Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: k2N9AXRmr5hLTHf6U4sZnx7GCIV6ojJ3ffYtIWfCCUw=
Subject key identifier: B4:C6:DC:49:AB:43:0F:91:11:C5:13:59:85:88:8B:42:1D:0D:64:36
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019D2704C9987491F85EBE5CAB7065B04964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: hCqxqCpIEsBwwYHRmaBhF2E4sIHVj2TIqklwaLLO/qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c9:98:74:91:f8:5e:be:5c:ab:70:65:b0:49:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=b4c6dc49ab430f9111c5135985888b421d0d6436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:a1:dc:01:5b:ca:30:1d:88:a9:5f:50:a6:
14:0c:e1:dc:ca:b5:b3:6c:5b:39:4e:6e:8c:13:42:
1a:a9:f6:6b:27:b8:4f:d7:3d:02:e0:99:4c:48:66:
4f:c7:59:46:cf:0e:fa:bd:23:f2:97:30:91:32:a7:
f1:24:34:64:36:d7:0c:c7:a3:49:37:a6:4a:47:c4:
4b:9f:53:98:ad:63:49:73:a1:af:6b:38:04:64:04:
cf:4e:a1:01:8b:b6:fc:73:08:71:f4:c4:76:1b:26:
3d:f6:e8:00:45:0b:9e:e5:61:c2:4a:ed:ad:84:29:
45:d5:70:a5:0e:60:da:56:7d:3b:78:02:d6:55:ad:
86:07:5b:de:98:ad:09:2c:36:52:b3:6f:ff:a5:40:
3e:3a:52:ee:c2:1a:1e:ec:09:a1:54:47:27:d1:fe:
46:9e:8d:3b:a7:38:71:0c:9f:8e:cb:3d:53:c9:73:
12:20:34:53:88:65:6e:dc:8c:86:0e:1f:b5:4e:2a:
cb:79:7f:38:d5:a4:c1:3c:c3:8b:b7:c6:18:5d:67:
f3:1d:05:9c:03:8f:dd:27:0e:2d:77:a2:cc:49:4c:
22:7a:d1:ee:d0:ba:e8:59:07:1c:19:c8:b2:58:09:
07:e6:aa:98:2c:5a:99:60:11:a4:63:e1:27:eb:a0:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:DC:49:AB:43:0F:91:11:C5:13:59:85:88:8B:42:1D:0D:64:36
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:fa:e1:81:33:c0:c2:6e:a7:60:9b:47:6c:ee:e6:10:49:
e6:d8:c7:88:fe:ca:84:38:78:68:b0:02:21:e2:c3:22:68:06:
3d:a4:4d:7b:60:74:c9:d3:81:0d:4e:ee:94:7b:03:e0:36:ec:
84:45:e5:30:c4:aa:c2:50:7a:12:71:ca:ff:2c:fd:9b:ff:da:
e5:0f:9e:f5:cc:84:c0:88:b0:81:b2:31:da:1c:59:44:69:43:
4a:85:69:0e:5c:91:62:39:2e:14:78:50:39:af:e0:e9:29:c4:
0c:7b:30:8f:3f:db:91:b0:e5:81:c5:35:fb:85:ee:1a:f8:bc:
be:55:29:e6:5f:ba:75:5e:cd:93:fc:7c:8b:d8:65:b0:df:71:
6a:d9:70:18:1a:48:9f:6f:86:2d:bb:7b:cc:42:14:55:94:90:
ef:c0:96:9b:f7:bd:46:f0:cc:d3:d7:b3:aa:0a:e1:04:09:0e:
ae:e8:41:d4:9d:bf:68:77:8a:8e:dd:8f:ba:44:70:9a:97:96:
bd:b8:9c:0b:92:be:24:66:8d:6c:b7:0b:e3:e3:ec:ca:0b:fe:
32:11:a6:9f:65:4c:9b:3d:a6:e2:83:d6:5f:ff:d3:0a:bb:73:
e8:a8:50:1c:1b:f1:a3:4e:63:d0:7c:19:af:1f:f1:22:c8:86:
f6:af:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:34 2026 by rpki-client