Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: pY0GW/Tn/Bqc3AEsK3QJiHu25/eKb8t1l51D9jY+CrQ=
Subject key identifier: 10:B3:A3:25:6E:90:62:07:B7:16:B1:CE:EF:89:39:53:5A:68:DC:4B
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 019D2A72E093745B9DE37442260D9CB4849C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:01:04 +0000
Manifest this update: Thu 26 Mar 2026 14:01:04 +0000
Manifest next update: Fri 27 Mar 2026 14:01:04 +0000
Files and hashes: 1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: 2qBO/g49+zIx57HNDuqPDqNLWFx+AB26lkCF+BKQADo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e0:93:74:5b:9d:e3:74:42:26:0d:9c:b4:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Mar 26 14:01:04 2026 GMT
Not After : Mar 27 14:01:04 2026 GMT
Subject: CN=10b3a3256e906207b716b1ceef8939535a68dc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:d8:a9:0c:6e:13:c5:a3:85:b3:51:4f:a9:
17:eb:0d:ba:38:4b:69:63:91:1b:cc:1a:84:6e:c7:
8f:f0:ec:8b:af:7e:c2:6f:3e:aa:18:dd:59:55:34:
ba:ab:c0:8c:0d:94:24:69:92:a7:50:f9:ca:be:ce:
e6:13:85:c5:2d:35:91:50:81:bc:d8:d4:69:b2:7d:
94:76:22:75:8c:b7:48:14:c3:39:28:9b:8e:94:ff:
92:7b:fd:20:a1:4e:42:dc:50:48:d0:33:d6:16:8d:
ac:c9:86:ac:c8:8a:5e:fe:a6:fb:65:a4:0b:59:33:
e1:79:98:92:ca:cd:3c:07:50:f6:72:f5:cb:fe:65:
64:0d:e0:3d:ce:33:6d:a8:ae:1d:8e:c8:91:90:a9:
91:16:ff:ea:56:9f:57:fe:43:46:dc:92:f7:e5:a7:
67:e3:87:bb:5e:8e:bc:db:d1:2c:ee:b8:b8:b7:05:
83:4b:8a:5a:97:8a:45:55:ca:3c:98:64:be:f0:55:
8c:4b:a5:c6:d9:00:c6:2d:a6:68:5a:c8:56:28:8d:
7b:7c:f2:f8:7e:55:2a:34:b3:39:62:c4:50:20:d2:
ad:50:d3:d6:2f:2e:fa:9f:a1:80:58:c9:8a:09:44:
c9:b8:50:04:c2:7c:4e:fd:d1:96:27:a6:67:35:3a:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:A3:25:6E:90:62:07:B7:16:B1:CE:EF:89:39:53:5A:68:DC:4B
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d1:73:04:cd:b2:c0:f5:43:7c:7d:8a:a0:41:06:55:9d:bf:
65:71:c3:5a:00:15:de:ad:57:39:31:fd:49:56:b2:e4:31:15:
d5:bc:61:bb:fe:a2:76:10:bc:b8:29:9f:32:8a:d4:30:1f:e2:
ac:57:56:97:cf:e6:60:52:59:38:30:48:89:4f:77:ad:12:4c:
89:a7:05:a3:38:2d:67:8c:f1:b3:4f:ca:2d:a8:82:c5:2c:30:
ee:a9:19:98:24:ee:b7:88:5b:d6:fc:a8:13:fc:7c:ce:f9:7f:
b0:0f:cc:ac:5a:47:bd:71:e9:e2:c8:2b:58:90:28:c0:cc:77:
30:f1:58:51:6f:d7:a8:73:3d:bf:72:7c:95:42:94:ba:94:7a:
d6:36:da:b7:dc:68:f6:a7:92:a5:a5:2b:09:6a:4e:60:04:49:
69:ed:e8:47:87:28:aa:11:56:36:a9:22:db:c0:10:97:39:cb:
73:90:ea:05:7e:90:1f:10:69:0c:4c:ac:6f:8d:c3:03:2a:4c:
6e:3d:8a:2f:cd:79:a9:34:5a:7b:96:13:30:a0:d6:f5:43:a3:
20:ef:a2:ff:e7:cf:f9:07:96:e3:e5:60:aa:e2:82:2f:21:58:
07:29:38:1a:21:bf:7f:d6:b9:89:64:0e:30:b3:e7:fc:a3:21:
b1:7a:63:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:05 2026 by rpki-client