Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: wpFXeLUO38qTqqM9qq0Rl31ok1h6d253rfz00FdEz6g=
Subject key identifier: 92:9B:56:D4:85:2C:D2:AD:4E:D6:E7:45:A6:52:4D:84:A5:40:9B:67
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 019D284D411AFFFD203A03B6E86D580DEBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0F40
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: Dj9DJf/oalIOQvI3FIPsz8Hy2aQcQgim7s156DmDfyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:41:1a:ff:fd:20:3a:03:b6:e8:6d:58:0d:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=929b56d4852cd2ad4ed6e745a6524d84a5409b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:7b:ef:b2:c3:11:6d:e5:7e:e6:13:48:fb:
0a:6a:13:1f:1c:26:35:8e:ca:fa:f9:33:93:e9:36:
7d:89:e8:1e:45:43:44:4f:5e:d0:43:c7:d3:f6:fc:
36:a9:f1:40:5b:47:46:4c:31:3b:51:d5:64:54:28:
c7:7e:d0:cc:58:21:38:1f:9d:22:f1:2e:f2:77:e4:
21:1f:a8:c5:50:f4:9f:28:db:ad:f6:69:31:78:a8:
dc:57:b0:f0:1a:f6:c6:ee:8a:3b:63:66:dd:6d:5b:
dc:dc:f2:0f:51:c1:4b:37:cb:84:15:b4:9d:8d:4f:
e2:d8:a3:a8:84:ab:ae:71:41:ab:b2:29:48:9c:e4:
e4:ed:77:40:fa:55:02:d0:c9:98:2c:17:19:57:ff:
0a:83:dc:cd:95:a5:22:83:39:26:50:87:7c:8d:c3:
13:37:87:aa:99:7f:97:57:78:dd:f5:69:68:b8:9f:
02:7c:c0:09:32:b1:08:9e:d1:45:ba:fe:98:7b:25:
9c:2e:61:b5:da:08:b3:82:c2:32:6d:77:2f:f1:b8:
a0:4a:49:a1:9a:1c:c7:7c:28:88:e6:39:83:fb:99:
c6:02:28:96:5e:5e:a8:23:28:a6:3a:25:a2:dd:98:
04:36:e9:c1:22:40:9d:51:77:ca:07:95:a0:88:3b:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:56:D4:85:2C:D2:AD:4E:D6:E7:45:A6:52:4D:84:A5:40:9B:67
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:a2:7c:26:b9:11:9d:28:9d:79:ec:b4:e7:20:36:ba:8d:
d6:8b:49:7f:28:91:7a:36:fa:ca:09:9c:e0:9c:41:d6:e1:cc:
c8:10:3d:db:fe:a2:3b:7d:c7:e2:b3:a8:c3:0a:00:91:43:cc:
97:c7:88:06:1e:44:96:0f:81:69:ca:0a:cb:fc:76:f4:38:b3:
ca:a1:5f:12:6f:19:d8:d5:29:a9:ad:55:66:35:30:b7:93:3f:
8f:78:19:5d:7f:1a:89:0d:d9:18:9d:31:31:32:68:c2:08:0c:
49:ff:ba:79:88:b7:ec:c9:ba:2b:ad:62:3b:0c:1f:98:b2:db:
28:7f:66:d6:3c:1b:98:66:73:60:9c:41:df:55:a9:89:3e:69:
45:25:89:47:47:3a:4f:8c:d0:b8:5d:ff:f2:e3:3b:ea:cd:b9:
1f:9d:6c:e5:f9:0e:e5:17:b1:a5:16:0c:e6:6e:4b:ac:4a:58:
08:f9:15:28:b7:5d:6c:f7:6a:ea:61:74:c5:c0:f3:db:67:eb:
69:7a:1e:00:93:67:9c:ea:6b:27:c2:63:20:3e:fe:ab:69:4d:
9e:53:dd:76:02:47:d5:82:0e:68:17:c5:c9:f7:7a:08:88:48:
98:c7:a6:58:bd:c4:28:a3:60:e8:9e:22:20:bc:87:1c:00:28:
db:ca:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:37 2026 by rpki-client