Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: 1KjgqoUSWHfk5I+1fx6/MVwIh0Is0RsTQg/6vGUGPRE=
Subject key identifier: F1:C1:A1:EC:8F:39:D3:EC:66:73:3B:9C:DC:81:DB:6D:B5:BF:61:FC
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01A1D9EEB5DBCA99C67B4C63C31D06B26C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 12:01:02 +0000
Manifest this update: Sat 14 Nov 2026 12:01:02 +0000
Manifest next update: Sun 15 Nov 2026 12:01:02 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: zMH0dtjDPiDjqpGXPSOSEadxQ4xNuS/aGfbp2BKSReE=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:b5:db:ca:99:c6:7b:4c:63:c3:1d:06:b2:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Nov 14 12:01:02 2026 GMT
Not After : Nov 15 12:01:02 2026 GMT
Subject: CN=f1c1a1ec8f39d3ec66733b9cdc81db6db5bf61fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:ec:79:d5:75:36:90:1d:ee:81:ea:70:be:
3e:02:ed:1e:bc:89:b2:a0:72:38:49:7a:b6:b5:1e:
9d:30:03:f8:5e:30:52:33:ff:3f:e7:b3:63:73:7f:
0d:60:9e:4a:d3:c3:da:bd:87:c7:5e:c7:82:ba:95:
f1:36:28:43:ef:67:bc:89:ba:7f:64:6b:58:34:73:
7b:03:2c:84:e1:95:46:a9:c8:3f:c2:40:94:18:94:
e5:e9:1f:f1:77:8a:42:c1:62:bb:ea:d6:59:92:9f:
01:37:c5:8b:d7:93:28:90:73:57:ef:b5:b7:90:e9:
13:af:9a:00:99:e6:b1:65:89:da:b5:9f:b2:cc:a1:
69:e4:75:74:17:ec:2f:a0:f4:46:9f:07:94:fa:bd:
2c:fa:e8:00:a8:1e:7d:e6:9b:fa:60:14:8f:e8:fc:
40:d9:d9:b8:8a:bd:4f:f8:4d:c3:9b:6a:ad:20:73:
cc:20:b2:74:22:77:98:ad:be:68:7a:18:51:f2:d0:
c4:e2:82:b9:68:cb:d7:91:06:d2:34:f1:fd:47:f2:
2e:41:6b:28:f0:0c:9c:18:43:78:a3:ae:a6:1a:f2:
84:c5:d5:3d:72:ac:4f:52:e5:8c:8f:41:0a:96:90:
a2:5c:50:fa:c0:3b:74:bc:e4:46:8a:68:36:58:b6:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C1:A1:EC:8F:39:D3:EC:66:73:3B:9C:DC:81:DB:6D:B5:BF:61:FC
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b7:4b:0a:f4:01:96:a1:58:b5:73:9f:a8:92:99:fc:ac:bb:
e7:48:10:f7:03:c6:03:2e:58:ac:e3:70:69:80:60:e8:8a:0b:
9d:65:6f:c4:b1:9c:fa:e7:c1:dd:32:dc:12:c5:4d:d2:0d:00:
b1:6e:36:aa:24:38:20:35:e5:3e:ae:d8:45:d4:72:b8:0c:96:
e0:38:01:9a:61:c1:63:75:bb:06:03:bc:6a:95:d8:5e:a3:9c:
b0:39:88:8d:27:f0:61:e9:94:b4:da:9a:f9:d1:b9:f3:22:3e:
d2:0e:14:d0:d0:ba:5f:02:82:c2:ba:ad:5e:20:29:fb:e1:da:
65:43:2e:b5:e1:7e:eb:8d:d1:44:58:61:f5:af:af:86:9d:50:
09:2c:89:3a:d5:ae:97:67:6a:1e:fd:e9:16:f3:bd:71:f9:a1:
4c:66:cb:0c:f9:f5:65:da:f5:68:f8:9c:36:a6:db:a6:2a:9f:
73:18:55:32:cc:96:a4:a5:c1:d9:8f:00:a0:cf:78:58:81:34:
22:30:3c:92:30:f4:97:cf:a1:1b:5a:6b:14:67:cc:77:86:c4:
bf:5c:d3:e9:b0:9c:e1:21:39:e9:82:39:88:f3:ce:10:3f:07:
23:2b:fb:b0:9e:6d:dd:98:15:8e:a6:a8:00:3c:dd:bd:1f:bc:
e8:dc:53:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:20 2026 by rpki-client