Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: MYIGjG8bBnzPYcC+453mkZCBq4Ws0wQZqZq76qO/7Qc=
Subject key identifier: 03:BB:00:C3:73:21:3E:A9:67:A6:BB:A9:55:81:94:17:5A:24:D0:A0
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 019D27A86B92A978DEE42B75BA6A1AF2E651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 0859
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: angOMGRdc3adpd1I_is4-dwikO4.roa (hash: 9j7afe7OMx1plAaw5QDHW6xfHLrBeH+kUa5ibWgW2WY=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: QoJGzVVAvMVceFAKUz5A2r9W7XWPQuQkHt0LCXbmaZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6b:92:a9:78:de:e4:2b:75:ba:6a:1a:f2:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=03bb00c373213ea967a6bba9558194175a24d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:96:70:74:6d:fb:f8:16:97:24:d1:f2:3d:
41:0e:99:38:9d:07:fe:6c:61:f1:e5:14:24:2c:32:
ed:b9:68:ab:a1:d9:a4:d3:cd:e9:95:bd:37:0e:a3:
64:16:50:bc:df:99:ae:10:21:f7:7c:eb:16:a6:ef:
60:b8:20:f3:fa:ce:af:25:94:b5:66:75:e3:00:10:
fa:03:ff:4c:a0:73:bb:45:e9:50:ec:df:6e:6f:c0:
d8:8c:18:73:e0:51:05:d3:a4:d1:3d:54:bd:a4:e4:
46:71:95:e3:3e:5e:9e:28:be:e9:8d:d4:6a:20:0c:
6d:7b:24:71:5d:9d:47:b5:e3:bf:a8:75:21:d5:a3:
e8:c1:3b:dc:c9:a1:68:94:89:b4:26:ea:dc:f0:32:
76:05:f4:10:0a:f2:65:ab:f5:85:c2:d3:ae:2e:6e:
c3:cb:1e:f3:de:be:7b:c9:8b:2e:23:e2:f4:79:e2:
0e:05:fd:ff:21:62:19:ef:13:17:7f:ce:49:06:75:
b3:67:2d:ab:ea:4c:de:2c:00:4d:2d:ec:25:50:16:
f3:cc:85:ba:cf:20:31:87:de:ae:7d:20:a6:75:a9:
91:a2:00:13:fb:a1:40:57:b4:fd:b3:49:fd:5d:86:
f9:3c:1d:90:f8:03:34:a4:40:d9:b7:7f:a5:94:62:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:00:C3:73:21:3E:A9:67:A6:BB:A9:55:81:94:17:5A:24:D0:A0
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6d:d1:61:f0:5a:ec:49:e9:e9:21:4b:f5:f2:e4:eb:6c:bf:
ff:dc:87:84:d4:b6:36:8d:ca:61:bd:ab:2f:5c:83:f5:fc:e3:
17:c8:0e:c2:d2:98:50:71:1d:41:5a:30:88:a3:42:59:04:9f:
4b:25:7c:70:a7:32:34:99:6f:d6:69:ae:53:59:97:2d:c1:61:
7b:bc:8e:e9:55:0c:f0:60:e9:b8:17:20:c2:01:02:c7:28:30:
6c:44:fe:15:04:d7:70:20:81:3d:f3:24:0c:e4:e1:8f:90:31:
35:21:86:c5:75:81:02:e4:4c:07:5b:57:43:1e:90:ec:bd:b2:
32:29:75:45:c0:34:0d:60:f3:82:6f:37:0c:51:81:ae:68:80:
3e:e8:6f:90:13:63:4e:df:4a:96:94:c9:72:2c:fb:97:0c:19:
ba:98:d2:4b:31:5d:2b:fd:48:6b:d4:61:36:c4:19:50:b0:60:
f6:e1:a0:67:7c:59:29:48:f1:08:47:25:e3:f8:95:ce:5a:b4:
2d:4e:a0:cd:0e:09:9c:11:9d:11:41:5d:f0:e1:43:4b:3e:e3:
9a:da:84:0b:1f:fa:74:ad:b8:69:85:26:dd:f8:d1:2d:8f:43:
e3:24:b4:47:69:0d:db:14:88:b2:cd:89:86:49:65:e5:e0:1e:
a6:ce:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:43:45 2026 by rpki-client