Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: BRW3QkNKLC+vfdU+bdSo+vD06EH+HEPu/XjgpmqHfLA=
Subject key identifier: 79:0E:48:34:34:9A:95:E5:64:C7:F6:44:9A:01:12:B3:F2:00:C9:66
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 019D28BB7A6E00503C83A4361D587759F3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:08 +0000
Manifest this update: Thu 26 Mar 2026 06:01:08 +0000
Manifest next update: Fri 27 Mar 2026 06:01:08 +0000
Files and hashes: 1: kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa (hash: o5DgZsV413bg/omkWA7yGgiwOhEayAL+iXDGxDZd72U=)
2: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: oennkVkzABAQyeOJtBZ+fO5VXCNtQgwd7/jAW/DjxrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7a:6e:00:50:3c:83:a4:36:1d:58:77:59:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Mar 26 06:01:08 2026 GMT
Not After : Mar 27 06:01:08 2026 GMT
Subject: CN=790e4834349a95e564c7f6449a0112b3f200c966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:86:a4:67:12:cb:e3:3b:22:ac:33:dc:30:
58:26:53:e9:00:70:1d:46:da:25:c1:dd:65:4e:eb:
cb:7c:40:66:9e:fb:95:20:7b:bd:cd:17:68:c5:6f:
6e:ce:52:97:85:00:cd:a3:2b:d9:0d:e8:a6:6d:6e:
df:8f:d7:3a:2d:5f:60:ef:33:1e:45:94:25:31:46:
8d:8e:4f:89:b6:48:d9:56:44:a2:c1:84:1a:94:24:
e8:6f:3c:34:60:d6:90:84:fa:52:44:d5:16:b4:a6:
67:42:c6:29:0a:1d:97:90:76:80:53:df:4b:ee:da:
a4:34:6e:e3:98:b5:92:00:a7:82:a9:b2:fa:f6:e2:
44:b9:07:13:2c:96:95:71:b6:59:40:40:87:4b:fd:
20:c9:b1:f8:11:01:2c:ad:41:f3:6c:99:9b:cd:04:
fe:7b:5e:38:e9:c4:0a:af:fc:5a:12:db:50:82:df:
86:31:a3:4a:34:bc:75:1d:2c:04:50:ce:3d:14:85:
f6:7f:5d:56:cf:25:53:dd:a2:6d:b9:d6:75:ca:5f:
d6:17:cb:d6:df:ad:94:6f:91:50:0f:e5:5d:b5:ce:
b8:e0:ce:01:dc:e6:63:b8:ae:cb:a0:6e:b1:d1:74:
47:3f:d9:16:4e:d4:4b:85:1d:68:8f:cf:9b:68:ee:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:48:34:34:9A:95:E5:64:C7:F6:44:9A:01:12:B3:F2:00:C9:66
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:16:c1:a7:ca:24:b4:df:b5:dd:a5:b0:cd:7f:ef:b8:b9:45:
5a:f0:f0:1b:3b:73:76:ba:b4:32:52:cb:92:e9:b9:82:bf:eb:
17:3c:9f:21:f2:f2:dd:cf:f4:23:46:54:e3:70:6e:52:60:74:
ec:ce:b7:c2:c6:48:be:60:78:c1:e6:3b:f3:43:0f:d5:73:e8:
cc:6a:4e:37:a8:12:51:e7:48:44:e5:e1:44:ae:c0:06:f2:7f:
14:b4:07:5d:19:54:eb:18:22:30:7e:40:65:27:34:2b:f8:69:
88:09:94:9f:b6:51:fe:e2:ae:53:a3:05:2c:95:6c:e1:15:b7:
bb:ce:8e:44:1c:99:a0:b3:3a:ae:4a:65:66:e4:0d:a0:0b:79:
aa:48:fe:2b:a4:77:ec:aa:c9:c1:6a:7d:9d:b4:9d:bb:c3:ed:
3c:78:cc:2c:53:b1:e6:ac:48:db:52:50:d8:e4:ea:58:91:e6:
84:91:91:a7:00:cf:60:ab:88:fa:b4:62:a5:e7:5d:db:62:9f:
c2:8f:10:bf:bb:72:9a:70:e4:a5:1f:64:81:2f:c3:58:34:49:
9b:9a:fa:34:3f:a8:64:4c:fe:3b:b7:02:23:51:48:43:9a:07:
f5:39:d2:47:16:4e:74:03:9c:13:81:58:cd:ca:fc:96:99:5e:
bd:74:44:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:40 2026 by rpki-client