Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: xTf1124x8ZmeBBsp7Q4ZYxXoWyvw1bMcWYo0Ng9pvhQ=
Subject key identifier: 85:6D:47:D7:1D:AA:C4:1A:5D:37:11:3F:2E:D1:72:01:83:DD:7C:57
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019D28F2439E96CC5D53D03D65A8832BDF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 0820
Signing time: Thu 26 Mar 2026 07:00:58 +0000
Manifest this update: Thu 26 Mar 2026 07:00:58 +0000
Manifest next update: Fri 27 Mar 2026 07:00:58 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: gJYbruuttj7q7hRP/qxShFTNlXrEzRG6YCh8vYR2PpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:43:9e:96:cc:5d:53:d0:3d:65:a8:83:2b:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Mar 26 07:00:58 2026 GMT
Not After : Mar 27 07:00:58 2026 GMT
Subject: CN=856d47d71daac41a5d37113f2ed1720183dd7c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:a2:74:47:dd:d0:65:e4:f0:7b:63:c5:a7:
34:e7:56:91:2c:02:d3:62:c7:6a:58:e5:79:7b:bd:
47:e1:de:e5:75:f4:5e:d4:cc:ed:5a:eb:76:ee:9f:
50:b9:9f:68:3c:71:6c:bc:3f:2b:50:2e:15:e0:0d:
bd:49:14:1f:9d:c3:ce:f5:18:0a:1e:80:aa:9d:22:
56:c8:59:c9:99:0c:c5:d9:82:50:0f:2c:f0:91:f8:
98:08:88:e5:9d:58:00:ff:21:77:e9:cd:72:e0:49:
fa:41:55:92:36:d2:e7:ac:bb:cb:1a:a2:72:45:e1:
7a:7d:b1:e0:ce:40:0d:17:d7:39:32:82:4f:5f:78:
c7:8d:4c:b5:ff:bd:7c:d7:3a:ca:a1:d8:10:ca:34:
90:40:2a:3e:af:f4:02:ff:49:52:0c:9b:8a:5f:bf:
11:c9:67:3a:9b:a3:bf:00:a1:5f:67:1c:70:3e:b3:
e7:b6:6e:a8:19:1b:6d:d4:de:62:f2:0a:45:36:57:
56:4f:ee:f8:be:9b:ba:ff:f7:e3:87:7d:a0:c2:59:
0a:d4:18:ad:e5:40:23:5b:ed:ad:01:2f:97:e4:58:
36:fb:d8:41:dc:b6:14:b1:9a:83:06:93:78:f4:db:
a8:ad:66:e7:f6:28:42:11:ed:7b:10:6d:14:2c:3d:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:47:D7:1D:AA:C4:1A:5D:37:11:3F:2E:D1:72:01:83:DD:7C:57
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ac:69:08:ee:da:f3:6e:70:06:7c:4c:1f:51:c7:30:c3:c2:
e1:bb:33:26:ed:ae:3c:4f:0c:f4:28:4d:47:37:7a:3b:d2:42:
0e:8d:de:2d:54:18:5e:84:00:0a:89:ed:32:a5:bf:83:98:dc:
20:b5:b0:07:78:bc:1d:3d:74:46:42:19:6b:f2:b2:10:75:17:
e2:14:84:33:bb:13:c1:9f:3c:cb:0a:9c:b1:8d:0f:f6:a8:01:
d0:b9:45:42:ac:da:b4:10:6e:49:c1:13:04:af:95:e5:f9:92:
d8:0d:c9:0c:4b:51:7e:27:9d:31:16:f3:79:1c:4b:6d:7b:6b:
87:7f:83:79:07:78:31:4e:97:98:8c:b1:cc:02:9f:ef:45:51:
8a:79:5e:40:72:dd:44:ec:e9:52:92:52:26:95:fd:16:8e:ca:
66:c3:a2:f6:8f:70:87:a3:c3:68:ee:c4:6f:e9:c6:80:75:70:
9c:08:ca:c6:48:b1:ea:59:eb:5f:e8:e3:18:3a:f1:23:3f:10:
ab:42:b0:5e:25:9b:ab:0f:e8:15:ca:64:91:7c:b5:24:6c:02:
66:2f:5d:a9:b1:b4:3b:75:02:1c:44:74:42:8c:48:ff:de:4c:
af:76:02:49:ac:7f:00:86:07:29:31:63:da:b0:b4:49:b2:9c:
64:36:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:55 2026 by rpki-client