:3a:2e:71:a7:49:
d5:8f:d2:ec:26:be:b9:4f:11:cb:43:45:a7:89:e3:
0c:f1:d5:47:23:a4:81:55:81:ed:68:69:d8:8b:f7:
a5:30:91:34:48:c0:65:46:16:16:aa:c2:2d:a1:41:
54:7a:7a:88:0d:fe:52:b9:5a:95:9a:ad:8a:07:eb:
54:7f:7f:78:3f:19:1d:92:e4:c9:68:e2:cb:47:df:
47:75:21:1b:74:7e:0f:27:27:82:4d:67:2e:d5:ae:
02:12:0d:2e:c6:ca:1c:57:56:d7:a6:c2:02:2e:ae:
1f:82:a3:80:ae:32:b6:4c:df:13:58:5f:b1:93:42:
f9:57:da:93:38:45:d8:6a:7d:b9:e5:3b:bc:31:91:
56:67:55:24:ac:c9:8f:64:7c:c6:a4:c8:10:69:57:
a5:78:88:9b:f4:14:1c:86:5e:85:f1:55:24:ac:f1:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:7B:77:93:70:B4:EC:BC:E8:89:33:2A:C9:B6:3C:A7:0E:26:CB
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:15:94:18:b6:d0:f4:5c:d5:85:78:e7:0c:60:e0:9f:4d:
1c:8d:c1:8e:f6:ec:a3:7d:5d:ba:60:6c:38:13:a4:65:f0:48:
b9:c7:8a:79:cc:ce:b1:72:32:52:41:a1:87:6c:fc:97:d1:84:
56:1f:c2:b0:a6:fb:c9:7d:25:97:55:8b:4a:46:bd:a0:f8:bf:
af:c1:94:a0:db:d0:b8:cd:fe:78:cf:38:47:38:56:ce:40:1f:
dc:5f:3a:b5:a0:8f:98:80:b8:30:35:27:bf:55:4a:dc:b8:2b:
0a:0c:27:61:0c:5b:a1:0c:bf:e9:6a:5b:7e:6a:29:2b:47:35:
e0:ed:f7:04:4e:c3:42:08:27:ac:9a:14:a1:14:bf:74:ee:4e:
02:f8:d2:93:04:08:c8:91:23:b7:43:18:77:cc:c7:33:6c:ea:
5b:cf:7c:a4:e1:87:71:40:83:49:b5:2f:3d:70:ad:02:e6:ea:
4d:2b:32:cd:db:a8:d0:7b:ba:87:f6:45:2b:31:ab:4e:cd:76:
7f:a3:77:04:8a:39:6c:2c:d0:35:59:9a:a6:86:40:fd:89:fe:
4e:6c:a6:cf:51:d9:a9:4c:b7:00:6a:7e:da:91:46:c7:2d:80:
63:4b:52:64:88:c4:43:84:16:6b:ef:22:6f:95:80:2f:2b:b8:
b4:63:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:41:51 2026 by rpki-client