Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: Rj85aPWjG79Z2++gVpRTvUiaHnnoWxtbKY1OgMON2Ao=
Subject key identifier: B6:71:55:8B:6E:A4:F7:6E:29:2A:E8:0B:9A:C2:21:B2:F7:01:AD:69
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019D26CCDB87410F42BCDA69AD16F766B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 1015
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: 9hwmCt0WiwU7/BjqaPb1EBB6geo6axr/7lmXksZudO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:db:87:41:0f:42:bc:da:69:ad:16:f7:66:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=b671558b6ea4f76e292ae80b9ac221b2f701ad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:85:4e:30:a3:84:1f:55:77:07:19:ea:94:
a8:5e:3e:c4:af:46:8a:2f:54:5e:3e:2b:cc:25:e3:
75:c2:47:81:e0:c1:6d:08:3e:e8:02:d1:4f:0c:76:
84:f2:d3:62:8d:a4:ed:9e:22:df:0e:0b:01:7d:bf:
a7:30:e8:f8:58:28:ac:ec:e9:e1:c3:6f:31:b9:df:
25:a1:06:1c:75:8f:e0:61:bb:ee:6a:e4:2e:ea:27:
a4:1e:70:6d:55:6f:7e:c1:93:55:21:24:f6:c5:8c:
fa:3a:1b:21:88:df:b6:d3:2a:08:39:5a:36:2f:29:
7d:c1:92:fb:d5:8b:18:79:bb:04:7e:c0:30:44:24:
8d:f0:42:12:e0:45:96:38:1c:c1:f2:19:28:05:a5:
34:75:5f:f8:7c:29:f2:33:85:d4:01:cd:07:33:50:
a7:b4:b1:86:9e:e4:73:fa:8a:bf:e4:5c:6a:7e:2d:
e9:01:85:75:45:ba:6e:8d:9f:1b:03:c8:0a:90:9c:
5d:5a:ed:70:7c:5b:56:4c:27:ca:8b:80:90:f7:85:
61:2e:8a:c9:06:e0:fe:07:18:db:4a:97:0b:8b:36:
8b:72:00:3e:30:e3:1e:70:e4:88:d7:ee:53:53:f7:
8e:59:b6:2f:87:67:a6:bb:07:5d:0c:7b:f8:7c:83:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:55:8B:6E:A4:F7:6E:29:2A:E8:0B:9A:C2:21:B2:F7:01:AD:69
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:e1:b1:30:05:1a:fb:52:27:e5:61:84:f0:25:fa:14:e3:
4d:ee:23:9f:e2:54:1f:11:44:be:3c:81:53:d9:28:3a:01:16:
4a:f9:2c:a9:14:e0:39:80:4d:e0:f0:17:3e:44:d1:02:03:22:
89:d2:51:3d:ea:74:19:1d:cf:88:41:74:46:d0:e8:91:10:9f:
ad:40:c5:39:3f:84:ed:ea:b7:10:53:67:ff:05:fe:04:ec:45:
7f:ec:06:85:00:8f:0c:cc:d6:64:59:b2:92:a4:83:39:e5:77:
67:d1:fe:5e:cf:0b:70:2e:e6:ca:7e:c2:ae:b7:10:dc:eb:47:
2a:73:9c:77:29:8b:5b:59:e9:d3:e2:2c:43:9a:ce:dd:68:55:
8d:d4:21:f4:13:da:16:37:17:37:59:0a:b4:ae:19:57:f8:da:
a4:cf:82:90:47:60:29:78:98:61:88:47:7f:a4:2b:b7:e8:15:
f4:b1:19:59:75:5f:30:1c:99:a4:ed:41:51:30:d6:e6:21:eb:
9a:ee:e3:a8:91:99:c8:9f:aa:34:66:47:0d:08:a4:de:96:fc:
f2:8f:19:d5:30:66:e1:cf:3c:29:9e:48:cc:2f:ce:6a:5d:e0:
27:21:6e:b4:16:59:c2:35:76:c0:ce:d1:bc:10:b8:64:51:03:
6c:c5:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:51 2026 by rpki-client