Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: sYfocrq9ImHokyJnowIqzNl2CmA+vvnyQIp3tWxBbF8=
Subject key identifier: 5F:92:61:E0:15:AC:D1:6C:45:A4:7E:38:77:82:E4:99:1E:C5:F4:F1
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 019D2772B8544BBFEE68600CB97E6334116F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0FE2
Signing time: Thu 26 Mar 2026 00:02:02 +0000
Manifest this update: Thu 26 Mar 2026 00:02:02 +0000
Manifest next update: Fri 27 Mar 2026 00:02:02 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: EE2c5ADnK9MkRI5AfqItwjefsOzPN+4MvomNgkLRX/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b8:54:4b:bf:ee:68:60:0c:b9:7e:63:34:11:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Mar 26 00:02:02 2026 GMT
Not After : Mar 27 00:02:02 2026 GMT
Subject: CN=5f9261e015acd16c45a47e387782e4991ec5f4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:88:7c:58:80:c1:ef:c6:f5:3a:16:55:f5:
62:89:c8:95:8c:9d:68:a0:74:7e:2e:2f:65:21:bc:
ed:98:0c:81:ed:0e:c1:c8:b3:ba:6c:4e:a1:ec:1c:
27:f4:ba:f4:a1:7a:51:4d:79:c8:1f:14:97:6e:55:
bd:e5:ac:fd:80:37:fa:c2:b2:3d:1d:d3:5f:28:e7:
2d:59:ad:ac:99:44:1e:22:c1:c0:0d:7b:76:07:f3:
92:c1:6f:1a:06:b1:d4:4c:e2:c9:54:f7:6a:86:c6:
58:59:3a:ca:a6:24:29:8d:f9:01:e9:57:fd:20:36:
8e:1a:70:1a:4e:76:73:78:3d:0a:7d:03:73:08:06:
c6:d2:f3:12:48:c1:c3:25:62:a2:47:bc:76:e9:1a:
d5:ec:1b:da:dd:9f:5f:32:5a:ec:e0:38:68:7e:e2:
2c:aa:95:03:ce:aa:6a:fb:97:d3:22:59:03:6f:eb:
b8:6e:1c:77:ba:25:de:10:8b:7c:98:78:1f:16:a0:
df:51:84:b5:a3:9c:c9:10:6f:60:59:05:45:27:d8:
33:85:e6:e3:ef:7a:96:e0:47:23:25:23:d2:0f:a6:
26:d9:da:17:be:69:60:c0:cb:40:8f:38:44:05:b3:
aa:ec:84:63:be:f1:84:26:bb:f2:27:c7:3b:93:26:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:61:E0:15:AC:D1:6C:45:A4:7E:38:77:82:E4:99:1E:C5:F4:F1
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b0:c5:40:74:e6:f6:de:bd:fe:7b:ff:3f:50:6e:99:0e:a6:
b7:1b:a3:be:3c:4f:97:fc:f5:85:3d:ad:71:20:e7:1f:16:a2:
37:3a:94:3d:07:62:25:87:ee:54:9b:1a:96:8b:bb:bc:13:56:
7d:6e:7c:0b:69:5f:80:01:a4:f0:0a:cb:bc:d6:1a:a5:42:69:
97:ea:28:8c:da:ca:12:e2:95:b2:b3:11:79:da:68:ed:db:58:
7a:a1:86:f9:7a:d7:6d:1c:6c:82:e6:01:d7:5c:7c:af:3b:42:
b3:2d:6a:05:d8:8d:41:9e:8f:5b:9a:f4:1c:98:13:e0:d3:6e:
ff:a8:de:66:e0:ed:28:8f:4e:f4:4f:c6:7c:57:6f:42:d8:75:
72:a0:80:fe:53:68:2d:4c:30:ec:83:fe:65:12:d3:e7:64:20:
e3:a2:f3:61:74:02:ab:db:e7:80:1a:0e:ab:c9:9f:1a:c3:dc:
9a:66:bf:20:f6:1d:95:24:80:90:8c:3b:91:1b:d9:e6:72:99:
27:98:25:e7:c4:7b:b1:52:d0:21:d3:03:bc:1b:14:d1:00:23:
c8:60:5b:14:b5:3b:e9:46:21:2a:b7:9c:e4:ff:fa:12:95:7b:
fa:02:b5:88:87:6e:5c:4b:86:d1:f2:ae:0a:46:84:21:7e:b3:
8f:87:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:16 2026 by rpki-client