Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: r7/K1zwBFAnfg7SEHVbD/y96X5Gzpx6xk33EXuEYU2k=
Subject key identifier: 2A:96:91:25:C9:0D:8F:44:70:06:7D:DC:7F:08:0B:B6:94:B1:7D:33
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019E1DFE63DE8B8F37E322F87D0A25F607E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 1095
Signing time: Tue 12 May 2026 21:01:11 +0000
Manifest this update: Tue 12 May 2026 21:01:11 +0000
Manifest next update: Wed 13 May 2026 21:01:11 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: H+LXA5Qh1eDzDPwUyDrp8Mn3yj45jXFRa3dUGPfGTlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:63:de:8b:8f:37:e3:22:f8:7d:0a:25:f6:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: May 12 21:01:11 2026 GMT
Not After : May 13 21:01:11 2026 GMT
Subject: CN=2a969125c90d8f4470067ddc7f080bb694b17d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:3f:d5:ef:8e:18:6f:da:a4:7d:c3:bd:da:
2f:6e:e2:00:64:df:a1:55:35:76:6d:3a:39:9d:e2:
01:61:97:9c:d9:51:22:75:c9:c8:da:6e:2d:36:90:
99:23:9f:1d:06:36:77:78:26:1c:5c:c3:48:fd:b7:
d1:e1:c8:21:68:75:18:13:31:28:b4:5c:4e:e8:01:
cc:10:a7:ac:73:bb:4c:fd:df:5e:1b:13:a4:8b:8b:
20:98:79:8e:51:e9:11:2b:c2:5b:39:b9:b5:ab:42:
3f:a5:5b:4d:df:c2:52:95:3d:52:44:a0:49:1d:80:
15:7c:46:60:02:cf:49:43:41:4b:07:55:3b:69:fb:
35:ca:dd:b8:6f:da:95:76:7f:28:95:90:d1:f7:e6:
97:38:37:b7:7a:3d:02:67:bf:12:73:ed:15:83:1e:
3b:4a:5b:7b:32:b2:c9:1c:9d:ee:8b:05:d2:a2:71:
24:50:1f:75:d2:15:54:f4:6e:b3:e5:b0:4f:ad:69:
45:85:47:49:8f:7f:54:85:50:8f:56:15:b3:f7:30:
99:ac:74:17:38:5f:be:c9:49:cf:5e:60:25:cb:af:
b6:bc:23:e1:09:a0:44:19:51:96:39:17:fa:db:e1:
3f:0e:65:95:15:d5:b3:b0:01:4f:8b:a2:e3:3f:a9:
b5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:91:25:C9:0D:8F:44:70:06:7D:DC:7F:08:0B:B6:94:B1:7D:33
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:f1:c8:c3:ad:7d:6d:e9:ef:5d:e3:76:78:e5:71:b7:e3:
ff:4c:15:bd:d0:c5:ec:ff:21:f4:8a:b6:be:97:e6:b3:44:4a:
4d:ca:f9:6e:7f:82:d0:1b:56:23:58:b7:4e:7d:13:dd:e5:c9:
82:29:de:80:ac:69:c0:0a:b1:24:5a:f6:6d:dd:0b:71:5c:90:
4a:ad:62:6e:2a:77:6a:90:90:b1:1b:3d:be:f1:d5:35:ca:46:
da:dc:c9:72:9e:72:ee:df:6d:4d:7d:b9:a5:ca:fc:79:8c:7b:
35:97:94:c6:b2:a0:f0:e7:3f:be:34:b3:ea:6e:ec:44:45:ea:
d6:bb:c3:85:f4:3d:9e:ef:54:f1:7a:07:1b:45:6f:8b:1b:a3:
19:34:1c:14:db:8d:07:45:da:31:74:9f:2a:58:95:9d:64:25:
a5:3e:54:43:44:63:63:7e:78:3f:40:85:d4:4e:20:ca:56:d9:
d3:59:04:59:4d:7e:27:07:5e:3a:e9:64:92:9d:00:a9:a5:c4:
7c:14:45:2a:6f:f3:98:31:d8:e7:ad:ca:61:39:35:f5:c2:cb:
74:3f:1e:cf:67:db:01:14:fe:13:78:a2:a8:f6:56:50:32:9f:
ec:f6:1f:fa:70:cf:bc:27:b9:5b:6e:6c:60:be:27:25:8a:b2:
c1:1f:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:27 2026 by rpki-client