Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: rDgVaY/2NibTrHillFcL+ykpXWE3iKqHyU0xCUSyQms=
Subject key identifier: 32:71:01:04:ED:03:07:38:C6:7B:42:87:CE:C1:65:50:EB:7F:6C:53
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 019D265F68D2D9B109F2A42570787203FF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0C2F
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: msj-QCorJnXKr4kvj6gncmTacwY.roa (hash: 9SrsATf3LBoprWf5FN/vM5cjeV8i1QEYJtsGy50JnIY=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: adpYTALgf1A3eg45If11aMN7MjNOillNgSKbRNC1FEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:68:d2:d9:b1:09:f2:a4:25:70:78:72:03:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=32710104ed030738c67b4287cec16550eb7f6c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:83:64:8d:bf:a4:bc:6b:25:cd:34:1a:d3:
40:87:e3:51:93:5f:78:ea:ec:56:b2:3c:73:e7:32:
1c:5a:a8:22:7d:81:62:91:18:f0:b8:fe:6f:02:7e:
98:96:03:79:1f:5c:92:da:99:e0:e7:70:82:4e:2d:
e5:d5:e6:7d:02:df:c3:58:a6:7f:12:52:73:a2:65:
57:30:e7:4a:9c:24:ff:9f:23:a5:b9:d9:40:8d:7a:
0c:83:2d:02:43:0d:ef:fd:c0:9b:59:8f:87:54:8e:
e2:1d:64:f1:1c:13:c1:9c:72:b4:b1:83:ba:c1:45:
26:de:aa:a4:8e:69:b1:d1:ea:48:24:eb:d8:8d:8c:
da:4b:73:a5:10:40:1c:81:79:2c:2d:01:64:ef:32:
68:53:e9:99:08:37:b5:ca:ca:c3:20:b7:08:9a:2a:
01:75:1f:70:f8:99:3e:eb:ad:9e:29:aa:1a:49:f7:
34:90:dc:87:32:c6:6d:eb:4f:13:04:d0:ba:df:e2:
6f:ba:7e:dd:b7:18:95:c8:8e:28:a9:38:71:d3:1f:
78:1f:2d:e4:73:8f:7b:34:32:77:4b:60:59:2c:2f:
66:5a:64:34:06:54:3c:5f:93:9d:aa:a0:3b:e1:fb:
2f:2e:c9:32:42:84:7d:5a:12:7a:f4:bb:7a:03:ff:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:01:04:ED:03:07:38:C6:7B:42:87:CE:C1:65:50:EB:7F:6C:53
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9e:fe:86:b5:ee:d6:28:61:d0:d7:9c:42:e7:5d:1c:67:25:
ac:82:eb:74:f2:9c:eb:ed:73:35:25:2e:9d:98:81:f5:56:72:
0e:9e:76:50:ea:8f:c4:bc:51:3e:66:bf:8a:63:ae:e7:2b:39:
68:46:a2:64:76:39:8d:7b:e3:aa:f9:a6:0a:67:ea:84:99:76:
a8:3f:62:fe:55:e0:53:af:c9:3f:c9:85:16:88:fc:95:d9:b3:
f5:7c:04:05:ea:35:08:fe:36:0d:0b:73:e2:3f:29:08:ff:6b:
bc:db:ec:54:9a:a1:03:61:0d:d9:89:bf:6e:92:4c:eb:1d:89:
74:45:02:ff:06:1e:02:5d:4a:0c:8c:ce:4f:f7:d7:a0:de:9d:
88:0a:fa:1d:28:06:6e:e9:87:0e:a0:22:bb:6b:8d:07:41:91:
8d:f2:e7:13:75:2b:21:a9:11:0e:de:ec:4c:11:db:4d:46:68:
e0:99:85:98:9b:bc:d3:b4:16:00:4f:ca:e4:a2:04:14:1a:da:
6e:b5:47:b4:ee:59:67:32:67:48:dc:0b:e0:ac:ce:6d:09:d3:
45:42:01:5c:4d:a8:f7:b3:19:d1:4e:6c:7a:d2:b7:5b:91:2b:
92:21:01:bf:0f:f2:1f:e3:9b:e1:1a:a3:71:be:74:3a:1b:2d:
23:71:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:48 2026 by rpki-client