Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: aWdfTWK5/+c58a0xCOjG9T7unUEqCdFKtDyju7QbNG4=
Subject key identifier: C6:81:FA:F1:68:CF:3E:62:D3:03:76:68:84:28:7E:7B:D1:0F:CD:3D
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019EB8EA969A04F7A94055E7B2600AF6838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1960
Signing time: Thu 11 Jun 2026 23:00:41 +0000
Manifest this update: Thu 11 Jun 2026 23:00:41 +0000
Manifest next update: Fri 12 Jun 2026 23:00:41 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: qK0SOqOIOiCee06M9WwMzPL28iyDdR2R3SyiuDw1KKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:96:9a:04:f7:a9:40:55:e7:b2:60:0a:f6:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jun 11 23:00:41 2026 GMT
Not After : Jun 12 23:00:41 2026 GMT
Subject: CN=c681faf168cf3e62d303766884287e7bd10fcd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:80:b7:8c:91:4a:84:5f:f0:fb:d4:96:1a:
7d:56:8e:14:56:ec:a5:30:81:7b:be:ba:a2:00:5b:
2e:46:d7:ab:43:0f:20:9b:5b:fb:74:dd:a1:82:80:
e9:7a:6c:8c:a5:75:d8:40:98:ba:77:05:f6:90:5c:
0b:fc:57:07:85:63:4c:97:4b:a0:f8:62:52:8b:00:
14:c5:4d:d3:a1:7f:eb:93:3c:b5:8d:d7:af:8e:16:
8c:8f:9a:13:28:24:bb:78:6b:41:e3:d3:10:1c:e7:
d5:ca:fa:11:d5:ee:2b:37:29:f7:26:cf:53:e4:f5:
1a:cc:39:43:0d:a8:10:99:f5:ea:78:d5:65:2e:69:
63:98:63:3d:7f:a6:b7:1a:d0:f3:e9:f8:b0:4e:e1:
cf:24:4d:ee:70:5b:be:26:0d:8c:9d:70:ef:72:dc:
9c:72:f7:c1:70:43:21:0b:69:ba:e6:5e:a6:2d:a3:
d8:5b:87:3d:d7:12:ee:49:a5:2b:f7:1f:8c:4b:ad:
52:47:8a:49:3d:1b:0d:7d:23:56:d7:50:2c:a2:fa:
97:e7:56:85:cc:47:35:f1:13:66:a0:35:13:41:28:
14:a5:3b:c8:ca:84:d7:53:95:e0:2b:b1:7d:d9:9c:
70:0f:46:40:e0:cb:b5:b0:d1:46:b7:08:29:cb:9b:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:FA:F1:68:CF:3E:62:D3:03:76:68:84:28:7E:7B:D1:0F:CD:3D
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ca:57:58:aa:67:da:60:5f:a7:24:00:3c:05:d8:56:29:e4:
4c:d9:1f:14:98:6a:4a:39:9e:9c:88:7e:92:10:b8:0c:ea:5b:
36:da:7a:c0:36:0d:d8:1d:43:61:9e:80:10:c2:89:8a:5c:05:
b6:16:8e:d5:1d:ba:66:d7:c5:8b:16:f6:27:73:49:0c:89:b2:
30:f2:dd:78:13:85:46:30:05:24:a9:84:c7:1e:f0:d7:1e:25:
5c:96:d1:50:41:56:0e:95:2b:fb:73:7e:12:d0:75:9e:e8:1c:
e3:a7:9a:a1:fe:70:a5:27:d9:0c:58:98:24:de:fb:5a:4d:5d:
f0:33:39:7b:b8:01:45:86:e4:24:dd:03:6f:7f:80:5f:94:03:
19:2d:8d:a9:24:f5:5f:ff:ce:26:d8:59:61:ac:4e:83:54:04:
50:5c:24:d1:95:b6:fc:af:6c:7a:c9:0c:e8:31:32:c3:0c:09:
9b:09:17:2d:71:c3:34:ac:55:82:13:d7:ce:0e:51:fb:15:38:
84:75:37:6d:20:b9:80:36:9d:5f:50:88:78:cc:a9:3b:a1:c1:
4e:66:1c:64:f8:2d:98:8b:2c:93:cc:ed:7b:91:a0:19:d2:d6:
47:5e:e3:9c:0b:0a:c5:c5:eb:74:15:4d:6e:63:0b:bd:c9:3a:
fd:6d:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:38 2026 by rpki-client