Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: Twt+wvSKh5ly6AQPsFQ5+XHV0Jb6eR9iDezwNVQ6O54=
Subject key identifier: 3C:8B:DD:DB:17:2D:11:02:23:2A:A0:DC:19:6B:57:BE:4C:6B:EF:BD
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019E1DFDFB021DA4DD333AFA24C4E4F9905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: ViBUafLYklZZMi37jvuiGOvjxlWcXGb7sOfN9GO5vaA=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fb:02:1d:a4:dd:33:3a:fa:24:c4:e4:f9:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=3c8bdddb172d1102232aa0dc196b57be4c6befbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:33:ee:1a:be:a4:cd:f5:a0:5c:2f:f9:39:
0c:29:5e:74:cb:4e:79:e8:9f:52:70:e3:95:be:3c:
8c:0b:80:2b:0d:aa:e1:67:41:b2:59:ca:79:55:d6:
71:19:ca:f5:a4:99:8e:a5:6a:6b:b0:20:57:2c:70:
9e:b0:1a:9f:6c:6f:6d:9b:89:c5:0e:32:9f:c2:21:
ae:68:2f:d2:65:08:f5:07:a7:83:8d:ec:8f:73:8d:
3a:00:44:a6:7f:dc:81:85:44:df:09:19:ac:22:b2:
fa:59:e3:c8:ed:ae:cd:3b:a5:75:12:a9:ef:f0:cf:
2f:dc:ab:39:06:c6:d3:21:4b:08:c7:a8:5e:0f:60:
30:8f:6a:aa:04:ae:3a:ad:53:b1:cf:d7:85:b5:1e:
14:95:e8:74:9b:2b:1d:b6:d1:48:2e:db:ee:a9:3c:
5c:90:7a:82:2b:1c:68:a4:0e:3c:75:a2:f5:16:e9:
eb:8f:6e:6e:56:94:2f:71:aa:8f:30:ba:76:1d:a9:
dd:d8:88:6a:12:c6:92:fc:b9:d9:89:64:59:58:18:
28:3d:a7:e9:b2:d2:00:4b:8f:8b:b0:aa:67:ba:53:
77:41:d5:ed:0d:1f:58:9d:4b:5c:86:4f:f6:df:d2:
73:b5:a7:d9:64:8f:c8:12:6a:8f:4f:9b:ad:ca:7c:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8B:DD:DB:17:2D:11:02:23:2A:A0:DC:19:6B:57:BE:4C:6B:EF:BD
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:47:ed:7e:15:4b:62:81:c8:6a:6a:ac:61:ba:e9:7b:bf:4b:
c6:56:f4:23:9e:52:e3:77:7a:6b:d6:72:a8:da:de:e1:2e:6d:
92:37:2b:9c:62:8d:ce:c1:a9:55:cd:91:65:3a:da:e2:8f:e8:
a6:7e:0b:64:cc:41:a7:2e:a2:27:08:c8:67:a6:75:f8:61:32:
8d:cf:e4:81:20:0a:77:15:14:f2:e5:74:e8:11:ce:28:80:cc:
f6:ec:bd:d6:f6:92:3d:6b:cb:ab:97:b2:5b:71:f7:5d:8b:c8:
e0:f5:51:d4:85:a5:ba:c6:b7:c9:c0:8b:c6:36:7a:22:b7:d5:
d3:89:d0:91:76:83:4f:8c:0d:63:c2:38:35:ae:b2:3a:42:b2:
48:8c:1d:a5:62:d5:8c:2c:eb:34:8f:43:64:1f:cd:92:8e:7a:
30:0e:95:79:6f:67:0e:0f:ec:bf:e9:9f:76:c1:3c:d9:41:c5:
f6:14:3e:c5:88:67:35:fe:97:60:da:80:ca:e6:b9:2d:88:ff:
c6:57:c9:e1:4d:56:a3:c2:98:e7:72:8d:0c:f1:8c:b9:01:5e:
ef:08:67:14:0c:6a:45:26:fc:f6:88:d1:3c:2b:7c:1f:04:bf:
40:85:f9:36:df:14:3d:c9:03:21:5f:71:94:d4:0b:25:63:eb:
a0:92:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:14 2026 by rpki-client