Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: L7EL/SauDK1BcDzPdbc3zPODLJrFuHtJqTSdzDdJrEo=
Subject key identifier: C8:CD:98:98:AC:C4:19:34:B5:67:56:3E:F3:28:0A:7E:FA:64:B7:36
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019D2772CC83E3D48D9FFAE4CF157ABBB1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 06CC
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: TSjfj-QisRfZKTbvFvagtYYtljU.roa (hash: aXZ9GQHn0MfhoPq/DrK3cj/6rgXogLzvprkNtDCtBy0=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: WpYm/HmzZ27BbzW9Tc3LDhOt7GefwoMRUKNt6oIn5G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cc:83:e3:d4:8d:9f:fa:e4:cf:15:7a:bb:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=c8cd9898acc41934b567563ef3280a7efa64b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:1a:bc:f0:c8:0b:24:20:56:79:21:98:27:
d9:fb:b7:6c:d8:38:00:1e:d3:c3:97:5a:ad:8f:3b:
85:4b:f6:bf:bb:48:58:69:51:04:6a:97:55:85:e3:
d7:59:0d:3e:cd:06:df:eb:2e:27:2b:44:11:8f:5c:
82:75:67:b3:32:7a:a2:b0:66:41:9d:0a:69:c7:ff:
2c:42:9e:15:e5:e2:79:43:fb:c4:0f:f8:ec:7c:12:
05:59:42:35:52:fc:7d:76:cb:80:96:ef:3b:5d:90:
8e:df:ea:64:d1:2c:5f:b6:5e:b0:41:30:34:8d:f6:
d0:cb:47:ff:4e:06:c3:eb:65:91:d2:72:2d:19:98:
f6:77:44:76:66:78:f1:e7:d9:95:2d:ca:7d:0e:d3:
bf:2a:62:9c:69:7a:9c:28:ec:e5:f4:8a:2c:24:97:
66:29:95:01:f1:e0:27:02:7d:ae:ea:e3:a1:0f:da:
74:d3:3b:c0:99:4b:c8:75:67:2d:af:53:32:ee:9b:
1d:f9:a9:a3:75:e5:56:ad:6e:1c:ee:52:1f:3b:9e:
ef:cf:df:de:18:f6:48:2f:e4:26:9f:10:f3:dc:bc:
8a:75:15:80:5b:99:19:11:7b:1c:76:06:b1:4c:2e:
95:ac:21:75:4e:f0:4b:01:2f:da:0a:b2:04:a9:01:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:98:98:AC:C4:19:34:B5:67:56:3E:F3:28:0A:7E:FA:64:B7:36
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:be:b5:74:d4:2e:a2:c9:4c:7c:89:c3:ee:9d:0b:1b:00:d0:
f5:be:da:11:b6:0c:ca:f3:8b:32:f6:81:dd:13:8b:fb:a3:67:
08:2b:1e:35:9a:b9:82:b9:92:ec:24:d4:03:68:37:73:96:98:
14:c4:ce:1f:44:87:81:e7:61:96:a0:0b:cf:3a:af:3e:c0:c0:
17:9a:6a:e7:37:93:35:8a:2c:80:86:3b:35:31:16:39:c0:05:
53:14:fc:39:50:28:f4:9d:e8:b0:9e:63:50:a8:e5:88:57:27:
4a:59:80:cd:e7:1e:78:45:9a:ed:4c:2b:7f:90:2f:3d:c7:76:
9f:61:be:9e:e4:38:8d:1f:1d:de:63:3e:dd:5d:39:d0:c7:a6:
cd:b4:01:18:2e:fd:a9:20:71:67:39:f7:f0:72:e3:5b:76:c7:
1e:e5:e4:9c:d9:f7:a1:38:d4:75:3b:08:39:77:64:b7:0f:93:
5c:f9:8d:b0:e6:e4:1a:73:3a:f2:d1:ed:3b:04:cb:0b:83:9d:
1d:c8:44:4c:d6:d9:b4:4c:92:78:81:15:09:6b:2e:76:be:d3:
c6:96:96:d2:e2:c7:1e:2c:a8:00:8a:39:da:3c:e2:55:86:bb:
82:2d:1a:3e:66:44:f6:c2:bb:3f:72:8d:1d:4a:93:7b:ee:85:
b2:4a:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:45 2026 by rpki-client