Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: nlgNqPC7gFhnwtMnhSP01teZNKpJqspA5rjik0aPBA4=
Subject key identifier: CF:8B:55:1D:F7:14:01:81:A7:BD:0B:97:FD:76:15:9F:F6:B8:73:D8
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019D284D3BF4DC5CD15DB783BEFE6D9C5F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0ED6
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: dFCNOQlyWM0qHekTca/DEknm6OGS1cCte4SxCJTJ4M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3b:f4:dc:5c:d1:5d:b7:83:be:fe:6d:9c:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=cf8b551df7140181a7bd0b97fd76159ff6b873d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:ea:ea:96:9e:04:40:83:66:bd:88:80:d8:
42:fc:99:79:98:91:4a:1d:1f:1e:ce:f2:2c:9a:98:
00:65:74:7b:99:4b:30:aa:48:db:85:e1:a0:2e:ec:
1a:47:b3:e2:f2:44:ca:6f:6e:77:26:1e:db:12:07:
64:a5:0f:56:15:23:d6:5e:9f:1c:b7:ab:0f:7f:dd:
de:61:f0:d3:bf:13:5e:38:b5:78:c9:6f:c6:45:de:
b0:2a:25:ad:59:6e:33:49:95:ff:4e:85:d4:da:88:
79:4f:db:07:cb:63:ac:92:9e:60:69:63:67:cc:88:
41:63:49:f4:bf:fa:5b:ce:3a:d8:34:f7:3b:5f:5e:
2c:93:f8:cd:b8:93:72:34:45:51:68:38:30:f6:82:
9b:e2:ff:a9:8c:bb:84:8e:22:71:44:ba:b3:57:f6:
f5:e3:77:f3:da:c2:91:74:57:cc:5e:4b:80:49:51:
1c:fd:69:2e:bb:f0:71:df:ff:43:bd:52:58:68:15:
90:6f:2e:ed:3f:a4:a3:f4:8a:7f:df:38:4e:29:30:
4e:0e:92:e4:1a:36:3f:66:3e:c9:44:e1:cb:36:b1:
c7:90:9d:b9:00:9f:ea:84:bb:c8:51:77:10:83:60:
b8:21:dd:64:cc:aa:df:5f:4e:4f:68:c9:d4:60:bc:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:55:1D:F7:14:01:81:A7:BD:0B:97:FD:76:15:9F:F6:B8:73:D8
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:42:24:35:cf:74:b8:8e:bc:c6:96:9c:50:81:df:f8:11:
55:25:eb:23:34:7f:3e:13:ea:fa:bb:03:34:f0:91:13:b1:5e:
f9:08:b9:40:67:0b:1e:74:0d:6c:5c:7f:c9:40:ef:07:9f:b7:
78:74:26:b6:08:80:f2:9e:de:62:25:05:23:62:ff:68:aa:53:
0d:d2:27:0b:be:da:30:a7:63:28:52:d5:34:8c:2f:a6:47:14:
d0:72:e7:1c:e6:41:cc:39:d2:2b:c4:98:bc:f4:48:a3:cd:e5:
05:20:93:c3:47:f0:f5:d7:d7:aa:07:11:f7:00:e3:34:eb:cf:
85:00:6f:9e:b0:9a:31:c9:2a:4a:4c:0b:4e:19:b5:bc:23:40:
8a:17:dc:a5:ac:34:2c:8e:04:db:a7:e8:70:ce:a1:f3:5c:84:
3c:87:c6:42:7e:c5:5e:74:49:b9:4c:eb:14:e5:be:36:f4:6c:
04:14:9e:89:cb:0d:22:db:03:c3:0d:48:d2:95:22:cb:34:e6:
46:29:79:bc:28:d2:36:83:59:ef:bd:af:5e:31:80:3f:c6:74:
42:87:98:30:36:4f:b1:db:9c:1f:95:51:70:ad:2e:7d:fa:be:
1e:f9:ba:fb:08:c5:b0:8a:ef:97:57:ad:05:3f:f3:3f:93:e0:
ad:3b:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:04 2026 by rpki-client