Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: bGS6/5s3Mo3s7RaGLzjyHs3tNp+v2XEDB55toCaKi84=
Subject key identifier: B1:C8:59:64:42:77:94:60:5C:28:7F:9C:83:75:C7:5E:11:6D:02:3C
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019F916D90B076D1CB7E218A450301A10400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0CF8
Signing time: Fri 24 Jul 2026 00:01:44 +0000
Manifest this update: Fri 24 Jul 2026 00:01:44 +0000
Manifest next update: Sat 25 Jul 2026 00:01:44 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: kUSOUMCCQwjYGyiPULyKDuHmq31mOKKKqBvPOYqfRRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:90:b0:76:d1:cb:7e:21:8a:45:03:01:a1:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Jul 24 00:01:44 2026 GMT
Not After : Jul 25 00:01:44 2026 GMT
Subject: CN=b1c85964427794605c287f9c8375c75e116d023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:64:e5:26:4c:e9:bd:c3:aa:b6:c5:bc:e4:
22:73:19:3e:43:72:e4:47:17:23:ad:f9:72:11:90:
cd:c0:be:42:9f:cc:db:6e:21:39:3b:2b:8c:e1:2e:
49:6f:6b:15:66:af:d8:db:b0:0a:de:be:ff:c7:88:
be:b6:fe:5c:a9:91:7d:04:0a:78:b1:9c:f2:f0:eb:
62:3b:78:1c:ac:5e:5f:6d:06:65:7b:c1:74:8a:73:
ed:bd:2c:52:77:70:67:a5:66:f8:b6:2a:34:19:af:
69:02:dc:87:3a:fd:e8:99:c7:b6:05:c6:7d:61:9d:
14:04:3a:fe:42:f1:c6:6a:ab:79:86:d7:fb:61:e5:
68:60:02:32:86:79:d6:a6:d1:a1:f4:86:16:e3:a4:
4a:b6:ff:62:f3:d1:d0:b5:74:42:7e:83:22:54:b7:
b7:52:2a:bc:66:2f:a0:9b:6b:e3:c7:a7:58:9d:e2:
80:25:b0:79:6e:12:6c:27:28:9e:ff:bf:f7:c0:93:
e4:2f:73:6f:a1:35:80:f1:65:e8:50:41:11:62:fd:
30:22:86:94:24:39:8c:38:ae:93:46:10:5d:3e:59:
34:f1:ef:f4:fd:0f:4a:a3:1e:97:49:86:1f:d1:7f:
ff:b9:2a:ce:93:51:d8:1a:f0:24:19:c4:63:3c:3d:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C8:59:64:42:77:94:60:5C:28:7F:9C:83:75:C7:5E:11:6D:02:3C
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:80:50:96:33:72:cd:fd:25:89:b5:2c:df:fa:eb:39:25:
43:4e:40:3e:b7:95:d6:08:23:65:97:4f:de:ea:70:54:61:a8:
1d:4e:e0:65:fa:62:5f:4f:91:1c:ed:32:e4:67:39:64:1c:dc:
4e:09:72:d6:e6:58:2d:24:93:ea:4d:6e:30:93:22:d5:f3:b4:
5f:ba:33:92:91:43:e8:b9:87:5f:ec:16:04:93:d0:fa:a4:6f:
94:6f:ab:37:20:90:07:85:94:39:98:60:48:4d:8f:23:e3:79:
ee:fd:6c:d8:94:9c:45:14:f2:1e:99:ba:10:61:08:57:70:83:
bf:67:74:4c:c6:33:e2:c1:9a:08:cf:51:2a:f5:6f:75:61:5f:
c7:f5:0e:39:55:b1:9c:cf:5c:a0:7d:14:10:03:bd:b0:a7:c9:
c3:1d:b8:51:9c:c4:fa:b0:61:1b:14:38:7e:bb:78:94:8a:09:
4e:26:29:ef:c8:1f:d8:81:e3:0a:9a:4b:13:8c:55:ab:68:35:
f3:22:f4:7a:ee:32:19:0c:75:0a:26:98:c8:c8:0d:0f:aa:25:
d0:b8:1f:70:2b:89:32:4c:67:1d:18:e6:c6:45:3e:1f:32:66:
b9:fe:87:19:9b:9e:3c:c2:e8:5d:f4:38:6d:c2:e8:16:31:fb:
4f:b7:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:21 2026 by rpki-client