Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: mKAj6+pw/67Mk/qwa9DkRDHFOPWhg5Xk1PFMpBxT9Ac=
Subject key identifier: 48:41:31:2A:44:6A:94:F3:93:45:B3:51:F1:99:F3:4E:DE:7B:6C:60
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 019D29CDDF15C8562039A166C4E8C32E801C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 1443
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: Aegk7yPlb76SihU6nrnXk+Z8by32/JmhZB9B5034VIA=)
2: 6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa (hash: sAYJD+I7oIyAkdboyJMkSqHc+dfvfVcmdQnsD35+5Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:df:15:c8:56:20:39:a1:66:c4:e8:c3:2e:80:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=4841312a446a94f39345b351f199f34ede7b6c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:63:a0:02:db:3d:10:95:f2:8d:48:42:7a:
b1:9a:08:8c:46:38:c7:94:0d:91:b8:80:ac:44:62:
36:f1:f5:d8:56:89:c4:bb:4e:8b:25:cc:90:47:00:
ef:a4:68:1a:1e:31:c6:15:64:7a:8b:70:01:ff:1e:
38:35:60:7b:38:21:c6:36:fe:d0:87:5f:8b:a3:48:
0c:7d:0d:ec:9e:73:b8:dd:9f:e0:ef:36:5d:d0:82:
ee:96:b6:f7:e0:46:b3:93:28:db:f3:87:67:d0:99:
16:c1:3f:ed:d3:85:5d:b6:d9:3d:79:29:1e:32:f2:
83:0a:c6:25:6a:56:3c:4f:af:5f:3e:91:24:c1:d5:
82:7a:58:b2:53:ab:76:81:86:ac:92:4e:4a:6e:ea:
ab:bc:4e:2c:3a:82:5f:b6:91:93:29:08:ae:86:54:
83:be:2f:ae:1e:e5:be:f9:38:45:4a:1b:ec:9a:55:
8a:81:2b:79:33:c4:b8:5a:5a:70:d8:3f:08:95:93:
2c:7b:89:7c:33:d2:41:75:d8:90:98:7c:8a:b8:6d:
54:f2:a4:08:99:99:29:25:46:a8:d7:e3:6b:2f:ec:
45:05:3a:5d:69:30:d7:2b:30:56:2f:27:d6:9f:8f:
85:b7:48:0c:71:cb:28:41:d5:d9:3e:61:a0:fe:b6:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:31:2A:44:6A:94:F3:93:45:B3:51:F1:99:F3:4E:DE:7B:6C:60
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:67:44:b9:a5:d7:d1:f3:3b:b1:65:c4:a1:f5:cd:92:87:dd:
b1:49:f5:4d:ab:d2:bc:21:1f:b9:fd:f4:f3:55:24:71:7b:ff:
78:b2:5e:13:54:74:ec:e6:58:48:19:1c:d6:65:1b:8a:27:cf:
22:79:3a:da:7a:03:be:74:b2:de:5c:fb:52:2c:d3:74:62:e9:
fb:19:de:6c:3f:b1:17:82:ac:8b:94:42:42:f2:7d:5e:0c:97:
09:ea:ec:02:e1:98:d3:80:64:6d:ec:41:33:da:a5:74:da:01:
31:6e:b4:43:4b:5e:96:95:0f:54:2c:14:35:9b:d0:9b:c1:dd:
57:9b:88:79:37:bb:f3:b2:c0:f7:ce:8c:00:b1:63:87:fb:e1:
99:e2:d7:e4:1d:51:20:df:4c:19:e6:78:81:6a:d3:30:0a:f8:
9f:e3:70:68:6c:9e:a6:41:67:f0:60:d3:72:46:70:aa:73:aa:
10:a2:d2:06:75:7e:ab:5e:d0:40:d3:1c:9d:a1:2c:d8:89:db:
f0:bb:bd:55:e1:8c:aa:46:56:59:d2:1f:55:8a:52:49:c9:4f:
0e:49:47:26:0e:bb:be:fd:d0:dc:06:de:2b:e1:f8:1d:45:61:
94:5f:78:c7:3c:fd:1d:cc:4f:82:23:06:1f:c8:de:54:6c:b3:
09:3a:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:32 2026 by rpki-client