Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: DlXuRwgpDOgj/awF+WO5D27PGg6ljyYWuKzE46cgjBc=
Subject key identifier: 2B:58:2F:4D:01:E4:B5:87:86:68:36:83:0B:FF:2B:A5:69:8B:AD:4D
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019E1E359684BC20D174B0679978B62875A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 13DD
Signing time: Tue 12 May 2026 22:01:28 +0000
Manifest this update: Tue 12 May 2026 22:01:28 +0000
Manifest next update: Wed 13 May 2026 22:01:28 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: OWv1iShXcGpwtq/V6cBtxt/RT5EiZU0YkYV/vCwtxnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:96:84:bc:20:d1:74:b0:67:99:78:b6:28:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: May 12 22:01:28 2026 GMT
Not After : May 13 22:01:28 2026 GMT
Subject: CN=2b582f4d01e4b587866836830bff2ba5698bad4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:e7:62:f4:f7:54:e2:48:30:c3:cc:67:88:
be:d3:cd:76:fb:84:05:8a:44:4d:b9:55:2a:a1:7e:
73:0e:b7:e0:63:da:dd:93:73:d7:a5:41:61:3f:ff:
5f:88:7d:9b:41:a5:70:8c:6e:94:41:3d:22:33:b2:
e5:35:50:41:aa:6d:51:f6:2c:5d:72:e9:6a:8a:3e:
66:4a:7d:da:77:fc:cf:7a:53:bc:1c:21:15:43:e2:
4a:e6:61:9f:bc:ac:7c:4e:10:df:0b:ce:d5:b6:97:
62:ec:03:5b:e2:b0:1b:ba:cd:61:df:51:9b:18:91:
db:f0:cc:2b:d4:33:b0:ee:03:b2:d1:4d:b3:36:30:
b1:66:1f:c9:90:6d:da:3a:e2:f7:82:f4:42:45:15:
ce:72:34:74:7b:51:81:51:66:7b:3a:cf:46:46:e1:
25:bf:fb:50:53:a2:79:33:4c:73:ea:7e:19:92:1c:
bb:96:26:1b:c5:59:8b:3a:60:3b:5e:95:8a:98:a1:
73:ac:20:d0:22:55:5e:d3:b8:f7:1f:16:25:e8:7e:
05:59:e1:e3:aa:5e:e7:ed:e0:fd:f6:db:25:e0:7e:
9d:8e:8f:90:f7:d2:54:40:d8:20:96:d1:c8:eb:ca:
78:92:a2:fc:ed:68:44:bc:5e:d7:20:6a:04:8e:e4:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:2F:4D:01:E4:B5:87:86:68:36:83:0B:FF:2B:A5:69:8B:AD:4D
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:36:02:9f:6f:57:16:3f:d8:94:e4:29:ee:94:d6:7c:06:
60:8e:88:09:2a:1f:ce:9f:a0:7a:79:c7:cc:1e:07:30:12:11:
92:d8:d2:1d:18:4f:44:22:f6:3d:ba:dd:ca:1a:cb:ee:86:67:
f5:85:7c:e8:9d:e7:87:1c:17:6b:26:b4:fd:5d:48:85:96:d9:
b5:86:19:c5:91:84:96:36:d2:7b:45:52:14:08:58:dd:ae:77:
8e:79:4c:01:5c:42:ae:ec:32:a5:0f:c0:64:07:a9:a6:bc:07:
2e:19:3e:18:03:24:d3:58:73:06:59:aa:ef:d5:45:f9:9d:10:
81:07:e7:66:bd:91:45:d4:66:04:61:8b:5d:94:19:f4:79:ea:
31:3c:1b:50:00:00:2d:70:75:ac:05:15:c8:17:dc:1e:8d:e0:
30:3d:bf:dc:9d:74:eb:54:a8:23:1a:5a:1f:55:10:0d:9d:8b:
d8:e1:6e:34:cd:f6:8e:a9:5f:02:a6:fd:73:db:1c:83:3c:24:
ae:ed:44:57:a4:d1:ed:56:af:bc:30:ad:d2:3a:c7:eb:45:8e:
c3:9b:77:8f:04:12:e9:f7:a8:67:59:31:fb:5d:3e:0f:ff:9f:
ed:2e:88:ca:7b:19:b8:c4:90:aa:92:36:4f:8e:66:fe:46:bb:
04:c8:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:01 2026 by rpki-client