Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: Grn6leHrdztueRQz72q/Jvu4ljtYlplirhobEH2mB6M=
Subject key identifier: BB:4E:27:51:91:83:15:6E:D8:4D:19:26:2A:3E:FC:87:FE:1A:69:0C
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019D2A04AB2A4BFC732142AE290F373A9254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 15A7
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: wkRXZZ1zoYCmMDxh5LVe0zIAQCiWZaoJuwzOhpT+OH8=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ab:2a:4b:fc:73:21:42:ae:29:0f:37:3a:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=bb4e27519183156ed84d19262a3efc87fe1a690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:a1:9b:04:2e:b3:f3:1d:c8:0c:b0:c2:28:
e3:da:9d:6e:8f:e0:90:73:12:9e:fa:10:b1:46:5c:
e2:66:2d:aa:0d:35:ef:2e:c3:da:d8:5a:51:51:bf:
a5:96:30:04:d9:e4:c0:3d:84:8c:1f:3d:36:0f:0b:
de:5a:a3:01:da:b4:22:6b:f7:91:6a:bc:ef:71:00:
67:3f:61:a1:71:d9:23:c7:f8:e8:93:cd:a4:63:64:
29:17:be:67:4b:eb:e3:b2:8f:67:d8:43:31:28:85:
ad:0a:52:96:4f:7a:bf:04:e4:b2:ec:37:ba:4b:11:
e0:a0:95:39:f7:7f:09:b8:af:f8:a0:c1:bd:9b:17:
19:5d:4b:ce:bf:8a:a8:dc:2b:0a:06:c2:2c:09:d6:
a7:4d:db:49:b8:7d:7d:34:4c:3b:be:df:5e:9d:47:
e3:f8:87:b5:3f:6d:ef:1f:29:a9:5d:f0:c5:91:66:
78:d6:f6:5f:1d:93:2b:11:ae:4a:8c:5e:24:69:8b:
d7:6a:e3:09:23:49:2c:b9:39:09:de:06:c4:22:42:
89:84:83:1b:2c:a4:f2:71:c3:b6:a7:54:fe:3c:d1:
96:46:b6:69:2e:a1:04:db:53:aa:13:37:e1:a8:5b:
68:ab:64:77:06:37:a9:62:ce:3f:e3:da:7b:3f:c2:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:27:51:91:83:15:6E:D8:4D:19:26:2A:3E:FC:87:FE:1A:69:0C
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:6c:8f:ae:d7:fb:26:5d:14:b0:e7:b5:ad:b7:c6:73:13:
78:4b:7e:88:c8:91:be:89:08:ad:17:dd:96:55:98:be:5c:74:
2a:4f:6e:4a:70:40:50:cb:2f:ae:31:29:cc:75:62:25:3d:1c:
53:84:3a:92:bc:23:bd:15:13:01:11:4c:00:78:01:cf:7c:ed:
7a:18:9b:12:1c:00:bc:50:1e:87:fd:89:bb:02:71:b4:73:92:
f5:ba:2a:45:b1:e6:1b:91:ca:6a:9b:c1:03:ba:db:02:53:ba:
e8:5c:87:d1:ba:0f:86:24:75:a7:e8:53:6a:1e:73:cc:e8:ac:
80:25:9c:76:e0:1e:44:11:cb:28:18:e8:8c:c9:f6:26:29:56:
74:5c:6d:a7:90:e9:7d:b0:b1:da:55:4f:b5:aa:96:53:24:9e:
e3:bf:68:84:c9:0e:18:0b:33:22:a2:fe:96:b5:5c:f6:71:fc:
de:47:63:ea:57:3a:83:04:c9:65:13:b4:ce:1e:fb:0c:16:f0:
9d:49:f5:bd:48:d7:e7:1f:5c:01:b1:fb:42:df:60:37:4a:9d:
8f:cf:46:55:e5:95:00:a6:af:97:1d:ec:88:fa:07:da:fa:e3:
25:4c:fb:6c:5c:02:70:80:b9:0d:bf:78:fb:a6:24:d7:78:c3:
81:84:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:35 2026 by rpki-client