Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: Yo85Rucdb1SZ+L2IHXU+WbjPA8eKH1LsFVwPQKVr1as=
Subject key identifier: 33:80:FB:33:E8:EA:9E:21:BC:EA:B0:E8:B6:9D:38:63:55:A9:DF:A5
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 019D284DDE92D11F4C26F397FFE947D99938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0BEE
Signing time: Thu 26 Mar 2026 04:01:25 +0000
Manifest this update: Thu 26 Mar 2026 04:01:25 +0000
Manifest next update: Fri 27 Mar 2026 04:01:25 +0000
Files and hashes: 1: OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa (hash: jsm1Kc9N3YzBvdT9WWkethSdjz6IIBqoQUC68R7xEgA=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: jSjwUYe+lTXCHg6WKjWZ6x4wWDbTh7UHaLt7Q6VhyHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:de:92:d1:1f:4c:26:f3:97:ff:e9:47:d9:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Mar 26 04:01:25 2026 GMT
Not After : Mar 27 04:01:25 2026 GMT
Subject: CN=3380fb33e8ea9e21bceab0e8b69d386355a9dfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:f6:1f:20:0c:93:3b:4c:73:95:b5:54:9e:
67:20:c2:28:9b:25:b1:1e:ff:34:a4:22:34:50:af:
1f:78:75:da:e8:3a:73:01:18:a2:f1:52:6f:10:5a:
1c:79:7e:84:06:62:b9:b1:27:1d:e8:a7:fc:55:0e:
26:bf:14:eb:5a:0f:4c:4c:86:3c:20:78:ca:33:87:
34:fd:19:81:cb:6c:de:07:cc:ba:70:d7:bd:d1:2a:
7b:82:7f:d4:d3:d7:0d:aa:14:8b:71:79:15:1c:21:
be:35:a3:a8:53:c1:1a:18:32:de:22:32:1c:81:a8:
28:05:c3:f0:85:1c:ff:1a:15:5d:28:57:15:65:64:
be:9c:b2:ae:f2:46:e1:41:1d:6b:2c:ce:d4:e8:e6:
d4:ab:8e:c1:8a:af:da:34:04:0a:bb:c8:9c:55:c4:
fb:e9:8e:3e:d3:f6:9a:7a:a7:4d:25:16:f1:e4:cf:
49:f3:61:18:da:1a:e5:d6:d2:60:05:1c:6b:31:b8:
e9:c2:ff:29:6f:09:36:49:ca:76:05:98:35:98:33:
d6:c8:b3:47:8c:46:dd:36:1d:8c:0a:1a:9f:2f:69:
0b:07:b3:e8:91:a2:38:1c:e0:8c:ea:c0:3b:5d:7e:
93:ea:61:e3:1a:29:db:51:61:b3:e9:a7:79:1f:45:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:FB:33:E8:EA:9E:21:BC:EA:B0:E8:B6:9D:38:63:55:A9:DF:A5
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:5c:6e:c6:64:53:3c:68:fa:21:fd:66:fa:43:39:a8:9d:
cd:75:92:67:7a:bd:50:20:7d:e1:28:11:e7:5e:ce:d0:c8:53:
41:dc:3c:e8:be:37:24:b7:d3:13:45:06:14:f1:54:78:56:77:
5a:7d:54:79:d0:c6:1d:c8:6d:30:0d:27:54:c3:31:da:71:bc:
7d:13:21:d9:f0:27:27:ef:3f:c7:15:a6:29:c9:07:ac:93:54:
9b:30:f8:7e:e4:97:41:7b:e2:4c:21:3b:d1:22:93:8d:15:62:
d4:7d:b5:90:ae:a1:9e:c4:71:2b:c6:88:c5:2d:2f:ab:05:43:
ce:39:74:05:91:71:bf:bd:fd:72:97:c1:ea:9e:52:2c:29:f0:
22:21:3b:d6:ee:a4:46:0a:5f:1f:a1:29:6d:4a:b9:71:01:3c:
36:37:72:06:f1:a5:5c:72:7f:a7:13:09:05:6b:3a:9c:d0:a1:
9e:aa:e2:34:9f:26:00:05:0d:ef:35:cd:a6:01:fd:6a:09:e8:
c7:6d:3a:e6:a1:f0:70:35:72:a7:25:bc:f9:b4:09:cd:f0:44:
ea:2a:1e:5e:8b:51:f6:ec:79:f4:b0:3d:e4:97:6b:5d:a1:b2:
57:88:0c:f3:69:da:c4:c4:3e:89:4e:cd:6b:ce:ee:7c:9c:2e:
cb:62:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:11 2026 by rpki-client