Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: oXIS++UvPuqC/j3XF9//CKNWIfcA9NfjdqveqUJgNPo=
Subject key identifier: C3:B0:D2:B0:01:A3:B0:B9:4A:49:DB:C1:5D:7D:31:00:65:A4:4B:41
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 01A0E1AB86066289E4F30EB61FEF4F01D7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 0A47
Signing time: Sun 27 Sep 2026 07:01:49 +0000
Manifest this update: Sun 27 Sep 2026 07:01:49 +0000
Manifest next update: Mon 28 Sep 2026 07:01:49 +0000
Files and hashes: 1: angOMGRdc3adpd1I_is4-dwikO4.roa (hash: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: knlZ8OYP0Q+N++AivOZNoLRyjlouMe3LyvsZKL2gU5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:86:06:62:89:e4:f3:0e:b6:1f:ef:4f:01:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Sep 27 07:01:49 2026 GMT
Not After : Sep 28 07:01:49 2026 GMT
Subject: CN=c3b0d2b001a3b0b94a49dbc15d7d310065a44b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:d9:28:a7:b2:5e:c8:0b:f3:bc:1d:61:41:
59:91:95:71:82:63:5f:a5:d7:d8:a0:c2:93:71:8f:
9b:5f:7d:81:22:48:02:a9:98:5b:4b:9f:91:78:f8:
d2:d4:4f:27:6f:2c:b2:ca:cc:fa:64:1d:65:92:fb:
b7:62:60:42:09:08:39:9f:26:1b:7b:b8:b3:d5:5b:
a8:28:2d:16:0f:17:2c:bc:4a:61:91:d5:1c:64:bd:
13:d2:28:7d:81:4a:4b:0a:d6:77:88:ae:85:d7:79:
d4:e1:14:61:c2:6d:a0:74:c5:e6:cd:40:03:50:b7:
a3:6b:65:3f:ce:dc:f1:10:0b:c9:4f:23:0f:a3:2a:
a6:19:ba:be:ac:a9:14:27:28:dc:a3:02:49:5d:3c:
05:39:4a:bd:5c:d6:85:c0:79:b4:ae:97:f5:02:87:
13:48:96:55:b3:8e:a0:3b:5d:49:45:8b:fd:84:fe:
52:11:ef:b7:a9:fb:6d:a3:5f:f0:8e:4b:ff:0c:19:
26:83:6e:44:83:91:9e:90:8f:b1:7f:ad:98:60:ad:
81:45:2e:21:5c:a5:f5:2e:e8:68:24:a8:d7:b5:84:
f2:bb:4a:ed:cd:3a:93:68:84:29:ce:57:40:e7:25:
f9:89:91:c3:7c:cf:87:7a:c9:bb:d1:8a:6e:e3:1f:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:D2:B0:01:A3:B0:B9:4A:49:DB:C1:5D:7D:31:00:65:A4:4B:41
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:e1:93:41:a2:7b:0c:ff:bb:23:59:60:44:79:bd:4e:e2:
30:a2:7d:0a:e2:ba:dd:0d:69:3d:2c:c1:b7:0f:8d:d2:f4:a4:
c2:a3:d2:1d:88:89:2d:f1:18:8c:c8:7a:24:b0:fa:2d:7f:0c:
8b:fb:0d:98:5e:05:57:3e:b6:f5:04:1b:82:09:35:a6:64:5f:
b0:8a:44:72:3d:5d:16:a8:77:46:ec:25:ff:a6:26:f0:14:ea:
e0:a0:82:5b:32:f8:74:70:c1:31:ae:92:31:c7:89:e4:43:52:
dd:a8:06:22:7c:28:52:d1:25:e5:78:31:c8:1c:69:2a:f6:a6:
3d:e4:81:74:45:24:34:bc:75:52:ac:29:e9:1e:4c:74:3d:e5:
d4:f5:97:51:5f:09:25:f6:97:b7:68:2f:67:5e:77:e0:f0:11:
e4:32:0a:ae:8c:61:77:cf:7d:e2:3f:01:2a:df:e5:e9:76:9a:
cc:dd:e6:86:2f:05:13:54:2c:ea:2f:35:55:67:d8:03:ac:38:
e4:f5:99:16:78:53:79:95:d8:b6:cc:99:d8:92:be:8c:e9:21:
2e:cb:d2:a7:c2:e7:3e:d3:3b:9e:75:80:82:3d:01:67:12:c9:
3a:59:fd:e4:80:59:1f:29:b8:b5:c3:6b:12:29:eb:78:39:a5:
7f:1b:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:00:59 2026 by rpki-client