Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: x51YlPCBguKQRNdFS1Jj7rKt5H2776oUPay1UL41iYI=
Subject key identifier: 82:16:AF:BB:83:BD:4B:AB:B9:C5:70:5D:66:9A:9D:EE:F6:10:00:18
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 019D27039E20B8EE724B9F263C1A4742004E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 17D9
Signing time: Wed 25 Mar 2026 22:00:41 +0000
Manifest this update: Wed 25 Mar 2026 22:00:41 +0000
Manifest next update: Thu 26 Mar 2026 22:00:41 +0000
Files and hashes: 1: d0KoLmpFubQ_64Qc83h5i1L505w.roa (hash: zAJ7EXLhHFfDZGHhK77ZVPQkFypogyCaEsnMPH+/6fI=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: sgaBfc2rSJbxkP8rMlPqL5eQemJnUTEksNRU/VbXoPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:9e:20:b8:ee:72:4b:9f:26:3c:1a:47:42:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Mar 25 22:00:41 2026 GMT
Not After : Mar 26 22:00:41 2026 GMT
Subject: CN=8216afbb83bd4babb9c5705d669a9deef6100018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ce:9a:ed:27:41:5c:94:4e:c5:66:e7:d1:76:
55:6b:7e:68:4f:44:d9:7c:1f:2f:53:70:75:a7:9d:
1e:8c:a3:d7:c1:b4:b1:ae:bb:f0:99:50:2a:68:44:
44:f8:4c:a9:93:29:41:af:c6:81:f1:cc:ae:ae:1c:
0d:64:1b:6e:d5:61:5d:5e:ed:e1:b1:9f:b0:76:4c:
06:37:09:c8:95:c5:e9:38:f0:a8:37:51:7c:e5:94:
9c:bd:18:b0:13:d2:f3:e1:5a:85:6b:76:1c:cc:a2:
f9:26:fa:c7:a0:68:ee:8b:34:86:c5:de:b6:e7:34:
33:ff:6c:a7:60:92:fa:49:ea:20:09:7a:75:dd:a9:
cc:c0:33:e3:78:27:b4:c4:23:b3:d4:0d:c0:66:58:
d9:7c:03:a7:84:50:d1:48:93:d4:33:aa:f2:d4:cc:
a5:23:69:29:94:00:0d:7c:4d:28:ff:1e:83:ac:67:
0a:53:c6:e7:87:31:49:4e:77:d4:39:91:44:4b:eb:
b2:f8:2c:53:4b:11:e4:a5:07:bd:70:bd:3c:0e:2c:
7a:35:89:dc:ce:d0:00:82:18:d5:b6:b2:c5:45:17:
21:e9:f0:47:36:dc:b8:0b:25:69:aa:0c:1b:7e:95:
34:2b:b0:ec:1a:f1:97:d7:e9:dd:5c:55:50:eb:37:
8f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:AF:BB:83:BD:4B:AB:B9:C5:70:5D:66:9A:9D:EE:F6:10:00:18
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f6:6e:98:fa:b9:e1:35:40:fe:4d:8a:57:ce:2f:6e:c1:34:
9b:77:f1:bf:c4:bf:fe:74:8b:61:bd:d2:c4:e5:d4:1a:8f:40:
c8:34:7a:5a:db:d3:0e:6d:a9:07:57:c3:fa:c5:86:12:26:a2:
f5:32:d4:67:7a:17:2f:4a:ca:63:84:b3:37:7a:45:05:45:43:
8f:3e:7d:86:da:be:6e:a3:9c:8e:4f:63:34:d0:5f:48:97:02:
04:cd:58:bf:38:9f:01:b9:ed:b3:bc:b3:07:e9:f9:0d:99:ee:
59:97:2e:75:eb:0c:64:4e:ab:86:ba:dc:e0:a5:82:0d:9f:87:
aa:d1:32:bd:be:7c:01:26:0d:96:96:a2:7e:15:45:7c:2e:c3:
bc:6c:5b:63:66:d6:97:d2:c0:59:ca:be:9d:97:8d:2d:c6:52:
b4:89:14:02:21:42:87:48:54:aa:5e:18:c9:cb:53:44:b8:2c:
20:7a:76:cd:12:23:06:7d:c8:71:34:52:cd:83:ef:b6:91:f2:
3f:a5:a1:07:e4:b2:ae:8b:0d:bf:c4:6f:0d:32:1b:24:16:86:
af:fe:9a:1e:3a:2f:94:0a:c9:34:c4:d8:b4:56:55:f6:70:48:
4c:9c:ec:8c:ec:6f:3c:f6:12:08:86:a8:2a:b9:82:46:78:d5:
ab:13:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:15 2026 by rpki-client