Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: GEJWcM5b6S3ie+VwUvKZrlTHN6uhfynN5tfyLA106RY=
Subject key identifier: 69:3A:F2:72:91:D3:E0:90:02:22:43:4F:CB:89:A6:6D:BA:39:37:5F
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01A0E106B2829DD6EAEFDBEACDBCBAF1CE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 154B
Signing time: Sun 27 Sep 2026 04:01:47 +0000
Manifest this update: Sun 27 Sep 2026 04:01:47 +0000
Manifest next update: Mon 28 Sep 2026 04:01:47 +0000
Files and hashes: 1: O764NAcKXNTjQ9sszmYMH0M-HC0.roa (hash: AyepL0+2wVG0+WCZlglCmaw7Rr7sdYw42s/HNe9N7IM=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: Bk++He+3ci7eS90V99+mtg6oaWiYzESNao+NyzBFZW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:b2:82:9d:d6:ea:ef:db:ea:cd:bc:ba:f1:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Sep 27 04:01:47 2026 GMT
Not After : Sep 28 04:01:47 2026 GMT
Subject: CN=693af27291d3e0900222434fcb89a66dba39375f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:6a:cd:f1:19:91:76:e0:bd:0d:b6:39:45:
03:ef:e9:10:80:8a:a9:6f:16:6c:c3:14:a5:f2:43:
9a:5f:60:e0:0f:0a:cb:d4:af:9e:5d:aa:21:ee:bf:
4b:69:3c:a7:52:9f:de:a2:e5:4a:2e:8d:17:25:d1:
09:3b:e7:a6:d0:92:54:57:76:5c:56:9d:8c:ee:01:
d6:6d:0a:18:d7:8a:11:e5:18:3b:da:51:45:ce:90:
e3:62:15:f3:af:64:b1:8a:ad:f8:6b:26:46:22:1e:
08:31:e7:c4:b6:8b:19:4d:03:ac:18:32:06:d3:e2:
7a:f3:66:67:2f:dd:6c:ab:c1:8b:10:0e:d0:52:e4:
14:34:27:d5:36:29:f1:69:f9:00:f0:3d:df:a8:8c:
57:c2:63:88:05:b9:0d:0a:aa:62:0c:89:d2:32:86:
d0:5f:62:f0:d8:98:90:2a:e0:66:27:01:30:5b:73:
57:15:e9:86:01:f8:b7:4c:4c:0b:1b:d0:80:b1:e6:
c3:53:98:12:dd:9f:fd:2d:ec:fe:af:17:a0:b4:f5:
2a:3d:6c:56:e4:68:e0:24:07:09:ea:44:e5:e6:0d:
79:ef:0b:ce:5d:8f:0b:f2:fa:6c:1b:ee:13:38:45:
f3:fe:f7:d2:53:c2:75:6d:c6:e6:d7:a0:57:ec:0c:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:F2:72:91:D3:E0:90:02:22:43:4F:CB:89:A6:6D:BA:39:37:5F
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:88:53:8b:56:40:30:7a:a8:78:48:d5:32:4a:3b:31:d8:30:
ac:3d:96:0f:a5:64:63:bd:21:c3:72:23:90:37:8b:cc:bb:f9:
de:82:5b:75:ba:7b:1c:9e:6b:ab:6a:1d:df:fa:a5:e0:e9:f3:
72:30:b3:3e:45:05:a2:21:80:3d:b3:de:8e:a4:b3:37:b1:d4:
35:ff:07:db:a8:51:65:19:8f:18:de:47:b1:40:ce:8d:17:4b:
aa:f4:32:49:b4:7d:5a:da:43:ca:fa:aa:82:75:e0:4f:e3:c4:
44:3f:06:ae:e0:92:1d:3b:c9:36:cf:a3:c8:24:c3:1f:7b:29:
61:68:f8:d4:a0:ac:b9:51:ce:bf:61:1f:22:2b:4a:e0:a0:f7:
af:df:bb:6c:22:87:c4:0c:48:a3:64:47:84:db:48:a2:0b:4a:
df:ce:93:bc:9d:18:be:6d:54:68:58:46:f0:5c:2e:e0:57:ad:
93:60:40:2f:f7:e5:21:2d:81:18:95:78:de:14:87:c1:92:97:
cb:a0:86:55:e5:6a:f9:96:e9:44:f8:ca:1e:a4:b2:bf:be:10:
84:bf:21:fe:aa:34:84:e1:47:bb:4a:35:eb:4b:27:73:c7:56:
68:31:95:77:d6:d7:c2:97:3d:f8:53:44:98:b3:31:50:1a:0e:
79:1b:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:01 2026 by rpki-client