Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: k1UUlpNKTLG8bBM5+XlTcPNUeVyP54wqdLynYzSEb7o=
Subject key identifier: 0C:15:B8:04:64:31:24:1F:65:37:39:04:2F:02:68:E5:A6:47:7D:C5
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01A0D34B64D3E858E0056B32DFC04BE75D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 11FC
Signing time: Thu 24 Sep 2026 12:02:08 +0000
Manifest this update: Thu 24 Sep 2026 12:02:08 +0000
Manifest next update: Fri 25 Sep 2026 12:02:08 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: D2lzvUt8bwXBewl6FJQBOTVZIKjbA96l6ErkzxM/EQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:64:d3:e8:58:e0:05:6b:32:df:c0:4b:e7:5d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Sep 24 12:02:08 2026 GMT
Not After : Sep 25 12:02:08 2026 GMT
Subject: CN=0c15b8046431241f653739042f0268e5a6477dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:15:47:85:30:47:e4:51:b4:d0:84:74:d5:
cf:9c:00:9c:4b:c1:49:f6:5e:e2:67:ce:f5:85:cb:
d3:cc:56:59:26:a7:a7:c3:fe:36:2c:3d:c5:01:43:
3d:e4:4f:f1:71:e9:b7:d7:d1:7a:0a:1e:eb:39:87:
68:f4:e4:b6:b9:d2:fc:52:06:e9:59:34:4a:be:31:
05:f6:fe:c0:b2:b4:31:a7:ae:26:60:2b:f2:e7:54:
a7:ad:76:d3:8f:89:ee:1d:77:9c:58:33:41:f6:54:
c2:45:11:90:f0:d1:a5:a4:c3:72:36:93:3b:74:ce:
59:fe:11:d0:18:1c:eb:93:b3:cf:4c:e2:28:73:33:
e2:0f:d2:f2:b0:89:c9:83:62:7e:f0:05:09:2c:ef:
2a:5b:4b:c2:b5:ff:03:56:81:07:8c:c9:b2:3d:23:
43:2d:bb:fa:dc:8a:b9:42:89:88:68:23:80:96:b0:
88:50:86:3b:bb:37:08:da:ca:13:66:01:ba:89:fe:
17:d0:99:eb:ab:4f:34:bc:1b:2c:af:35:3f:c8:12:
12:2f:7c:35:33:be:e7:02:98:53:77:b7:6f:a0:0d:
61:ab:d0:c2:06:d9:e0:ce:f6:98:bd:16:04:20:4b:
ca:82:7f:08:c5:c8:09:5f:4a:bd:a6:5b:9d:f3:46:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:B8:04:64:31:24:1F:65:37:39:04:2F:02:68:E5:A6:47:7D:C5
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:11:09:91:3d:af:8d:37:a7:14:21:3f:7e:0a:60:0d:2e:3b:
0a:89:62:6c:e1:55:64:fa:23:67:c4:28:30:5e:3a:5a:d0:57:
8b:04:94:ca:f2:2d:06:28:37:e9:c8:da:fb:16:16:d0:9d:21:
28:b2:3d:bb:c3:6b:b8:21:9c:45:4c:19:38:47:e0:54:64:ff:
a4:a6:8c:7b:5d:ef:72:95:21:f3:8e:69:c8:30:91:99:9d:cd:
cb:d9:78:d9:17:b1:16:83:df:63:a2:fe:9c:ec:2d:51:77:28:
d2:e8:ac:49:ea:3a:67:b8:5e:1e:d9:1d:e6:91:c2:e0:ec:b3:
ca:95:87:39:1f:6c:55:3f:52:5c:55:01:89:04:11:16:34:bf:
09:d4:f7:27:a7:72:3a:05:41:0f:ee:67:25:8e:15:c8:be:06:
af:9d:f4:ce:2a:18:0f:f3:22:70:8d:5f:6d:3f:65:79:ac:f1:
4e:46:2b:fa:0e:7c:f0:1c:d1:15:c1:0f:d3:89:f5:59:74:a9:
f6:f9:a5:2d:25:e0:b8:ac:67:70:d2:74:31:a5:f4:13:50:5d:
f0:63:26:44:11:50:71:e8:a2:ce:b3:e6:92:24:e8:26:97:1c:
0b:a7:c8:ef:f6:a8:0f:9d:32:3c:49:91:0d:5c:cb:80:f5:3a:
2d:c7:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:59:17 2026 by rpki-client