Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: PDkAiQ1IpaVGdkSSLMVNzd0sFHWI0cg8h1rV/zojaAE=
Subject key identifier: 24:CC:D8:26:6D:A2:70:AC:13:0C:13:6F:86:DF:A1:F0:D3:07:1D:E4
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 019F94DBCD9B1768315F1D7F2BB9C6E98B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 149F
Signing time: Fri 24 Jul 2026 16:01:00 +0000
Manifest this update: Fri 24 Jul 2026 16:01:00 +0000
Manifest next update: Sat 25 Jul 2026 16:01:00 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: BlUWn4aJsaihjkvITN3xe/JscFvZUjaVAvS1XvTyjXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:cd:9b:17:68:31:5f:1d:7f:2b:b9:c6:e9:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jul 24 16:01:00 2026 GMT
Not After : Jul 25 16:01:00 2026 GMT
Subject: CN=24ccd8266da270ac130c136f86dfa1f0d3071de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:b5:7f:95:0d:91:59:28:03:ef:8d:3b:78:
53:1e:c8:2f:4d:48:5b:83:92:9f:4b:4d:f1:f4:44:
b4:6a:d5:f5:a8:57:19:93:52:6c:27:0c:0b:7d:50:
16:ba:06:b1:09:42:4d:c8:e5:f3:fa:bc:78:83:85:
70:9f:a7:87:e8:bc:c4:98:cd:f0:f8:71:55:1a:29:
6b:6a:e1:a0:2b:d1:af:53:d3:f1:73:1c:80:c6:dc:
da:74:2c:e6:55:78:38:a5:7a:fb:ac:f3:82:6f:8f:
e9:d5:39:97:b6:eb:03:48:bd:af:c0:8f:8a:4d:26:
1d:08:92:a8:50:ba:47:9a:f1:ab:bd:1b:e0:3f:6e:
f7:8b:08:1b:6e:b8:a2:a0:55:60:cf:94:b0:b9:48:
af:d7:2f:4e:24:ba:75:01:2f:ed:9c:13:27:d3:a5:
8c:d9:c0:b6:47:92:6c:4d:b9:7b:3e:eb:3b:ea:89:
eb:db:e0:2a:a4:b0:fb:99:d8:a5:32:67:9f:22:6d:
cf:5e:24:65:b4:ad:fb:f9:f8:d5:00:7c:bf:4a:9e:
84:2e:7a:fa:02:19:1f:ba:45:33:c7:9c:fc:bb:0e:
e7:99:4b:6d:c4:25:cf:94:3f:01:49:82:6a:96:10:
69:23:65:c0:f4:7f:5d:1b:66:60:75:22:03:80:40:
91:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:D8:26:6D:A2:70:AC:13:0C:13:6F:86:DF:A1:F0:D3:07:1D:E4
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:75:42:f0:99:24:ce:7d:1a:b5:d0:b2:d7:e9:f7:61:2f:
80:da:f5:06:1a:fd:5e:a3:8c:4d:c9:64:d5:94:16:25:43:99:
83:4d:b2:6b:65:d7:a9:3f:1a:bb:7b:85:3d:37:d5:0d:5b:1a:
0d:17:6e:62:cf:1f:4d:e0:91:ea:ab:26:8e:34:c6:9c:6b:77:
b2:35:e0:b3:c5:8d:e0:d2:64:7f:5b:38:70:7d:f3:0c:69:4a:
2c:34:4d:6c:a0:df:6e:a6:a2:b0:35:84:62:69:f2:2e:14:14:
d5:dd:7c:99:80:10:aa:41:e5:f7:25:a3:a6:fd:71:7d:d0:ce:
6f:16:5d:5e:3e:4a:68:8f:e9:4b:7b:ef:25:dd:dd:12:61:e8:
22:f1:70:07:14:2f:dc:0a:f5:a3:1e:b6:5a:31:6e:df:e5:f0:
e6:0f:ed:d5:61:62:0a:97:58:ed:99:8b:72:27:ed:5a:1a:0a:
88:63:8c:c2:17:fd:d9:22:63:e5:64:ec:a2:7a:6a:3a:7e:5b:
15:3f:2b:7a:23:92:6f:8e:f9:16:34:fe:4c:ce:ee:fc:72:ab:
cb:2b:da:51:de:08:c4:ac:cb:42:a9:7d:f8:c8:60:48:08:0f:
39:7b:f0:83:ea:00:32:52:9a:a3:db:56:04:ae:ac:5d:33:20:
af:06:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:35 2026 by rpki-client