Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: CL299oSVPFHMmGnYpZMV/lm71Wh1aMeUJNuMd45HZnI=
Subject key identifier: A0:2B:D8:0C:F0:C2:31:F8:DF:74:7C:B0:51:BE:DF:03:04:2D:7B:3D
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019D29CDBAD334BC455EDE85495EDC206786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1762
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: 0ucWFZcFyD58o8zTdzJyfEAC5zk.roa (hash: lMcCuoQ+b6EBN3pFu3tzR6OUCs2zcvSlVr6M8lwbMuU=)
2: bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa (hash: it3vJQNoSAFPdXxbk0rvKR5rwALiR1gzaPHvmGFvmfg=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: dnFv+DXp70P1aWcAJOs18px/CuH+lOtl+sdBYSmm824=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ba:d3:34:bc:45:5e:de:85:49:5e:dc:20:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=a02bd80cf0c231f8df747cb051bedf03042d7b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:1e:83:7b:1c:d7:d4:a9:0d:a6:c4:82:ec:
9e:5b:85:c2:50:46:46:89:e7:e7:c4:88:88:a3:0c:
2c:a9:2c:d8:99:62:7c:cc:df:a4:50:87:b0:d6:d9:
73:ae:a1:00:77:21:85:86:d4:c1:e3:1c:12:13:db:
5a:39:0e:69:e9:3d:36:39:cc:23:be:f0:b2:0f:7b:
58:2c:7a:00:52:55:aa:e2:99:47:c4:01:80:34:9d:
e6:94:3c:70:fc:a4:4d:33:22:fb:a9:51:e9:c5:8e:
5e:e3:31:94:46:5b:7e:08:0b:94:94:eb:a0:c8:16:
98:45:cc:3b:bc:57:28:4a:7a:be:02:e4:0b:ab:8e:
04:3a:1c:27:db:71:eb:a1:54:1b:6d:5f:86:35:bd:
ef:bb:d3:31:1e:2f:da:9b:5f:9f:5c:9d:64:6f:02:
e3:3d:55:83:d9:d4:1a:ee:20:10:94:ea:4e:4e:d0:
df:2b:a0:b7:cf:40:ae:07:7c:a1:6f:b2:56:5e:2a:
a8:bb:08:03:1d:57:f6:19:12:b6:d8:2b:4b:17:c8:
a3:06:f4:b9:e3:44:a8:8a:f1:cd:07:b9:13:ce:27:
d4:7d:da:da:1b:73:ef:6a:ba:9d:c8:f7:90:a5:da:
2b:94:16:e4:3b:1f:1f:6f:53:5b:ff:f3:99:f3:a3:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:D8:0C:F0:C2:31:F8:DF:74:7C:B0:51:BE:DF:03:04:2D:7B:3D
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:52:40:e1:62:e5:3e:4b:bf:53:78:31:d8:0d:6d:25:f8:de:
13:79:04:fd:04:94:8f:6e:2e:f9:02:0c:4a:1c:af:4b:b1:b0:
49:49:b8:39:8c:9c:05:a5:b9:b1:85:25:10:ee:02:38:ae:ba:
bc:24:1a:3d:89:37:5f:97:a4:93:f8:f0:8e:2c:e6:20:e1:ee:
65:46:3e:4e:d4:e7:fe:7a:00:48:9e:a9:1a:a6:a3:a5:7e:79:
86:40:ea:36:98:40:d5:c0:28:72:89:f2:65:25:92:f8:f5:d9:
a6:25:d9:0d:6a:7b:7a:fb:32:e6:d5:9e:8a:6f:c1:1a:8d:8d:
7e:15:e7:a4:5d:e4:c9:fd:12:63:86:a2:9d:02:c7:7c:25:c9:
50:dc:02:00:1f:e2:bd:aa:d7:91:b7:dc:f5:30:0e:e3:79:53:
55:f7:c0:65:0c:83:a1:a0:ca:97:fd:b0:80:07:8f:fa:70:1b:
7c:47:76:e6:7b:e6:87:2a:6a:9c:3b:02:01:20:a9:06:e3:7b:
18:ea:df:8b:b0:86:b3:28:c8:36:24:47:15:3c:ea:8c:94:ce:
d4:f6:e1:cc:83:09:26:45:0e:59:c9:61:31:b9:ef:59:76:27:
cb:e6:51:e1:25:51:f7:a6:99:14:0a:ed:2a:13:35:c6:55:d5:
04:33:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:47 2026 by rpki-client