Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: Df4q3tPWuv01N2MlhNcjbvSqlV0GXv9Vm8JGVgYT0qg=
Subject key identifier: 35:DD:C3:E0:8D:DF:6A:9C:E1:0E:49:FD:9D:4F:32:5C:4E:C8:41:72
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 019E1D90E978413DA567611F66FC9F106459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: 013D
Signing time: Tue 12 May 2026 19:01:36 +0000
Manifest this update: Tue 12 May 2026 19:01:36 +0000
Manifest next update: Wed 13 May 2026 19:01:36 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: boWFIcAdfyyOwbig905w7cGgworqdYiMRFOyBa8fM8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e9:78:41:3d:a5:67:61:1f:66:fc:9f:10:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: May 12 19:01:36 2026 GMT
Not After : May 13 19:01:36 2026 GMT
Subject: CN=35ddc3e08ddf6a9ce10e49fd9d4f325c4ec84172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:62:e8:6c:6f:35:aa:94:27:b8:c8:d7:c0:
c2:f5:9a:82:c3:1e:94:80:41:24:53:9f:c1:c1:10:
d7:95:c6:b0:93:eb:8e:b0:c4:8a:66:49:18:85:76:
27:cf:cd:f3:fa:23:23:01:3f:ec:dd:40:bd:1e:e9:
4a:ad:ca:b0:e6:f4:f4:7c:4c:83:6b:5a:57:98:b8:
00:87:e3:5a:be:62:98:e6:81:01:86:37:3b:77:bc:
b1:63:08:ed:1c:ef:99:8f:39:1c:a0:fd:e7:29:02:
3d:b4:23:eb:b4:69:bb:9d:22:fe:17:5b:3b:18:d8:
55:b1:87:9a:74:15:75:2d:5b:8b:f6:b4:90:40:4c:
00:d4:2d:df:6e:cf:56:88:54:91:41:17:be:77:16:
bd:e9:97:5b:21:d9:55:13:4c:38:48:cc:26:12:30:
d1:6d:17:a4:a5:60:02:e1:6a:bf:6f:60:a5:db:ae:
66:65:f3:56:2b:08:1f:e6:5f:e6:9f:56:ca:aa:b8:
87:66:c3:44:c5:5f:08:06:73:9e:bb:59:fe:e3:2e:
49:a0:b2:30:36:6d:8a:8b:08:f8:56:3f:0d:b1:b7:
69:e5:f1:dd:8d:08:70:99:0d:26:bd:93:e6:46:6a:
38:98:69:99:38:c2:69:8a:a2:af:a8:0a:1e:e7:c8:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:C3:E0:8D:DF:6A:9C:E1:0E:49:FD:9D:4F:32:5C:4E:C8:41:72
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:8f:a4:57:f0:2b:bd:2c:65:83:14:78:17:b1:ac:19:04:
3d:bf:6c:cf:ce:7d:55:39:41:a6:16:a4:6a:a2:dc:25:e0:52:
08:e2:21:dd:c9:10:a4:7a:da:3e:5b:89:e8:19:0c:be:b4:8c:
d4:51:b9:d6:b8:c0:0d:72:93:06:c5:ae:b5:17:3d:a8:ea:d6:
ee:a5:85:84:3b:e1:a6:e5:95:32:a0:29:9e:e1:46:f6:1a:a2:
19:59:f3:04:41:e1:8d:5f:6d:58:9d:95:ab:7a:77:4b:4b:36:
03:cb:96:ab:de:7b:bf:a8:0f:05:1a:a2:5a:21:ec:23:97:62:
43:f5:f1:7b:da:b1:2f:36:e6:58:69:1a:89:8f:29:e8:ff:23:
b4:3b:cc:4f:7e:f4:3a:0e:14:01:c9:a2:4f:c5:2b:50:db:ae:
39:06:81:2a:1f:ba:d6:72:60:c9:32:99:d4:79:db:01:d2:89:
84:06:c1:56:da:8d:94:f4:97:4a:7c:22:3e:5d:44:18:f9:e9:
3a:fb:97:6d:e4:8f:80:34:cd:03:7a:be:c7:43:1f:62:ad:72:
9a:01:e8:12:71:e4:d0:56:ab:67:33:ad:ee:d2:ee:5f:68:cb:
bf:4a:76:ed:31:bb:bd:93:5e:f4:3f:c6:f7:a9:3a:8e:b1:a9:
f8:67:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:05:59 2026 by rpki-client