Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File: u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier: H63KXSaDAckr+pBPxwAe+fUNO2dSpZDBMwqYhTEyixs=
Subject key identifier: D2:E9:76:19:5D:54:6D:7A:09:F4:72:DF:28:AB:FF:58:69:94:58:46
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019D284D90FC1A5E35DF8F25FB61F31F8BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number: 10BB
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: aBX6rgftAu1Iv0U9KrcW9CmdbUE.roa (hash: 8g2DS5hok2boyqGwi6mRMIyZrAjJcysDPJI7SQulhxM=)
2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: p4Ppc9eBQR36HDNoXCTaJvHNwUi7aioplqhien+Du80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:90:fc:1a:5e:35:df:8f:25:fb:61:f3:1f:8b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=d2e976195d546d7a09f472df28abff5869945846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:ba:ab:fa:4b:8f:32:d3:19:ad:58:e9:22:
ff:7b:68:22:c0:d6:65:4b:05:cf:cc:08:c3:d5:82:
06:82:dd:75:4c:94:df:fc:e9:7a:40:7b:12:61:e8:
3b:0f:d8:e6:13:09:4e:58:b3:99:b0:d5:d1:ec:35:
07:ee:56:9d:f7:95:f3:b0:9a:bf:5b:83:b1:da:6f:
70:3c:48:d5:bc:af:6f:40:d0:bb:ab:f0:aa:15:1b:
d4:ac:b3:a9:5b:ad:07:1b:cb:d6:80:32:aa:be:2f:
3b:87:a7:0e:12:7e:e9:5a:15:cf:f8:70:15:fd:00:
e5:ff:9b:60:95:0f:67:ba:92:38:ed:e5:76:36:89:
b7:5d:e7:4d:68:14:20:f0:03:7c:57:99:a0:f7:9d:
be:5e:1e:7a:9a:e4:4c:d9:f6:de:56:2d:72:06:9d:
d5:9d:08:63:30:c9:7a:51:03:16:86:31:0d:1e:79:
8f:4b:aa:09:d5:bc:27:03:6f:aa:a2:5e:0a:e1:bb:
8b:b4:3f:56:1a:35:19:e7:36:83:c1:e7:42:85:2c:
e2:dc:22:2f:c1:bc:de:fb:aa:7a:c6:f0:7a:b2:fe:
11:57:b6:af:1b:18:10:38:91:12:5c:38:57:a7:10:
21:f4:7e:81:38:b2:3b:0b:16:30:cb:5c:4b:a4:07:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:76:19:5D:54:6D:7A:09:F4:72:DF:28:AB:FF:58:69:94:58:46
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:da:9c:56:cd:6a:68:63:87:23:5c:a9:27:f0:ec:76:9e:
10:94:8a:59:e6:cb:b8:29:b5:35:9f:25:8c:58:c4:97:c9:0d:
68:ab:cc:8b:fc:9b:8e:57:35:60:35:4f:b4:08:38:da:e7:53:
92:41:56:dd:b1:32:f5:89:21:4f:f3:a0:d6:7c:16:0b:2d:a0:
63:98:12:0a:cd:30:1c:5a:c0:da:a7:ef:6d:86:ca:fe:4a:47:
59:e3:89:80:e8:8d:8b:68:bf:64:ad:c0:06:bf:75:69:a5:64:
52:d3:77:63:b4:a4:9a:60:1c:d9:a3:e1:f0:b8:4b:13:be:14:
88:12:ae:6c:e6:74:25:e6:65:65:c4:cd:e6:3c:48:d3:54:53:
05:e3:95:d9:0f:7c:eb:69:8e:20:8d:89:59:48:73:50:2a:b5:
a7:e8:4d:2e:26:c9:08:ce:47:10:80:a3:ac:d0:8a:51:a2:b2:
47:1a:70:0a:2e:b7:37:15:21:de:ae:c5:11:d9:1e:cd:3d:7f:
7f:c3:25:7b:5c:c5:e6:fb:44:7c:79:f4:1b:74:47:29:64:c7:
db:14:38:33:bf:18:5e:8c:d9:98:10:24:37:59:eb:13:e0:99:
40:79:e4:8a:56:ca:77:ad:36:f3:28:7c:5f:7b:ab:1d:e6:19:
f4:43:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:04 2026 by rpki-client