Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: hneMcOWl/oEqB2+Lnd5BFz9bSb1SFE0NcNRb6PR1kLQ=
Subject key identifier: 0C:35:C8:31:41:56:3E:9A:1A:3E:98:ED:A4:B3:97:E7:BD:39:97:08
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 019D273AAB79E87B2C56F94E7615B982B120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: 0384
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: CuyvQkWCH2jGy1znss4XJNZ4kZI.roa (hash: 7b/YHSGs2OfIQTdNVVxxsC+vk34rdN3J6zHQ/2L5Cjo=)
2: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: 40RatFoArhyOLvrRCArzwf/7P/QYowlvX6joBDaBiww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ab:79:e8:7b:2c:56:f9:4e:76:15:b9:82:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=0c35c83141563e9a1a3e98eda4b397e7bd399708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:83:f7:7f:47:6b:a8:89:c9:e6:61:0e:88:
45:43:9f:ba:d3:ca:50:0b:5f:53:05:e8:72:c1:3e:
99:40:f2:ef:55:be:26:b6:91:42:cd:7e:3d:ee:d4:
e2:56:f4:53:20:97:14:60:4b:3a:75:cc:77:19:4b:
64:f2:f6:34:65:63:e4:a4:54:29:49:71:20:52:c1:
b2:a6:72:88:b4:8a:90:4a:99:ab:fd:1a:1b:9e:c6:
9c:66:6d:c6:95:99:30:8e:c8:13:2f:73:cf:d2:03:
46:b6:e5:08:de:81:90:89:b9:f2:d3:20:a3:25:47:
b5:b5:2a:64:c4:30:62:9b:fc:89:a2:14:59:de:a5:
b2:d7:51:e6:86:e0:3c:4b:be:fa:1a:1a:74:fd:d9:
a8:11:9e:b9:fc:fe:78:11:38:c6:08:20:33:d3:7d:
d1:7b:00:f1:bc:f1:a6:a7:90:8d:da:7f:a5:e1:1d:
76:98:57:f0:9d:5f:f0:57:53:93:74:2c:b7:42:0b:
8c:52:ed:bf:6d:9c:67:ea:58:49:30:fe:56:65:1b:
53:70:eb:71:09:49:db:f6:d4:32:e8:2c:6f:e6:10:
86:42:4c:fe:94:c7:73:d1:ba:b0:49:82:5a:ac:e8:
27:3c:12:68:70:10:e5:f9:d6:da:53:12:bb:ad:63:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:C8:31:41:56:3E:9A:1A:3E:98:ED:A4:B3:97:E7:BD:39:97:08
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:ff:c2:3a:c1:c0:93:bc:e1:82:e8:c6:51:1c:e0:6f:f0:
7e:e3:06:de:20:10:94:5b:03:23:c9:9e:8f:96:42:76:65:29:
c5:7a:8e:fe:74:44:ac:98:dc:26:9d:32:76:9e:4b:01:13:24:
fc:5b:91:6e:8e:86:b2:24:92:7c:c6:8b:2f:1b:4f:8e:c6:13:
a9:ce:cb:ab:17:25:f1:92:3d:0b:e2:cf:00:3f:88:55:ac:6b:
d6:1a:84:83:35:ce:76:7b:1f:b1:9b:37:43:26:ed:b4:23:fd:
59:84:ea:9b:0b:0a:86:fc:e5:01:69:34:ae:d0:54:2b:95:04:
92:a8:4b:c3:a8:ea:79:4a:f7:20:ae:5c:be:7d:14:d7:af:a6:
4c:c3:64:eb:71:b1:14:1b:77:eb:b9:eb:46:e8:a5:ad:e1:2e:
37:71:a9:16:4a:47:3c:bc:22:48:bb:49:85:72:78:33:b3:99:
60:da:8e:14:49:66:f1:a1:d8:cc:da:8f:b2:40:7c:68:e8:7f:
06:5a:ac:fa:9d:18:e5:83:68:3e:42:bc:44:a2:c5:bd:53:d9:
e1:db:f6:48:85:f9:25:b2:6b:3f:a2:05:51:16:96:46:ed:c5:
71:18:15:90:a3:27:02:8d:77:86:84:57:54:b1:cf:7a:1b:30:
71:61:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:32 2026 by rpki-client