Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: pH+Uwm2OpQoCMgnFvOfMBNarlAr6sl1+KxS6/oVZjYc=
Subject key identifier: CE:6E:50:86:BE:30:00:0A:B9:ED:30:13:43:81:0A:1D:78:CD:1E:99
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019D2704AE242105E0730B5FEA9A1FF31D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 135D
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: lGujlynZP+jERprCpRX7ULbkmEwPx1VM7mhLNIuB1WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ae:24:21:05:e0:73:0b:5f:ea:9a:1f:f3:1d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=ce6e5086be30000ab9ed301343810a1d78cd1e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:59:22:ee:61:6c:4a:5d:d3:f2:d4:ec:59:
f2:28:fa:fb:f1:3f:73:a6:de:b3:39:c1:ef:50:c7:
30:85:31:5a:db:80:67:59:13:8f:86:08:ce:31:66:
12:6d:c4:fb:5f:41:7a:a8:34:c1:cb:33:6f:e0:a5:
de:cf:aa:c3:e2:03:75:a6:88:e7:2f:0a:8a:a5:4c:
56:90:8d:28:92:c5:26:03:04:74:cb:37:e4:b1:f8:
5e:b4:ff:d3:5e:15:67:de:17:a4:df:45:b3:19:d4:
4d:6f:89:13:36:06:ac:74:6d:26:25:76:64:be:d3:
ce:5e:18:5e:34:f0:10:74:36:15:d6:69:04:1d:ee:
98:15:30:29:0a:3b:e9:da:07:19:d5:52:40:3e:df:
7b:4b:f1:03:8f:74:2b:5a:9c:f3:37:b9:6a:db:df:
2b:10:19:cd:2b:81:97:53:93:23:10:3a:ab:a3:d5:
b4:76:34:79:d2:4f:a1:53:a5:50:19:85:61:a9:61:
d6:61:97:a7:c3:1f:29:36:2f:ce:18:1e:cd:9d:4c:
da:78:e2:b9:b7:31:fd:a9:cd:5b:0a:9b:8f:9d:8e:
61:6a:46:2b:00:12:f6:2b:5d:7c:e4:3d:52:cf:d0:
30:29:30:ff:23:d3:34:ac:8e:ba:3f:ff:2f:27:fc:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:50:86:BE:30:00:0A:B9:ED:30:13:43:81:0A:1D:78:CD:1E:99
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3f:27:93:6f:53:4b:77:49:3b:fc:f7:53:92:49:4e:78:21:
3a:b0:42:b8:da:b4:0a:18:24:99:46:36:9d:de:c3:c2:ee:3e:
32:86:78:89:67:8e:02:76:dc:4d:35:c1:26:fa:ed:2a:16:33:
42:f4:4c:a3:5f:bb:16:64:66:9a:b1:dc:f6:70:6d:12:af:59:
e7:4c:57:be:0f:2c:45:9f:d3:38:a0:3d:6b:a9:fd:0e:ea:17:
9a:40:fc:eb:92:d2:52:d6:87:25:25:55:b7:3c:ff:5b:5a:f7:
a9:1a:a8:c6:0d:15:0a:8d:0d:16:3b:4d:90:ed:c1:47:fe:f8:
c8:2f:bf:9e:1a:22:05:37:da:01:61:bf:44:db:81:24:1c:88:
cb:56:c9:e5:2a:4f:3e:27:5c:fb:2c:d2:c3:58:82:8d:6d:1f:
17:66:3a:92:d7:7c:1c:00:22:a4:49:36:2b:2a:6f:3f:33:ce:
9a:4b:08:b0:11:73:e8:7b:32:af:97:6b:7f:3a:1e:25:13:ff:
7c:01:f7:f7:1b:a9:1f:45:af:51:a0:14:6b:dc:56:58:14:ef:
a3:16:28:11:89:a4:35:9b:02:1e:c5:d8:dc:8d:94:7b:5d:16:
c6:91:ae:e0:66:f2:a8:74:6e:be:c8:24:3c:ce:81:a8:ad:f9:
24:07:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:40 2026 by rpki-client