Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
File: uT2pHx9TY0JyxZEQh85my602FKM.mft (raw, json)
Hash identifier: UvEwmkVFvbUXxIMTgP85j4K3pUzemW6s44FZM7VeS60=
Subject key identifier: 26:82:06:3A:91:7E:1F:7A:78:F8:E7:33:8A:A4:C8:B0:BA:3E:AC:F5
Authority key identifier: B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
Certificate issuer: /CN=b93da91f1f53634272c5911087ce66cbad3614a3
Certificate serial: 019D299717AFA9F7782CCD9F63EE95B1D86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
Manifest number: 0A26
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: T5RpUZaJxF7WS22xVaYfC5phh5w.roa (hash: 1t4IgY5FT1qa56RFkPSefpzTePRTnBiDJZBSxg9HAjA=)
2: uT2pHx9TY0JyxZEQh85my602FKM.crl (hash: b7SVMiDaUnr8TPy/pdsdO1juPKSfTUkyFOUOtBa92Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:17:af:a9:f7:78:2c:cd:9f:63:ee:95:b1:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93da91f1f53634272c5911087ce66cbad3614a3
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=2682063a917e1f7a78f8e7338aa4c8b0ba3eacf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:dd:d3:fd:10:91:a2:b1:6b:f1:75:92:03:
f4:6f:97:a5:b9:7b:cd:80:a7:26:f4:7f:d3:35:84:
c0:62:31:6e:98:c9:40:19:b7:77:d6:a6:0a:b5:81:
14:91:64:79:5f:b3:e6:24:43:68:fe:b2:7a:ce:e0:
5a:8d:b3:22:23:b6:c3:cc:eb:61:fe:56:8f:4e:e4:
ca:26:fd:fe:9c:6c:3f:f3:f9:2c:f3:8c:8d:ab:77:
11:f0:53:c8:3e:c8:23:f4:e9:ec:cb:8b:68:6b:94:
a4:cf:3b:60:a4:c4:b2:68:ea:94:27:74:00:82:23:
bf:6e:4c:0b:f9:31:2a:a0:79:f5:2c:d3:fb:48:b0:
de:ce:e5:8b:47:1d:25:ee:ab:32:37:27:18:81:ec:
21:ee:b5:02:82:fa:5a:7f:05:32:88:e4:c1:7c:70:
30:45:15:b1:a4:32:cc:95:32:40:f1:67:2e:17:46:
f2:4c:a0:94:14:03:86:c2:58:75:74:84:8a:3a:3b:
f4:fc:2c:7b:87:0c:08:a6:36:0d:70:80:68:1c:03:
b0:18:33:80:8c:3f:51:8e:82:c9:61:85:40:51:5a:
58:c7:59:46:4a:94:f2:0f:d7:1b:e2:24:cf:7d:bf:
b6:80:81:c5:92:2c:93:93:58:5f:36:6f:d0:43:c1:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:06:3A:91:7E:1F:7A:78:F8:E7:33:8A:A4:C8:B0:BA:3E:AC:F5
X509v3 Authority Key Identifier:
keyid:B9:3D:A9:1F:1F:53:63:42:72:C5:91:10:87:CE:66:CB:AD:36:14:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT2pHx9TY0JyxZEQh85my602FKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ca4471-34d0-4816-81d1-8bf5b1ed1209/1/uT2pHx9TY0JyxZEQh85my602FKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:9d:be:ad:57:33:7f:51:7d:b7:43:0b:19:44:da:4d:43:
41:41:c9:59:93:88:3b:56:db:c3:b9:61:26:83:82:30:e9:f8:
36:ff:6d:ca:6b:96:8c:ff:fe:7d:d6:bf:0e:6a:15:00:f6:d3:
2a:9a:59:da:c0:84:c2:fe:5f:3b:0e:30:65:74:dd:41:b2:03:
7f:79:4e:9c:8b:41:4f:cf:db:04:85:99:52:03:bc:e2:e9:a6:
09:d2:af:be:9d:18:26:e6:0f:7a:42:6c:02:71:e1:1a:d4:24:
07:3c:bb:a2:d2:24:74:8b:59:15:f1:c0:1f:51:cf:ca:68:1f:
d2:52:f2:f2:f4:e9:ee:52:63:17:94:9b:a6:4d:bc:94:83:d5:
c6:6c:b3:fe:ff:98:83:30:a8:c1:8f:3f:78:ba:e1:09:60:47:
3c:2c:e3:a8:c7:20:7f:74:dc:44:a2:39:95:08:a7:56:a2:ce:
36:19:5d:f1:a9:e2:3b:ad:8f:9d:e1:41:9f:39:da:e8:94:62:
fc:64:01:35:30:76:e3:4e:29:f3:cd:85:99:4e:2a:60:4d:80:
d8:31:66:2a:2a:ae:8b:17:be:9c:f5:5b:85:8d:33:72:38:e1:
3d:74:1e:69:47:b7:5c:ea:a5:30:69:7b:56:85:15:80:0c:ad:
71:4e:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:27 2026 by rpki-client