Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: J06jG04Gi0xm5ihx/Kd/aDsWNFG9TqUllCKs+Q9hZBs=
Subject key identifier: D8:E9:CB:94:41:6D:DA:EC:25:90:88:1B:B5:36:B9:94:4E:F5:A0:D2
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019D2960A9EE6633E38C7795B8E8B0D31193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 0679
Signing time: Thu 26 Mar 2026 09:01:33 +0000
Manifest this update: Thu 26 Mar 2026 09:01:33 +0000
Manifest next update: Fri 27 Mar 2026 09:01:33 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: 9V1nWV/CCq4MLwbRScGcT1sNS67UySeeNxoUd555Ip0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:a9:ee:66:33:e3:8c:77:95:b8:e8:b0:d3:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Mar 26 09:01:33 2026 GMT
Not After : Mar 27 09:01:33 2026 GMT
Subject: CN=d8e9cb94416ddaec2590881bb536b9944ef5a0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:e4:29:53:d4:d0:30:f9:e1:5d:d4:fe:3f:
c6:79:34:fa:af:ac:b6:69:14:dd:5c:98:b9:62:aa:
ab:df:3f:6a:9e:17:b2:f7:2c:04:2f:ac:66:62:1f:
55:0e:69:86:ba:a5:5e:c9:92:e2:58:9d:09:6e:51:
a1:07:34:b2:0e:e2:c3:51:bb:78:09:1b:c5:8c:94:
17:bd:29:60:96:87:d7:e7:dd:fd:cd:7c:5c:ee:fc:
b6:d0:64:c6:48:0c:a3:d7:ee:d6:a8:19:9b:b3:38:
00:55:59:09:57:4c:79:83:cc:a7:e8:e7:59:66:22:
6f:57:b8:aa:04:ed:12:09:23:db:ad:20:e0:3e:aa:
f3:05:2f:ca:71:bf:0c:d4:1d:2c:2e:af:1e:ed:63:
6c:7e:9e:f7:d4:69:9c:0b:ee:cf:e3:ae:b2:d5:eb:
a0:5b:27:ec:b0:fd:24:0a:f1:9b:6f:aa:60:25:68:
17:85:c4:06:c1:17:d4:af:1a:63:d7:73:b5:c4:0b:
cb:52:ce:70:72:50:c3:d6:3d:c9:b8:6d:ea:dc:01:
6c:cd:15:47:6a:73:76:0c:cb:17:33:8d:56:65:55:
93:d3:2e:1f:c6:05:dd:d4:fd:37:96:81:9a:31:ed:
d3:82:ea:62:22:4b:62:25:1e:52:98:d7:3d:c7:c4:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:CB:94:41:6D:DA:EC:25:90:88:1B:B5:36:B9:94:4E:F5:A0:D2
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:ff:dd:b1:77:03:76:04:65:66:ad:b0:6a:44:c7:39:82:
9f:38:1f:2d:9f:0b:2a:a6:27:16:b4:b0:ed:4b:59:18:c6:75:
03:4e:ba:9e:0f:fe:1c:3a:92:07:e6:53:88:2f:c8:26:3f:f3:
cf:50:c4:6f:51:71:3f:63:0a:7f:b7:d8:f9:15:42:26:6a:70:
81:b3:d1:3e:b3:d6:3e:83:d5:d6:05:af:0f:88:38:3e:70:4b:
fe:5e:30:bd:c1:0c:34:0f:b0:aa:3e:a5:9e:d1:6f:d0:98:40:
65:70:df:17:3f:0d:e9:2f:9f:53:7d:07:3f:87:08:79:da:a5:
55:8c:ac:b5:40:cc:5b:95:c7:f5:90:01:97:41:61:23:bd:5c:
e7:07:c6:8c:f5:31:fd:40:ff:3a:06:a0:b4:26:d3:71:57:ca:
c5:61:4c:36:d6:df:91:c0:32:4c:1b:11:e9:05:83:22:1c:26:
74:ac:76:4b:58:d1:97:6a:67:2c:d2:c8:14:b6:1e:63:63:e1:
92:8f:8e:75:09:f8:79:94:dc:08:45:20:a1:3e:11:0d:07:34:
ec:ec:4e:84:c4:93:b3:dd:5a:bc:6d:21:3d:ab:2e:1d:73:e5:
0e:05:72:9f:5f:2a:ae:b1:86:c2:18:38:b0:92:8c:4c:bf:c0:
ff:9b:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:36 2026 by rpki-client