Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: wJDJor/nGagM1/TMarnPhtQYIeLxBACDgrsA717zro4=
Subject key identifier: 12:45:9F:A1:9F:84:5F:6F:EA:3F:65:34:67:00:1C:8B:B5:06:19:15
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019D273B041FC6328B3BC8A939CFF442E2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0FCB
Signing time: Wed 25 Mar 2026 23:01:12 +0000
Manifest this update: Wed 25 Mar 2026 23:01:12 +0000
Manifest next update: Thu 26 Mar 2026 23:01:12 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: iRaZqvdlvC8STF7TVIxxw6NQjyde+U8ejaI4+rcU704=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:04:1f:c6:32:8b:3b:c8:a9:39:cf:f4:42:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Mar 25 23:01:12 2026 GMT
Not After : Mar 26 23:01:12 2026 GMT
Subject: CN=12459fa19f845f6fea3f653467001c8bb5061915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:96:ae:7e:11:91:13:b6:d7:a1:ff:8b:5c:
d0:44:28:e4:f2:c3:ef:3a:77:89:9f:8c:d7:51:6e:
6e:17:50:f8:94:01:e5:27:04:2b:58:e7:9b:4f:92:
f6:2d:d0:aa:15:81:3e:f1:47:25:a2:19:4c:e4:d2:
70:73:0c:8e:91:5b:ca:7a:81:e3:4f:96:18:2d:6f:
93:64:43:07:48:26:42:f3:dc:d0:72:c2:ce:4a:48:
d4:33:8d:5f:4e:1d:06:dd:41:e7:2a:b9:cb:cb:ee:
03:41:82:a6:2a:7c:c2:06:96:7d:78:5a:3a:7d:46:
c4:82:05:b1:ab:04:4e:ef:07:97:04:69:59:ea:1e:
85:05:bc:8e:b6:9a:a2:43:f1:0a:1c:e7:ea:30:9b:
da:c6:a0:b1:ac:d7:79:ab:cc:7a:04:7d:bf:02:db:
18:b0:09:58:b9:38:bd:c1:a3:59:5a:67:34:99:e9:
43:72:83:c2:ea:ea:28:ab:2b:c3:4d:1c:33:0a:65:
b7:bd:78:20:65:f6:3d:89:dc:09:88:78:48:19:8a:
2d:85:71:7d:cb:c4:89:c9:99:50:06:8a:65:38:4b:
af:10:97:09:d5:79:59:ff:81:19:8e:4f:e0:2e:13:
fe:7c:11:67:3e:58:28:b4:f9:b0:e9:52:01:8d:44:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:9F:A1:9F:84:5F:6F:EA:3F:65:34:67:00:1C:8B:B5:06:19:15
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:cb:44:43:77:0a:fb:80:19:5b:51:f3:9b:83:0e:5a:94:
d4:a8:b3:f6:2c:e7:db:3a:60:0a:f6:9e:29:cd:ef:2a:95:08:
ca:ed:ce:85:12:99:68:a5:35:c0:ee:b7:9a:83:5a:c7:3d:02:
49:ea:63:c5:20:d1:c9:40:c0:bc:37:07:d8:4e:37:e7:45:1a:
1d:4a:c2:ab:91:65:e5:07:2c:e2:6a:40:0d:7e:bd:d3:93:0d:
75:23:04:af:da:de:7d:d3:02:bb:9f:01:d8:ae:49:fd:7f:40:
1b:5d:23:9e:44:1d:27:44:30:4d:66:76:71:a4:b5:05:36:c8:
a6:70:44:30:7d:e3:58:c5:48:34:47:5e:9e:35:0f:22:12:80:
95:9c:4b:61:1b:07:e7:d8:55:bf:a8:6c:30:98:0c:83:05:1d:
92:38:41:7a:36:6e:53:b5:3f:22:3d:f6:68:c6:cc:3c:c1:8a:
e4:5b:19:30:da:0e:ac:93:54:91:26:76:73:b9:6a:4a:74:e1:
1d:e2:e5:22:40:1c:32:dd:ee:97:a0:f1:70:77:2d:08:67:df:
61:22:89:d4:09:81:62:cd:8b:bd:28:32:08:a1:66:72:bf:f5:
b5:27:4f:e4:41:d4:3f:15:4f:3d:1f:d0:fb:a1:60:cd:27:0f:
a6:6b:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:10 2026 by rpki-client