Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: QR7Mv4X6MDK14pEM+PSbMXmPECqjRmLdraUyuOOONN0=
Subject key identifier: 74:89:03:E4:37:15:52:4A:13:FC:0B:29:0C:1D:3F:3D:4C:64:24:55
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 019D2A7228FBEDFCA9A9C1766361CFB3B6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 0374
Signing time: Thu 26 Mar 2026 14:00:17 +0000
Manifest this update: Thu 26 Mar 2026 14:00:17 +0000
Manifest next update: Fri 27 Mar 2026 14:00:17 +0000
Files and hashes: 1: og-DO9CncoCadS5HOAJ0BfOSnew.roa (hash: sKXs67ay0NB66Jdkd/yiUU/rBcBdOHYEFZ52pYLtyEc=)
2: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: +sCMHQoVLmRKngacnlE3EoNqbeu0eF6FzVg+AkX4LHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:28:fb:ed:fc:a9:a9:c1:76:63:61:cf:b3:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: Mar 26 14:00:17 2026 GMT
Not After : Mar 27 14:00:17 2026 GMT
Subject: CN=748903e43715524a13fc0b290c1d3f3d4c642455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:6c:a7:e8:73:2e:8b:29:7c:c8:1c:ea:76:
cb:bc:40:cc:bb:de:2f:3d:9b:21:3f:ce:7b:8b:b1:
35:cd:e6:ea:c6:7d:e0:1b:1d:75:5a:e9:ff:5f:72:
01:2e:6f:2a:ee:75:50:36:cf:ff:cd:6b:f4:8c:03:
ae:28:8d:cb:a4:be:62:35:07:21:90:c5:e4:63:20:
7c:81:86:b6:4a:dd:26:28:92:a2:8b:d7:ec:a8:7b:
12:a0:b5:82:25:5b:98:ed:94:4a:b5:ad:96:84:df:
ea:72:f5:f8:26:a5:3f:6b:9b:15:8d:b9:b0:95:1f:
6e:63:d0:01:55:f7:70:db:dd:36:63:fa:2f:26:93:
dc:48:86:24:ee:9b:c9:6f:34:8b:cd:8e:40:88:4f:
72:a9:04:d2:0b:5a:d2:81:07:1a:d0:9e:f1:ec:5b:
3a:03:4d:9a:37:57:15:d8:2b:70:8f:66:b7:17:f9:
e6:52:76:87:b3:23:2c:ed:c7:c8:7a:96:1b:12:e9:
a4:ee:02:c6:57:ab:7f:ff:04:c1:46:25:ca:11:88:
e0:10:c8:0d:51:9b:bb:a5:39:2b:c4:a2:00:f0:37:
95:cc:1f:fa:87:3a:68:00:52:81:e7:f5:3b:59:b3:
4e:e7:fb:ab:be:83:7b:67:b0:55:b1:c5:99:89:f1:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:03:E4:37:15:52:4A:13:FC:0B:29:0C:1D:3F:3D:4C:64:24:55
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:a1:88:a1:03:81:92:4a:28:d7:55:4b:27:1e:8e:06:55:
1b:81:55:86:0d:0d:10:1d:a1:d6:52:7c:a7:67:9c:34:db:76:
b1:05:63:49:f4:f0:59:3b:ed:e3:cc:d2:f0:54:68:e8:70:a8:
04:30:34:79:ff:02:41:60:94:4a:9d:d1:f4:a2:07:d6:06:84:
18:33:08:ec:17:50:9f:52:8b:22:ae:94:77:12:18:33:66:93:
08:a1:d7:ef:bc:bf:b8:45:07:4a:c0:23:52:cc:44:fe:05:97:
48:17:1d:ca:90:6e:e1:09:bb:d3:03:85:f9:7c:a3:dd:30:48:
79:3e:6b:1a:f0:06:68:00:8f:10:01:e2:4c:c2:8b:0e:d6:5c:
6e:95:fa:f1:f9:e3:28:99:da:cf:29:4a:ff:89:74:f0:83:2e:
e2:ed:5d:f9:a4:c3:dc:5b:97:9f:1f:77:9f:45:b0:cc:d5:a9:
65:39:31:1a:27:74:bf:f3:72:4a:e0:f7:97:07:06:b0:df:7b:
c6:8c:4a:78:a2:35:35:72:7e:0f:c2:58:8b:97:58:b0:b2:ba:
03:9e:45:06:d8:c8:8d:87:9c:bc:dc:0d:d7:35:dd:73:3d:1e:
38:e5:97:a0:d6:eb:51:35:4c:db:1c:89:2d:c5:50:2c:59:f6:
88:2c:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:38:09 2026 by rpki-client