Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: 09ZJipsuwIlWOzZpvktUFx0GhySdq1mdFRMBeqAudaA=
Subject key identifier: 18:D2:F6:D5:D5:6A:81:8A:18:19:11:3A:5A:3C:AB:26:C7:B2:2A:63
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01A0D5DDBA0B03E2B0297AEB081DD46F0E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0DA0
Signing time: Fri 25 Sep 2026 00:01:13 +0000
Manifest this update: Fri 25 Sep 2026 00:01:13 +0000
Manifest next update: Sat 26 Sep 2026 00:01:13 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: StCo6iWgAHfnoyFMwPZ6u/HVpw7wu83q/ge/roCA9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:ba:0b:03:e2:b0:29:7a:eb:08:1d:d4:6f:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Sep 25 00:01:13 2026 GMT
Not After : Sep 26 00:01:13 2026 GMT
Subject: CN=18d2f6d5d56a818a1819113a5a3cab26c7b22a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:50:84:3b:f4:12:2a:cf:cc:84:b4:55:ff:
28:f0:96:51:88:3c:d5:70:4c:99:c5:4c:c1:47:ce:
04:b5:8f:7c:e3:c1:ce:ab:45:40:47:3c:25:08:73:
52:15:28:6b:f8:02:bc:41:0e:1e:7e:5b:e9:e7:32:
06:e9:bd:0f:80:44:75:ca:0f:1f:aa:9f:1c:eb:81:
00:0b:23:16:0b:25:6a:f0:4e:9a:3d:14:6c:26:74:
74:28:85:ef:e7:33:b8:e7:b2:ed:7d:d0:af:dc:bd:
aa:49:e1:c5:a0:42:92:c4:04:23:0e:e5:17:24:09:
5d:8f:48:e8:24:9a:06:22:35:ea:5f:99:33:44:dd:
be:78:df:f9:f8:1d:df:44:6c:24:db:20:19:82:07:
10:87:3d:f8:88:07:a9:1a:b2:51:3e:75:f7:d5:24:
02:6d:94:a6:b5:b2:00:a7:de:26:5d:f3:57:93:9f:
f2:d4:35:79:7d:b8:84:24:36:4a:f7:2a:46:77:6e:
d8:67:5e:f5:0b:8b:ee:7e:f3:ed:e3:de:a0:62:57:
b7:d0:d8:24:ac:3b:23:03:4a:11:18:55:00:ee:f4:
3f:03:61:fc:78:03:eb:01:bd:8f:af:78:5c:3a:bf:
0b:08:3d:1c:c8:63:0f:34:84:01:5b:74:44:8a:ea:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:F6:D5:D5:6A:81:8A:18:19:11:3A:5A:3C:AB:26:C7:B2:2A:63
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:b9:1a:be:c1:9a:eb:4b:2a:f1:23:59:7b:c3:9c:be:8d:
b9:1d:e3:ce:65:49:71:de:0a:23:d2:04:0c:3f:52:09:c4:0f:
0a:32:56:dd:25:b2:5b:eb:18:5c:92:73:50:63:00:76:07:7f:
f0:6b:df:98:b9:b3:bb:39:3f:9c:18:38:91:e8:1a:00:1c:0c:
36:cb:a8:1d:25:51:9f:da:10:f4:25:96:e3:47:89:b4:f3:37:
6c:32:2f:36:f0:94:84:90:f1:51:17:6f:78:7e:2a:3f:7c:1e:
8d:bc:4b:6d:60:ee:14:ab:e0:8a:f4:da:d8:2a:4e:f2:3e:c4:
6d:6d:2c:16:25:2a:84:15:35:72:6f:3c:90:be:32:ff:4d:6b:
29:48:1b:4c:c3:bd:a4:2f:8d:12:e4:a5:d7:68:ea:ef:51:00:
38:3c:7f:3a:90:80:29:11:06:86:a3:5d:9b:09:19:bb:cc:27:
b6:b2:33:42:f5:96:c5:71:cf:b2:00:95:e6:06:14:e9:16:29:
46:0b:33:81:e6:42:49:ef:aa:22:d5:77:ed:28:98:a0:30:19:
0c:b1:12:a8:9c:d8:29:a1:6e:17:9d:89:7e:7d:93:69:3f:d2:
99:04:2d:43:3a:84:80:4c:7c:fd:6a:9b:16:93:4c:f7:1a:40:
ef:94:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:46:12 2026 by rpki-client