Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: Ztd2cXpSR02L2EU5nKm157xQeqbbhFB/YWLE3azEcSo=
Subject key identifier: 94:99:3A:13:5F:41:4A:1F:5A:E5:D2:20:C1:55:68:58:DD:07:FB:BE
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019D2816A17A6F007DAC7E68856DF0B58B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0AE8
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: 8b65jW1KzC5bCPFGSnSPOJ7fG/4bjXqhwnfNr5zs4dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a1:7a:6f:00:7d:ac:7e:68:85:6d:f0:b5:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=94993a135f414a1f5ae5d220c1556858dd07fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:66:10:67:f9:6c:51:35:31:0f:42:7e:de:
13:20:e7:0e:9a:3e:42:b2:41:5e:95:9f:9b:69:7c:
e0:18:80:63:40:49:f0:18:fc:57:76:17:1f:9b:db:
7e:56:eb:ab:04:76:c5:61:cd:26:b2:ac:85:b1:97:
e3:c0:82:d4:3e:8e:77:e6:ea:f8:2b:48:5d:0a:fb:
39:ff:a7:9e:db:d0:00:c5:b1:6e:17:5a:c5:82:3f:
4c:cd:74:fb:95:c3:db:97:9f:a3:8a:3b:c4:ad:ad:
91:43:35:9f:61:1c:c5:06:bb:bf:38:5f:76:7c:4c:
69:7e:b6:4a:0d:e7:95:78:cc:c6:7b:fe:c7:fe:08:
79:5d:8a:38:45:3a:89:49:75:ca:ec:f0:5d:9a:73:
a7:82:c4:26:93:f0:d3:f6:d6:4a:d3:57:86:44:ab:
2b:85:92:2f:dc:e4:d4:50:9f:11:56:82:fb:68:5b:
a7:36:db:96:47:b9:bb:2c:54:b0:5a:fb:35:7a:8f:
de:9f:0b:b5:ed:d8:23:a0:5e:58:63:16:c8:59:16:
4b:6c:e7:13:1e:db:58:e4:95:8f:b8:d6:21:d8:e5:
a2:47:05:b2:a0:a4:0f:8e:a3:33:f2:8c:fa:1a:5a:
a6:d2:3b:95:b7:1b:bf:da:17:35:99:18:7f:bf:f8:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:3A:13:5F:41:4A:1F:5A:E5:D2:20:C1:55:68:58:DD:07:FB:BE
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9e:5c:5b:88:1a:a2:03:3f:cf:fd:86:b7:06:2b:08:9e:24:
f7:80:2e:8e:70:57:b7:83:44:42:37:55:48:14:ad:82:f7:ac:
93:db:df:a0:85:40:ec:cc:05:87:38:ef:f1:8b:0a:42:28:c2:
0c:7a:59:ae:2a:5e:e0:2a:c6:69:a0:ec:8d:7c:76:e9:90:31:
79:33:39:a0:03:fa:ae:a7:f4:9e:f6:7b:80:01:49:dc:aa:93:
ae:8b:ec:bd:f4:27:e9:46:01:e1:b2:00:a4:a6:dd:3b:1d:69:
63:03:49:0d:dd:8f:38:1b:80:90:79:9f:aa:5b:75:84:f7:45:
d8:50:df:b5:ad:3f:40:92:e3:b9:4b:36:4b:3c:89:c7:f7:f8:
ba:47:b7:83:e6:b0:d3:14:4f:54:cc:1e:16:6e:44:7f:2a:c4:
8b:3d:cd:00:d8:a2:f2:1a:a0:80:78:00:83:ad:ea:dc:4b:08:
22:3f:3c:16:22:2f:76:77:f1:a5:04:ba:33:95:7c:be:1e:b4:
e6:0f:df:c7:38:b6:04:ea:0f:54:00:02:fa:8f:e8:cb:75:33:
40:ff:ba:2b:2a:d9:f3:4e:84:41:46:78:89:4b:40:e8:27:87:
20:17:2a:03:7e:07:30:53:5c:04:c2:e6:68:3d:3b:e2:c9:28:
96:1f:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:11 2026 by rpki-client