Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
File: u8y6drQ5_a39OU1vR37mgbwzgy8.mft (raw, json)
Hash identifier: FT3MuqUFhqX06oLk0X1TAl+JMUitzNNOszVPNqCr7Qs=
Subject key identifier: 13:55:06:03:CE:E6:01:8C:FC:CC:E3:0D:8E:B1:1E:35:73:AC:8F:4D
Authority key identifier: BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
Certificate issuer: /CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Certificate serial: 019D25BA4CEF03793C2D2D63EE56A980BF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: jbPn_huaTii3UeZHQ_d9dvrziA4.roa (hash: WDTKgP7OatpD7hZS6aOF7SUbKrJNGnHp02sDeSf2/f4=)
2: u8y6drQ5_a39OU1vR37mgbwzgy8.crl (hash: KPuR0KfR0rLV+iFObZUxG8bJeN+oRYkhKV0xr09RC40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4c:ef:03:79:3c:2d:2d:63:ee:56:a9:80:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbccba76b439fdadfd394d6f477ee681bc33832f
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=13550603cee6018cfccce30d8eb11e3573ac8f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:9f:d9:3f:71:6e:87:48:d7:77:97:db:8e:
80:47:5a:a6:a1:1e:68:23:ec:ee:1e:d5:1d:96:d6:
76:b6:86:b7:20:9c:39:11:34:f2:1b:7e:81:ae:bd:
13:f6:0a:f6:00:42:4b:d5:77:e4:4f:e9:18:d3:5f:
90:90:00:ae:5a:ff:55:13:4f:d4:6a:2b:8c:b7:f6:
15:b2:d2:ec:87:ab:a4:d7:ce:14:ec:20:5b:41:3c:
4d:4b:31:ce:af:26:b8:c5:c8:2e:18:ec:04:1a:84:
35:2d:6e:f6:13:3e:92:df:43:bd:f8:3b:c5:53:3c:
09:96:ec:44:8d:95:79:a2:fc:b5:2c:68:ef:60:51:
0c:a9:a3:15:5e:15:db:3f:39:21:1f:ae:6c:c6:c4:
6d:a1:d4:c1:1e:47:a4:0c:b9:2f:c2:be:cc:c4:19:
a0:85:36:1a:77:d0:97:ae:4e:4c:f3:e3:0f:f6:11:
25:4a:cf:d4:0f:36:4a:5e:01:eb:22:b8:99:30:ea:
79:55:a0:b4:d5:20:57:41:d6:fa:3a:10:1d:59:49:
54:fa:eb:29:f9:8d:e0:a8:f9:24:24:20:52:23:79:
c1:cc:fd:e9:fb:27:c3:d8:6f:9b:41:3d:61:c2:ed:
12:af:2d:b9:c5:bd:2f:ff:92:c8:23:17:7b:72:70:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:55:06:03:CE:E6:01:8C:FC:CC:E3:0D:8E:B1:1E:35:73:AC:8F:4D
X509v3 Authority Key Identifier:
keyid:BB:CC:BA:76:B4:39:FD:AD:FD:39:4D:6F:47:7E:E6:81:BC:33:83:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8y6drQ5_a39OU1vR37mgbwzgy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c3f7ad-2d01-4501-a417-4532c4c19a1c/1/u8y6drQ5_a39OU1vR37mgbwzgy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cb:e8:a4:66:ca:42:4c:75:6a:f7:74:81:35:16:93:eb:ff:
de:85:59:b1:fe:d8:5f:fd:a7:2d:6c:a5:a4:12:61:44:2e:3d:
4b:e0:d1:c9:c1:91:04:dd:9f:6d:42:ad:be:82:6f:1a:80:0a:
3d:a6:db:07:8d:64:b3:81:17:71:30:70:de:5d:fa:2f:35:62:
0f:5f:cb:8f:35:9d:f8:d8:da:12:ec:06:bc:08:df:fd:65:bc:
d7:bd:fb:73:1b:44:ad:38:8e:6e:f8:47:81:87:89:09:d0:e0:
66:b6:3f:76:1b:05:0d:e5:a0:3f:78:bd:af:1a:a2:1e:60:8e:
25:5c:29:84:32:b1:cd:99:c0:11:29:b8:6b:47:b2:69:b4:a6:
79:53:f1:ed:b2:85:57:38:20:14:ad:33:17:37:bf:d6:02:1b:
56:7c:b7:0c:22:d3:4b:43:e8:9f:e7:e6:24:41:8b:16:cd:36:
12:d3:62:f1:a3:b3:7b:56:34:f7:d8:a7:62:14:26:12:f0:0d:
54:e3:44:84:11:16:d5:b7:dc:25:53:61:88:b2:7f:f1:ff:da:
5b:09:a0:98:81:ba:6b:77:7a:19:8a:7d:e6:89:67:74:6c:4c:
16:78:fc:9e:63:bd:4f:08:60:72:d3:0d:51:b4:d3:87:0b:1f:
dc:3d:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:32 2026 by rpki-client