Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: 8o42VKiKsPKazNjmc4tBIFBeo+aWDboXIZZ7NKy8jUU=
Subject key identifier: E4:F3:C5:C7:DA:E3:BA:7C:69:56:2B:03:30:C6:69:81:AA:60:19:9E
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 019D28167668700CF64CC54990ABF48DE602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 032A
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: nClTwpToiFqAscBy4IrBVIyla1o.roa (hash: wolg6ruFPU1FSLrTeE1keQYcUJk2DOWAN3fu7gn3ZgE=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: F7ms+XH03+z8SB+EndU8AkqQJmjJFD7Lqahttr2gFyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:76:68:70:0c:f6:4c:c5:49:90:ab:f4:8d:e6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=e4f3c5c7dae3ba7c69562b0330c66981aa60199e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:6b:d0:9f:a3:d6:19:46:77:5c:39:ce:cb:
1f:7f:90:5c:26:2c:2c:f8:ce:0a:e7:35:2f:be:5f:
4a:c9:a1:0f:6c:19:09:44:17:7c:fd:22:3d:d2:c3:
a6:81:00:98:b1:3b:28:f5:f4:3c:9b:ba:33:42:bf:
ec:fa:53:ef:fc:bb:d6:fe:d9:7a:4b:d9:e4:3a:e8:
b7:ba:d7:a0:7f:3a:ff:70:d0:a3:27:e6:7d:4f:4c:
1b:af:fd:63:17:ca:f1:8f:b5:6e:69:f1:f5:12:f4:
e1:bc:0b:51:17:a6:29:14:1c:da:b5:75:7d:e5:a0:
37:6b:17:5b:62:f6:04:c5:98:26:0e:05:69:0b:0d:
98:d4:53:73:f2:87:5c:0d:59:dd:95:85:cd:49:0f:
ae:a0:23:71:99:72:87:dd:c0:9d:7e:8b:cb:f0:92:
fe:c9:5b:07:bb:e5:d2:c1:bd:75:fc:48:45:fe:03:
25:a9:0e:97:e0:81:a0:73:3f:33:06:f7:84:07:95:
bd:63:d1:4e:68:72:9f:cb:36:be:86:29:95:06:50:
f5:e8:60:8c:e1:e2:07:32:53:bf:30:c7:06:7a:c7:
4e:d1:93:8e:a4:48:ef:17:ee:ca:24:32:e8:69:77:
76:4b:fc:c6:8a:59:c2:49:81:d3:ad:1f:79:c7:7d:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:C5:C7:DA:E3:BA:7C:69:56:2B:03:30:C6:69:81:AA:60:19:9E
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d6:1d:72:7e:b3:98:76:62:af:78:bd:33:d1:4e:59:6e:ec:
7d:c0:0a:17:0e:2e:f0:d9:64:51:da:04:f7:ae:de:61:78:00:
29:c7:a1:5c:0a:22:b8:c9:e9:7a:32:8b:e2:2c:77:35:ab:c3:
2a:1f:7f:94:52:c5:b2:3e:6f:75:81:22:d4:48:0c:eb:bf:70:
a0:7e:3e:d7:96:2d:aa:68:b4:b2:b7:ae:4a:a4:62:09:5a:6b:
8c:a3:a1:fc:d9:55:7a:65:91:a4:bc:d3:a9:47:6d:53:a1:92:
98:ef:75:fa:e7:72:13:16:ca:f8:93:f5:84:b2:a4:ec:c7:2b:
b1:d1:96:0d:b1:a4:6c:b4:f6:72:d8:97:19:c4:5f:00:c5:03:
54:10:6b:b8:75:05:79:e7:9c:d7:c9:3e:b1:d3:e7:85:7a:49:
82:2c:09:cf:68:fd:8f:94:6f:0e:38:a3:0c:74:29:d0:53:e6:
38:5f:a7:33:3d:d3:4f:e6:79:62:0a:ed:fb:d2:ad:66:c6:45:
a0:05:b6:2c:9f:7d:79:cf:32:92:4e:98:99:01:22:84:c5:f1:
68:c8:7a:c4:90:37:fb:29:4d:44:ab:7f:cc:87:ed:39:62:43:
17:b7:a5:28:ef:a6:b0:f3:c6:99:b9:1a:a5:bc:69:6d:ad:ab:
cc:2d:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:32 2026 by rpki-client