Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
File: u8y6drQ5_a39OU1vR37mgbwzgy8.mft (raw, json)
Hash identifier: N+XGmHILCok/A7LJxndyzxQX2YWIGTTAw71QgPRtdDg=
Subject key identifier: BB:92:9C:09:3B:3A:32:FF:4C:61:37:31:BB:9F:8B:26:69:52:47:4C
Authority key identifier: BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
Certificate issuer: /CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Certificate serial: 019D390A335EEBD035824E7D8578565358EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
Manifest number: 8F
Signing time: Sun 29 Mar 2026 10:01:02 +0000
Manifest this update: Sun 29 Mar 2026 10:01:02 +0000
Manifest next update: Mon 30 Mar 2026 10:01:02 +0000
Files and hashes: 1: jbPn_huaTii3UeZHQ_d9dvrziA4.roa (hash: WDTKgP7OatpD7hZS6aOF7SUbKrJNGnHp02sDeSf2/f4=)
2: u8y6drQ5_a39OU1vR37mgbwzgy8.crl (hash: EW5CJnfIwq/kja/+LmAtoEDBif0RJ/vhxXzoN3kJlqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:33:5e:eb:d0:35:82:4e:7d:85:78:56:53:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Validity
Not Before: Mar 29 10:01:02 2026 GMT
Not After : Mar 30 10:01:02 2026 GMT
Subject: CN=bb929c093b3a32ff4c613731bb9f8b266952474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:1e:74:bf:f3:4f:5e:ef:58:9a:67:03:b7:
dc:1c:26:64:98:58:5b:ac:28:36:48:74:2b:db:03:
63:ba:d4:75:b8:22:b8:c9:98:7b:39:d4:a2:16:65:
0d:34:b1:e3:ab:31:bb:16:24:e2:35:f1:fb:1e:a5:
da:ca:80:43:03:2a:3c:d7:f0:42:d5:a5:1b:79:b7:
19:a2:42:af:0f:14:9c:a3:58:ab:70:72:d3:4f:26:
63:7e:4f:f6:ca:a3:f8:fe:b0:95:12:c4:10:3e:00:
23:f1:d0:f4:89:f1:d7:18:be:b5:0e:80:3c:c5:df:
c1:83:33:8b:f6:dc:8c:78:3c:b2:88:1d:eb:06:c6:
bb:92:08:ff:95:a6:8d:32:8d:64:4a:68:a1:22:52:
21:f5:4e:c5:0d:c9:ab:77:7a:c6:31:de:0a:18:a8:
2a:3e:92:d9:0c:d3:1e:5a:bd:c3:0c:52:fc:19:54:
81:72:e0:c7:35:d7:3e:2b:9b:13:59:89:cf:93:17:
5f:5d:e5:0c:45:c0:5e:bd:1d:e4:01:d0:be:e1:94:
ad:8f:91:42:78:41:ef:9b:09:18:d9:b8:f7:c7:ad:
65:cc:cd:c9:86:76:54:5e:bd:45:3b:b5:75:71:fd:
97:f5:9e:5a:0d:2c:1b:5d:e5:6a:54:20:f6:83:c7:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:9C:09:3B:3A:32:FF:4C:61:37:31:BB:9F:8B:26:69:52:47:4C
X509v3 Authority Key Identifier:
keyid:BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e3:d3:7d:f7:9e:61:c1:0f:8b:35:68:2f:90:f8:47:7c:87:
db:db:19:d7:7c:13:12:75:0a:ef:c7:56:83:83:28:79:76:4f:
ff:b3:c2:cd:1a:dc:0c:fc:f9:0f:ad:59:65:bc:d7:ed:4d:a9:
e5:7f:3d:b2:5f:0f:6e:07:e1:05:1a:9e:80:ca:07:77:50:96:
62:2e:e6:27:67:d1:2b:42:9b:0d:4d:29:d1:b7:d7:b8:d2:d3:
a6:db:e7:4e:5f:c8:0e:ff:74:67:8b:5a:a9:19:5f:f8:bc:66:
42:09:0b:0d:c8:b2:a2:dd:19:34:7f:a9:b2:c8:24:02:41:d0:
44:89:47:1a:06:fa:7b:09:02:29:51:26:99:76:82:3f:b7:c0:
a4:06:b6:0f:d9:24:e2:44:eb:68:bb:85:31:8e:e8:c8:f5:9b:
6b:51:c9:d3:e3:fb:ab:d8:0c:01:f0:37:7c:51:a8:fc:f2:d6:
78:b6:37:29:bb:e9:87:76:e8:a6:25:4f:c1:9f:38:45:ca:1a:
54:19:c1:07:44:96:aa:d9:e5:9f:ff:83:c1:02:cb:e0:dd:ca:
a9:37:26:80:98:9d:d9:19:e1:79:10:8e:8e:4c:d7:8d:69:91:
a8:73:da:a7:10:98:70:de:48:59:68:89:e7:38:48:f8:93:b9:
b2:d2:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:49 2026 by rpki-client