Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: jcTPVoLeldSQ25owbshWo/CfivrnWCtvYkgrENP5bJM=
Subject key identifier: C1:F1:32:15:05:5A:FF:B4:CE:2E:79:BE:1A:9F:FC:E3:7F:33:04:07
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 019F91A37B7C37734918A051853A7424151B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 0999
Signing time: Fri 24 Jul 2026 01:00:38 +0000
Manifest this update: Fri 24 Jul 2026 01:00:38 +0000
Manifest next update: Sat 25 Jul 2026 01:00:38 +0000
Files and hashes: 1: angOMGRdc3adpd1I_is4-dwikO4.roa (hash: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: LgKx/Vl6FcEAX4DbCZCpI+MEfU1dolcFPYWtbHVVR8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:7b:7c:37:73:49:18:a0:51:85:3a:74:24:15:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Jul 24 01:00:38 2026 GMT
Not After : Jul 25 01:00:38 2026 GMT
Subject: CN=c1f13215055affb4ce2e79be1a9ffce37f330407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:17:6b:c4:f9:cb:2c:af:ed:aa:da:87:5b:
29:1f:eb:f8:eb:77:ce:78:a9:85:5b:a3:60:c8:a9:
79:d8:b4:0a:8a:c7:b7:2d:9c:c8:c9:43:f4:98:33:
2f:86:6f:16:db:d1:23:aa:e4:a8:ba:5e:02:8c:6f:
ed:a8:a3:df:d8:9d:b7:37:2a:a6:f5:c3:ed:7b:4b:
f7:99:6f:a7:32:3c:67:f3:c2:cc:6a:eb:7a:5d:c5:
61:18:be:80:ad:2a:94:27:29:23:c7:e8:5c:7c:51:
e2:1d:1c:07:25:9d:76:cf:b3:d4:62:92:6e:52:a1:
77:7b:c3:0e:f7:7a:e1:75:7a:17:7a:58:80:b3:fb:
61:8f:45:0c:1c:b6:f8:48:37:14:7b:09:bf:b4:7e:
b3:1d:d6:eb:33:d7:cc:57:af:29:30:8b:81:fc:da:
ef:f5:b4:13:df:03:76:ad:4c:31:0a:d1:ee:79:dd:
e3:cf:58:56:de:b0:d1:1a:0a:be:f9:e7:3f:fd:23:
0f:ef:b1:9e:9c:a2:c9:0f:d1:fd:23:39:7c:fe:83:
fa:7e:8a:d1:d4:8d:6b:a0:ad:e6:ca:d3:c5:76:c7:
30:f2:81:37:f4:e3:c8:ca:ec:5e:86:3b:f4:e2:c3:
d8:61:88:7d:fa:06:34:53:7d:bf:cf:f7:78:22:50:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:32:15:05:5A:FF:B4:CE:2E:79:BE:1A:9F:FC:E3:7F:33:04:07
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3a:94:38:09:07:98:c0:9e:5a:71:bb:58:be:13:15:e2:e8:
c2:b8:d5:96:37:e9:5d:6b:02:21:cc:68:ad:35:d4:08:09:b8:
de:20:2e:c4:87:d6:f8:dd:8f:18:d9:f5:6b:cc:82:ff:8e:f8:
7e:8f:c6:f7:02:75:77:67:10:4b:5a:b9:99:52:40:34:d5:a2:
23:15:51:b5:cf:ed:4f:c1:0c:22:22:29:54:49:27:b5:49:52:
05:a1:95:3d:a4:5f:eb:8e:cf:ae:30:32:18:51:9e:28:1b:ea:
96:2e:fd:ab:9c:a1:0f:45:82:ab:1e:e3:da:e2:77:00:66:2a:
45:b0:32:11:a4:ea:13:a8:7d:91:7c:29:b3:a5:63:dc:a7:47:
cc:0d:22:9a:1a:85:0e:bd:63:a9:01:33:ad:68:c1:e4:36:fd:
ff:16:5f:a1:c6:f7:1b:ba:d7:66:28:05:69:51:39:0f:28:eb:
39:b3:50:9c:56:64:8d:53:ba:fe:ac:cb:31:ac:96:7e:f7:8a:
16:5e:11:04:8b:43:48:61:fe:d3:28:6e:08:81:ec:2b:ec:bb:
ef:ea:8c:d3:8b:31:9c:0c:2d:00:57:92:93:0e:e9:08:f9:ee:
95:e6:b6:67:b4:51:22:9c:00:9d:d4:09:7b:16:57:b8:8b:c3:
a6:c8:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:26 2026 by rpki-client