Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: wqaFqzAlH7vblgyA4FboRx5ELflF+6em9gMxAjoXK+s=
Subject key identifier: F7:CA:CE:5C:6E:CB:1C:15:14:76:01:30:11:CA:E9:F4:E5:68:FA:25
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019D277227DB1EDC7D063B2B04FB2E695DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0BB8
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: UF0xd26rkNR4XTkm0EuO6ZUUPZ4e17xfOnguLTRXQ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:27:db:1e:dc:7d:06:3b:2b:04:fb:2e:69:5d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=f7cace5c6ecb1c151476013011cae9f4e568fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:0d:be:5b:aa:42:08:55:ac:59:d0:4f:b2:
bc:85:9a:37:6c:49:bb:b0:c2:9c:44:aa:a3:b3:b3:
e6:f5:65:5c:64:a6:13:68:51:25:92:3a:2b:c1:48:
b3:1d:4c:e2:0d:68:d7:09:5f:1d:30:ea:c5:a8:4f:
8c:12:ca:58:7c:c4:e0:ac:ba:23:a6:b5:df:2b:f5:
64:b7:60:9a:24:0c:d3:44:21:d0:dc:5a:ed:64:fd:
66:86:bb:58:27:f7:ba:3c:06:9c:09:0f:eb:7f:a6:
69:59:fc:a8:17:4e:fb:67:61:f8:d1:0f:47:e8:f5:
10:2f:07:be:22:e0:a6:15:b0:84:48:60:cb:61:7f:
d3:5e:7e:db:7c:d9:55:be:27:5c:b9:65:6a:9d:67:
ce:4d:c8:04:4b:1e:27:32:16:42:26:2f:75:6b:da:
83:73:22:62:47:aa:16:20:e3:27:fd:78:4f:40:7f:
10:cb:ba:e1:25:0b:83:c5:c3:b8:b7:2f:94:db:13:
bd:78:b3:14:e0:b9:39:c9:ae:6f:1a:5b:a0:ed:f1:
a4:00:8b:a1:af:9f:4d:eb:e6:e6:17:51:49:87:48:
59:fb:de:ec:3a:c9:47:66:cc:c9:b6:78:29:57:63:
cf:03:e9:0f:c9:d0:60:7e:e0:64:99:05:bc:43:0a:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:CE:5C:6E:CB:1C:15:14:76:01:30:11:CA:E9:F4:E5:68:FA:25
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3e:19:1f:88:40:94:c4:d9:04:e3:e1:22:5f:c9:a0:f2:c1:
db:1a:7d:ff:6f:1f:d4:1e:46:61:d3:29:48:70:55:0d:c0:73:
be:0a:a8:ea:2f:cd:4f:b4:a7:2a:12:6e:37:8b:00:ca:ea:f2:
d4:e9:53:6f:72:d9:bc:a7:98:70:61:d2:c6:99:16:23:2c:e9:
06:b4:4f:22:64:58:d6:1e:1b:6c:46:8c:be:41:00:c7:19:db:
cc:32:d3:28:40:b6:fb:3c:67:02:c1:ed:04:07:58:d5:9f:ae:
c8:54:ab:f6:2c:f8:cf:ea:20:a1:7a:85:df:fc:b7:3f:8a:0b:
6e:2d:3a:9c:d1:df:99:e2:f3:db:84:c7:f6:19:9b:54:0b:60:
97:00:17:51:26:7d:79:c4:df:73:b4:55:4b:f6:9f:90:74:a2:
d4:f5:3d:75:52:43:de:5a:b0:9b:da:33:6b:4a:88:6c:03:11:
e7:50:7b:f9:5b:1a:b2:7e:85:75:be:b6:b4:b5:d0:1a:2f:4e:
c2:38:4b:e2:eb:bf:79:d1:0c:0f:39:f9:aa:8b:04:33:21:94:
4e:70:1b:2c:7f:ed:4a:d9:e2:91:33:e3:87:6a:82:07:19:93:
ee:99:92:16:6d:4d:55:09:9f:43:7b:be:a6:90:07:f3:68:64:
33:bb:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:51 2026 by rpki-client