Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: n4+07TID6ACX5sXridku2CnSd+EdJAtoj176aEpjGFU=
Subject key identifier: 36:13:FD:3B:BB:7A:7A:A8:9F:42:42:A1:CC:59:25:97:17:24:F7:07
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019D2704621AE644ACEB1F49427428B1A0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1899
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: NM07OftKQkCH2joVcvMTn-HHTmY.roa (hash: rU/LdGSeAxe5BfVN3XEqDaj1sPRpRHFtD8l5ShzGTNQ=)
2: kLGeIFwIepUgbnOKoqHRUYefBPQ.roa (hash: F4tTQgdXduDuBtHDnLeKsOpcxeDgSOzzu6aJ7AclprY=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: h1/yVvxIvnH+AJxLJb98mfKJJwW6PWpkNHsxl4cxcSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:62:1a:e6:44:ac:eb:1f:49:42:74:28:b1:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=3613fd3bbb7a7aa89f4242a1cc5925971724f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:b8:e9:8b:28:63:b0:37:15:b3:fb:28:d4:
87:f2:99:9b:d6:21:d7:90:93:38:4b:2a:ec:75:93:
3b:2a:29:61:67:d9:74:72:94:f2:f0:f5:5e:56:ec:
3e:84:77:15:9f:b1:52:7c:49:c5:32:59:b8:02:e4:
36:cc:29:c8:3d:f4:5c:bc:99:ff:47:d0:53:98:b9:
3e:c7:f6:25:08:15:38:dd:b4:45:f7:ea:8e:24:b8:
b5:bc:85:ab:89:e9:63:c1:10:41:a6:c8:eb:c8:6c:
49:b9:12:76:ce:af:bd:41:54:f5:fa:f1:04:4b:e1:
f4:55:e3:68:5f:f1:a8:7e:40:46:9b:85:26:e0:3c:
37:3b:75:01:1a:0b:aa:73:e3:05:75:eb:70:45:e0:
06:9c:72:46:b6:b7:41:ac:43:32:98:e4:bc:5e:f1:
59:b0:6a:a6:f4:f7:82:ed:15:8e:15:d1:e9:6c:1b:
3c:b7:f2:6f:ef:26:50:9f:41:80:ef:42:8b:25:06:
bc:82:f6:5f:4b:62:1e:cc:a3:75:35:dd:42:1d:fb:
18:01:c4:40:0c:18:9e:5e:0c:9a:42:6f:18:f4:20:
75:d0:a2:25:6c:77:b2:de:9d:48:e9:63:cf:e8:f3:
c5:e0:68:82:69:b2:95:b2:20:bc:e8:ec:24:7a:ce:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:13:FD:3B:BB:7A:7A:A8:9F:42:42:A1:CC:59:25:97:17:24:F7:07
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:4e:96:26:51:59:df:da:46:b6:9a:33:49:3d:f0:eb:18:
93:7b:0a:c5:92:08:c8:79:99:6d:a3:08:ba:2b:10:6b:9e:9e:
9d:e0:97:e3:8b:e1:23:83:2a:97:02:47:f2:ca:9d:48:1b:b7:
66:f5:51:1f:97:c3:e5:67:77:f1:04:44:62:87:4e:1f:f1:1c:
66:89:95:27:8a:eb:41:c3:56:17:91:07:e6:af:87:8d:c9:c0:
6e:47:d9:40:78:bf:33:4a:07:8b:71:0c:2e:e9:58:51:76:e4:
44:cd:b8:1f:de:f4:c3:9f:4e:c3:23:0c:d2:c2:ac:24:b2:b4:
3a:8c:16:4d:2a:a8:44:0e:e1:d7:71:ba:74:b4:61:e0:00:18:
ad:53:b2:26:06:92:ec:4d:6c:c9:2d:ce:7a:c1:84:8b:e5:da:
5d:3e:36:2b:c1:2b:46:e2:f2:68:a4:b4:9b:25:21:40:a1:0b:
e6:22:8f:27:a5:c9:a1:b8:c5:34:48:77:a0:48:ea:d0:f5:94:
8c:fd:2a:b7:76:ca:f3:8b:be:c0:f9:c5:22:cb:b8:bc:e2:fa:
27:86:23:f8:a0:5c:e3:c9:e3:f1:69:7d:e9:1b:40:bd:71:cf:
88:86:a7:14:f4:87:a3:a7:44:33:cb:86:bd:da:6e:ba:f7:9f:
9d:c0:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:11 2026 by rpki-client