Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: RHwwmmF2slh30eZwSTVwCplirxH0FquuF3aHoeUfS3k=
Subject key identifier: EC:B3:15:9F:3E:7F:6B:C0:C3:A7:4D:89:98:E4:31:12:AA:57:1F:23
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019D27726E13801F6EBDA6996B0DF3566AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 1142
Signing time: Thu 26 Mar 2026 00:01:43 +0000
Manifest this update: Thu 26 Mar 2026 00:01:43 +0000
Manifest next update: Fri 27 Mar 2026 00:01:43 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: fglWw4hK4dvKq2Vi2q2nARIDGsUECGBYjzVVEjW7GN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6e:13:80:1f:6e:bd:a6:99:6b:0d:f3:56:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Mar 26 00:01:43 2026 GMT
Not After : Mar 27 00:01:43 2026 GMT
Subject: CN=ecb3159f3e7f6bc0c3a74d8998e43112aa571f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:1b:05:20:33:b2:5d:ad:1d:76:d9:cb:99:
d0:c9:58:21:47:12:bd:40:cd:83:a6:72:81:73:52:
43:96:07:6a:8e:a7:b6:8c:45:22:3a:08:c6:7d:ab:
18:6d:d6:e4:87:43:3e:18:b5:85:4f:5f:15:40:10:
66:76:8e:0f:5a:c7:ca:fc:9d:85:5e:64:69:2d:42:
1e:49:e9:06:2b:90:61:01:fe:39:9d:5e:48:d2:9b:
34:de:bd:e4:90:2e:16:58:14:73:19:7b:4b:ae:d3:
b8:8b:2d:2b:77:6b:d9:93:1c:43:5c:32:4c:56:e0:
df:fa:ad:f8:0a:17:7b:84:59:d6:e0:a2:f0:1b:96:
bd:d8:76:9c:91:68:49:a2:8d:be:94:d3:d6:56:ac:
32:d0:da:3a:de:ac:2d:6c:a1:f6:ba:25:01:92:a5:
82:34:8e:20:19:83:62:8d:4f:52:af:d3:91:63:89:
d7:19:00:79:42:35:3f:84:34:97:57:3f:9e:6b:41:
c2:94:ef:21:f4:b2:45:82:f2:7a:9d:e6:01:7d:33:
b9:b1:a7:5f:60:00:de:8b:14:c9:41:aa:d0:3a:be:
bd:f6:7c:e1:dc:a5:3e:22:c7:25:54:3a:a1:4d:5c:
66:a5:f4:37:85:4f:90:8a:f9:49:79:f6:12:ee:93:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:15:9F:3E:7F:6B:C0:C3:A7:4D:89:98:E4:31:12:AA:57:1F:23
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0a:d8:8c:eb:96:a9:e7:f1:76:09:44:83:5e:f3:8f:dc:c1:
e8:53:5a:2b:a8:f7:27:33:d2:80:54:b2:85:57:9f:d8:07:aa:
52:cb:71:e6:8d:54:8d:c2:04:c8:e8:f2:da:1f:bd:88:54:11:
8e:66:ab:1c:ef:92:75:d7:27:8c:fb:dc:d6:6f:5e:90:9c:d9:
9b:f6:f0:9b:a5:52:da:e4:0a:a3:8c:e6:2d:ad:33:01:43:27:
bf:8f:33:d5:51:41:29:49:2f:0d:7d:06:d0:e3:39:cc:d5:41:
db:2d:50:3d:26:2f:96:b4:e9:85:bd:fd:1b:31:de:88:12:cf:
d5:21:12:39:a1:24:b9:a2:29:c7:11:d0:4d:c5:3a:19:1b:41:
a9:63:3e:a3:22:a0:8d:d0:f5:af:9e:6e:bf:eb:f6:1e:9f:8e:
e1:12:c1:44:6f:6c:62:43:f6:37:8a:71:c0:c7:f4:9a:e8:47:
59:b0:41:42:bd:44:57:b0:c7:7a:2a:a4:2f:b8:f2:c5:51:6f:
b6:fc:31:ea:80:d6:80:e6:bf:a8:a9:4d:02:0c:dd:14:2b:9d:
e2:2a:2b:7a:38:75:fd:42:dc:bf:29:84:d6:42:78:06:6b:09:
3b:11:05:bc:04:39:00:bb:5f:14:34:ca:1c:ee:3b:93:98:2f:
28:51:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:02 2026 by rpki-client