Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: WuVxHwA1rFZY31keh32o/bYKHkT/yETJ6hmkZ5PXJrQ=
Subject key identifier: 94:56:85:6B:E8:A8:64:C9:F6:4A:0C:84:85:07:B4:F0:C1:E6:40:6C
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019D28BB2BD6B9D0C5DE9E7BFE41C018C241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:48 +0000
Manifest this update: Thu 26 Mar 2026 06:00:48 +0000
Manifest next update: Fri 27 Mar 2026 06:00:48 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: P2/EPmlrNZksz7+wFjeymCwwu8u8qEF8Rfi7kSHyMvA=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2b:d6:b9:d0:c5:de:9e:7b:fe:41:c0:18:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Mar 26 06:00:48 2026 GMT
Not After : Mar 27 06:00:48 2026 GMT
Subject: CN=9456856be8a864c9f64a0c848507b4f0c1e6406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:36:57:b4:20:ef:0f:fc:6c:5e:ec:df:96:
8b:e3:83:ee:b4:25:ea:50:d8:c9:c2:73:03:46:1f:
a4:ae:6e:fc:43:81:5c:9e:df:fa:18:18:ac:c3:08:
22:6d:85:71:ca:b7:8d:e7:b0:46:f8:50:51:c6:4a:
18:03:d9:2f:20:f7:c1:f9:68:1e:05:8a:7c:7f:be:
52:dc:8b:6e:8e:73:f2:46:4a:d5:d0:14:87:37:4b:
ff:92:ca:44:fc:e8:d1:d0:9a:da:3b:31:7a:3e:0d:
6c:c5:23:f5:13:ce:14:16:3b:2e:a6:b3:50:53:a8:
c9:20:ef:5d:41:74:c5:9d:d3:95:a1:8a:5d:1d:88:
0a:ca:cb:64:3a:1a:c8:c3:cd:38:65:ef:03:a5:50:
df:fb:d2:9a:7b:16:40:e4:a3:cc:5d:3c:d2:00:86:
3e:61:e9:40:a8:f3:ac:14:49:48:e6:c6:38:e8:a9:
da:50:80:7d:8e:c4:d2:0e:ee:0e:f1:07:b1:9f:c4:
2c:65:1c:57:3f:a4:c8:95:4c:e8:1b:63:76:b0:d3:
5a:a1:d0:bf:51:e2:56:b4:25:9c:26:86:1f:8a:4a:
ae:46:a3:c9:b6:d2:ab:27:fe:69:fc:a1:7b:5c:83:
4a:c9:d2:72:2f:89:4a:91:99:ef:e7:5f:b7:d0:bb:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:85:6B:E8:A8:64:C9:F6:4A:0C:84:85:07:B4:F0:C1:E6:40:6C
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9d:c8:41:89:28:b7:37:21:31:f4:f2:71:bf:d7:61:59:64:
1a:f3:1e:a5:f8:11:90:66:91:8f:f9:ee:b5:b0:f9:c1:dc:6f:
7d:1f:fc:e5:02:90:63:89:11:dd:38:0b:62:50:46:64:31:5d:
5a:bc:1c:bf:0e:bd:5d:f7:e6:79:60:b6:02:e4:ee:08:36:c7:
c1:e2:b9:8f:aa:a5:46:9d:05:cb:52:fa:fe:69:95:b4:e9:bf:
7e:fc:7e:25:8b:60:83:ca:de:01:de:69:37:4e:0f:d1:a5:41:
de:5a:47:e3:4c:93:22:30:69:8b:49:5d:48:81:02:7c:a8:4a:
b0:02:30:60:ac:a1:eb:13:ea:9e:4b:7d:b1:70:6d:9a:42:fb:
3a:c2:b1:d0:c3:ea:2b:9b:61:f6:9f:a9:cc:a6:c5:9f:2d:58:
64:1b:91:47:cb:e4:75:08:47:4c:2d:4a:49:b0:96:98:29:f9:
9c:5b:83:98:fa:3e:d5:b5:fd:1c:b2:b1:91:a9:b4:4f:5b:a5:
a8:7e:d2:6f:34:09:e4:28:9a:c0:b1:85:a9:24:c5:84:a2:6b:
06:20:96:1f:06:5a:4c:17:15:9b:73:d0:8c:f2:6b:b7:33:ee:
bd:b1:81:8d:89:2a:08:b4:e5:93:96:a7:05:4b:33:7d:89:20:
42:e3:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:48 2026 by rpki-client