Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: j1mr/wX1z4ssDCnl/tJ2rS/3Fcg4rbVf1W0hPrKX7k4=
Subject key identifier: 8E:FB:42:86:41:A4:76:1C:6F:E8:8B:F0:39:5C:4F:90:4D:EE:A8:DD
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 019D37898D8E320CC1AF95B824B723D71706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 0332
Signing time: Sun 29 Mar 2026 03:00:54 +0000
Manifest this update: Sun 29 Mar 2026 03:00:54 +0000
Manifest next update: Mon 30 Mar 2026 03:00:54 +0000
Files and hashes: 1: nClTwpToiFqAscBy4IrBVIyla1o.roa (hash: wolg6ruFPU1FSLrTeE1keQYcUJk2DOWAN3fu7gn3ZgE=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: tz8ejBx69GsWUGQxdhQjgIkJNSRPmYaaC2/rLAI5qDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8d:8e:32:0c:c1:af:95:b8:24:b7:23:d7:17:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Mar 29 03:00:54 2026 GMT
Not After : Mar 30 03:00:54 2026 GMT
Subject: CN=8efb428641a4761c6fe88bf0395c4f904deea8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:fb:d5:58:dc:4e:f6:4a:0f:4c:46:09:f2:
49:76:f7:3f:be:88:c5:45:f0:ea:a6:66:c0:c2:22:
51:7d:7c:84:0f:94:81:f5:a2:1e:c7:66:b3:30:87:
f2:f6:c1:53:88:39:bb:b1:ea:63:49:b5:ae:07:e8:
2f:a1:9f:f8:4a:b9:7c:79:65:64:17:28:1e:73:da:
6b:1b:86:93:23:f1:0c:1d:ea:b7:5b:9e:7e:55:ea:
75:3e:85:01:93:00:61:44:1c:41:98:46:7f:c6:90:
13:ac:fd:17:0c:f9:2b:04:7c:9d:17:c3:ce:37:54:
ac:e3:f2:d6:bf:55:84:e4:8d:b8:f0:75:e2:88:7a:
a1:c1:23:af:11:0e:0f:43:9e:b6:fc:54:5f:b8:9f:
f0:58:75:7f:ad:da:4f:84:7c:ee:1e:ed:6f:fd:de:
64:71:5a:14:44:1b:35:a6:0c:ae:6f:f6:78:1d:29:
b3:2e:1d:38:dd:6e:41:4b:0e:6e:25:ff:51:34:6e:
1f:50:3c:51:d6:26:55:aa:2e:2a:73:6c:43:89:bd:
ab:0f:c7:76:03:f1:84:09:00:a0:0e:61:b5:27:2e:
7b:64:37:05:8b:37:94:19:4f:dc:28:c5:f3:76:74:
17:82:fc:51:17:a3:46:bd:97:79:65:da:fe:a1:50:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FB:42:86:41:A4:76:1C:6F:E8:8B:F0:39:5C:4F:90:4D:EE:A8:DD
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4c:48:df:d8:03:ad:fa:c0:ba:10:27:0b:6a:1a:d6:5a:98:
59:43:c9:19:50:9c:cb:49:b2:08:d4:1c:0e:55:68:ff:bc:be:
f0:fc:de:fd:0a:33:48:ca:60:d9:01:59:69:90:37:bb:70:3d:
b4:29:f2:50:9a:c8:fa:a4:e0:c2:05:a7:66:16:67:7a:ee:50:
1b:69:f1:06:07:19:7b:5d:a8:8b:19:f1:d0:d3:5c:c1:14:fe:
cd:98:bd:0f:aa:0a:66:a7:02:9b:42:9e:ef:47:d3:b6:a4:78:
91:69:43:36:a4:e8:0c:bf:75:af:21:7e:74:66:a9:4d:5a:49:
95:11:67:66:25:8d:bc:55:03:3b:7d:14:2d:ee:e3:c0:f1:3a:
67:7f:5d:a9:c0:09:09:bc:a1:64:5a:a7:e5:03:1b:c9:e2:7e:
d2:d6:1e:29:3e:63:3d:ad:59:e0:a2:74:66:f0:c7:98:8e:bb:
f2:ea:20:48:d8:d2:f2:f4:19:b6:cf:f6:4c:8e:8f:1b:62:8d:
34:13:12:dc:27:89:8f:d9:1d:f0:01:be:8b:f8:c1:e9:62:99:
9a:ec:06:2d:b8:06:c0:2c:54:51:ed:70:2a:dc:d6:a8:b1:0b:
c6:1a:79:c7:e4:60:dd:0e:3b:9f:25:ad:d7:ef:6b:9c:6f:88:
f2:b8:95:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client