Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File: uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier: w5iMH2Nt5/N/DWBTJeroejwZbc80Neg9li/nFvHwLmE=
Subject key identifier: E7:AE:75:F2:32:56:84:BE:65:D6:7C:99:2A:ED:AB:7F:26:3C:58:45
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer: /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial: 019D2772BDC972CC8E4A7DC61E8CE6E6F252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number: 0995
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: gH0BmhGdI-4jnerabl4mUmUrBX4.roa (hash: vNs9/H6iuDqV1b/jbRlgh+sdKrOOTZh6C5aRY+PDcq0=)
2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: qUZESINr60FAHaLkulN+QpoXMYxGs4N+O8i1qENNj1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bd:c9:72:cc:8e:4a:7d:c6:1e:8c:e6:e6:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=e7ae75f2325684be65d67c992aedab7f263c5845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:af:3e:01:26:e1:24:70:5d:7d:9d:99:7d:
59:28:6d:b6:36:90:69:8e:57:40:71:1d:87:bc:f1:
a8:a7:b2:08:f2:d3:22:4a:96:cd:26:1d:81:92:aa:
d6:2d:38:82:53:95:ac:e1:a9:b4:28:b3:84:f0:e9:
f7:a7:a8:75:65:4a:d6:bf:9f:7f:52:de:6e:5e:cb:
23:93:3b:6b:3b:1d:e6:b2:46:f4:bc:4f:da:67:da:
b4:53:d2:dd:f1:ad:7e:3c:f8:f0:28:0c:b4:7a:2d:
9a:55:62:77:9b:35:96:37:0e:34:dc:68:f5:d0:cc:
93:f8:32:1b:14:34:9c:ed:39:8f:61:26:85:c9:4b:
36:9d:a0:98:48:58:91:cc:6f:fb:40:88:95:e3:76:
64:8a:49:fc:0d:02:1b:3e:5b:19:13:d2:36:27:1e:
f5:88:f7:00:d9:a9:56:4e:e8:cc:25:a2:c0:eb:18:
2e:2a:4f:49:b7:f7:54:cd:a3:01:2e:48:57:a8:96:
8c:a0:fc:a1:49:cd:9e:3e:c3:fd:e7:bc:46:53:21:
db:1f:07:8f:67:9d:7a:56:24:11:0e:d5:d6:7c:e0:
a5:a5:87:ee:f6:4f:d2:07:d5:f9:82:8f:06:1e:1a:
97:bf:86:13:ee:7a:d0:6c:40:5e:34:31:4f:76:8d:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:75:F2:32:56:84:BE:65:D6:7C:99:2A:ED:AB:7F:26:3C:58:45
X509v3 Authority Key Identifier:
keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8c:03:49:2d:74:5b:4c:f5:92:cf:f9:e2:9f:4b:61:31:c4:
49:0c:dc:19:4c:3e:a7:1d:0c:ef:b1:2e:52:4a:a5:69:9c:22:
72:6c:dc:12:5f:fc:e5:6c:cf:da:2c:a2:4e:c3:b3:aa:c6:ec:
94:64:21:ad:d9:15:20:c7:e3:23:6b:3c:de:ac:3a:7b:4e:05:
61:af:78:9d:0e:e7:7f:3a:82:45:4f:43:6e:c9:af:cb:e7:2d:
a3:60:9f:90:64:31:02:5e:d9:36:ec:7d:88:08:85:3a:d7:7d:
c4:68:84:b1:27:53:c3:f0:aa:3e:f7:73:57:cd:d8:e3:9b:70:
46:86:97:54:8f:b5:e4:8d:19:88:8f:db:26:ab:cc:a0:9a:18:
4f:53:50:04:a3:c1:cf:3a:b7:7d:05:49:34:0f:d6:24:82:7a:
2b:d9:2f:b1:a8:8d:fa:96:a3:28:2c:56:7e:4a:23:f3:74:b2:
d5:8f:fd:4d:86:8c:6d:cc:72:68:3d:b0:6f:92:e8:3a:16:ca:
1f:84:76:c2:f2:09:67:96:41:09:20:37:20:06:42:67:a9:45:
1d:33:c9:80:bb:db:db:7e:83:3e:1e:71:dd:1a:7b:34:0d:ac:
3d:e6:81:33:ad:45:8b:7a:23:75:01:63:7c:03:62:13:88:b6:
29:01:02:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:40 2026 by rpki-client