Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: gmrAxQDU4lFidHHs68J+DOz6OL2JS+/zv9VlsjtXax0=
Subject key identifier: 60:68:14:DD:29:C4:B9:A4:49:57:89:50:EC:D3:1A:48:A7:4E:86:44
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019E1E35F2AB361C09BD3CE69FCE0AFBAD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 066E
Signing time: Tue 12 May 2026 22:01:52 +0000
Manifest this update: Tue 12 May 2026 22:01:52 +0000
Manifest next update: Wed 13 May 2026 22:01:52 +0000
Files and hashes: 1: efGfS8lxaD3H4kd8gJ8HGmAVWM0.roa (hash: Q9NzThlb2TNEltZy8LS3fywH/ZGkV7eN249MnQuUqNk=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: ex8TC97RxvoOzR+9cQRwniGLWDf1npgzU2KHKA1xkrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f2:ab:36:1c:09:bd:3c:e6:9f:ce:0a:fb:ad:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: May 12 22:01:52 2026 GMT
Not After : May 13 22:01:52 2026 GMT
Subject: CN=606814dd29c4b9a449578950ecd31a48a74e8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:11:ef:35:07:c5:a5:91:97:23:a9:28:ac:
14:58:67:25:b5:79:bf:26:4b:53:5a:5c:a9:27:be:
de:23:78:68:c4:a6:78:a3:ef:b1:8f:d2:95:00:79:
40:72:35:36:e6:f7:9f:9f:43:3e:9a:85:57:c7:f3:
69:48:39:f4:87:3b:4d:f3:ba:6c:44:ce:e6:bd:2a:
47:09:c0:af:14:ab:87:3d:13:12:d5:17:e5:d7:b7:
86:de:49:5f:02:e6:00:b7:a4:23:d6:ac:56:b2:76:
bf:13:25:00:67:a8:ae:61:ac:5d:81:88:9d:01:1a:
05:02:29:12:c3:73:db:0a:b9:e4:2f:17:c9:ba:eb:
53:95:53:3b:9e:1f:a4:dd:2a:98:05:21:f8:44:e3:
f5:3c:3a:f2:f4:50:aa:01:6d:0a:7a:6e:13:d5:dd:
e0:9a:18:05:bb:a8:73:2e:4a:fd:d2:26:d8:f2:69:
9b:ab:8d:ac:c7:f1:67:22:3a:ca:94:d8:ef:a3:ff:
06:8a:7c:23:1f:d8:9c:57:41:b9:3e:af:04:3d:79:
be:14:03:ef:57:71:3f:2b:45:0e:d1:01:37:8c:77:
4b:c0:ff:af:14:5b:8c:c4:dc:96:a5:48:cc:a5:0b:
cb:21:ef:31:f0:18:da:d2:c9:92:c8:61:3c:7b:3e:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:14:DD:29:C4:B9:A4:49:57:89:50:EC:D3:1A:48:A7:4E:86:44
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:9d:ac:f4:17:3b:84:08:e3:a8:7e:dc:f1:07:5a:15:1e:
aa:9a:3b:66:73:12:a7:fe:7f:60:ac:3a:70:11:15:f9:47:4b:
e9:e7:09:62:8d:74:a4:c8:34:44:4b:d0:dc:60:6b:a7:72:a1:
3d:fd:54:6d:a4:c7:bd:5c:41:fa:70:1b:f3:67:10:e3:c2:f0:
5f:7f:db:83:6f:cc:2a:97:2d:27:08:d7:37:37:39:7c:04:f3:
c7:50:f5:52:e1:ce:0f:48:55:fd:dc:0d:35:20:27:f6:a3:16:
fa:66:22:9b:5c:6b:68:ea:0f:44:fe:c7:cc:50:bd:a1:9a:35:
42:9f:70:35:4f:d6:22:dc:b0:ef:5d:65:dd:e1:9f:f1:7a:b6:
a0:b1:02:6f:b2:b0:9a:1a:0a:2c:b5:ff:65:6c:c5:e3:56:1c:
44:ba:90:c9:03:0c:66:13:52:19:99:64:25:ea:02:65:fa:71:
0b:c1:cd:15:f7:88:9f:d2:28:ee:b0:2e:a7:43:58:62:d9:bc:
b4:99:88:e0:c1:c8:c8:23:50:a1:7b:e4:1d:59:b6:f3:0f:2c:
fa:f6:b2:cb:bc:df:5c:2e:29:b8:5a:ce:73:58:21:d5:a3:a4:
36:7a:3d:1a:ad:f6:f8:34:13:1c:35:fb:6c:72:3f:0e:84:fd:
5f:3c:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:37:33 2026 by rpki-client