Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: VAgKihGr1zUy+NNuzmmPqYuABaCVcCfBRlHDITan1Ao=
Subject key identifier: 0C:9E:C5:AF:8D:29:EF:61:66:B4:2E:5F:0A:79:5D:2D:BA:4F:52:BC
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019D265FA25EC3070D7647377AB21891E35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0ED5
Signing time: Wed 25 Mar 2026 19:01:34 +0000
Manifest this update: Wed 25 Mar 2026 19:01:34 +0000
Manifest next update: Thu 26 Mar 2026 19:01:34 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: H2uP9zXV/q0SL020xD8mVdkTLuGqIgl894QIBzCwtvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a2:5e:c3:07:0d:76:47:37:7a:b2:18:91:e3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Mar 25 19:01:34 2026 GMT
Not After : Mar 26 19:01:34 2026 GMT
Subject: CN=0c9ec5af8d29ef6166b42e5f0a795d2dba4f52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:5a:73:1e:0f:d8:d8:6a:d4:16:99:8a:a2:
75:34:44:83:5e:4d:6a:7a:98:b9:be:20:2a:79:f7:
8b:ab:a8:db:37:df:55:de:34:c9:83:1a:77:de:4c:
b3:14:ed:92:62:0e:83:44:e5:50:b7:4d:08:e5:ab:
fd:89:40:a8:bd:2b:60:45:02:d0:f4:74:66:e4:7a:
59:ac:15:51:59:73:5e:c3:2b:7c:cf:5a:a6:39:81:
ae:54:d5:82:fb:5d:c3:d1:ac:6f:bf:d8:2c:3d:f4:
17:26:28:d6:57:55:ca:e2:1c:8a:4e:2c:bc:8e:ec:
b3:96:55:ab:ca:d0:3a:0c:ee:62:6a:9a:ae:79:d8:
ae:78:24:b0:db:68:9b:f8:57:63:e0:37:0f:ef:aa:
21:75:19:be:54:24:67:27:f1:bf:27:55:d8:f4:99:
5d:08:af:cf:3a:a9:1b:c3:b9:3b:92:63:c5:48:4e:
0d:95:e1:19:d4:a5:e6:b7:07:a9:c3:17:f8:e1:bd:
bc:1b:22:95:eb:ac:56:6c:5c:f4:18:e8:f1:f3:38:
2c:33:60:66:0e:22:74:c9:30:9d:e6:f9:81:04:fa:
28:6a:12:a1:f9:b3:dc:f7:c3:7a:99:a8:c1:e7:b1:
74:16:f3:01:2f:f7:ad:83:b4:e1:4c:ac:e1:45:bd:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9E:C5:AF:8D:29:EF:61:66:B4:2E:5F:0A:79:5D:2D:BA:4F:52:BC
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:7d:95:be:92:2d:8c:03:13:5c:54:48:31:24:01:83:bd:
fa:db:ea:9a:43:71:92:4c:6c:e4:a8:bc:01:37:89:f7:10:25:
51:f7:ab:e6:3e:7c:b6:ea:3d:3d:4b:f3:0a:66:61:a2:21:a4:
d6:70:88:27:73:73:3b:81:31:a5:b1:9f:db:ab:f8:ac:79:c7:
71:b8:3b:4f:2d:74:5f:db:ba:70:c8:27:6b:a3:eb:38:0a:18:
e5:b0:3d:3c:25:d4:f2:a5:18:06:da:e6:54:0c:bb:f5:c0:56:
dd:14:dc:4d:74:54:95:a1:c6:5a:36:1b:a4:69:b9:dc:3c:40:
18:c0:b7:b3:93:fb:b8:14:5e:e0:1c:b3:03:8e:de:33:99:84:
a4:79:05:54:cf:8b:90:24:b9:e2:67:95:53:32:be:07:88:eb:
9f:72:ec:21:61:d5:5d:47:f0:b3:af:5a:bd:65:56:54:ad:1d:
83:4f:96:6b:ca:7b:bd:df:49:0c:46:93:cf:63:94:06:5d:89:
0a:c1:8b:d8:01:13:9c:2a:4f:c3:0e:fd:cc:3b:37:20:c3:3a:
f4:f2:4a:5e:ef:11:1a:0f:67:c7:88:f4:7b:23:0c:15:5e:e5:
44:46:c4:89:14:5e:9b:fd:ac:75:8a:8a:80:9f:88:97:32:43:
2c:6e:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:47 2026 by rpki-client