Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier: i2bFNkzwox833mKFQQWsVGyGfJ9LCdSj483CSJTMvuw=
Subject key identifier: 4E:54:BB:5B:62:E0:49:9C:E2:65:22:52:00:18:06:A3:06:5F:4B:3E
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial: 019D29CE366890D9FC68F7C065CE1C59AE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number: 0B01
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: j36U4gZp+lg1CWCoTOTPWjB1eD0PxIB+79i8OtoO/Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:36:68:90:d9:fc:68:f7:c0:65:ce:1c:59:ae:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=4e54bb5b62e0499ce2652252001806a3065f4b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:64:d7:30:83:7f:ae:69:92:21:aa:72:6e:
37:19:37:d1:c2:de:1d:3d:77:17:7e:79:32:6f:36:
00:4b:4b:98:40:57:9e:ff:8f:88:71:4c:b3:b9:81:
5a:b7:21:9c:d3:9d:6f:e9:9d:d4:43:58:a6:eb:fb:
5a:bf:95:ff:b3:83:fa:60:a6:0e:dd:92:e5:df:4e:
90:6d:d8:bb:60:d0:4a:57:6b:41:b8:4a:c1:fa:7e:
a4:03:85:ff:31:91:cb:22:ec:79:ec:da:99:21:2f:
e8:a1:ca:bd:ee:07:b8:64:fd:ce:21:f7:bd:b8:3f:
ee:37:29:d9:10:68:b9:d8:c0:b9:a1:8c:51:73:58:
a9:21:cc:6e:37:b3:59:bc:d6:5e:98:b2:b8:3c:17:
52:5f:9b:07:d1:1b:96:e9:25:ad:54:1e:11:72:5f:
b9:69:5d:8e:94:59:1e:b8:f3:4a:12:20:56:8a:42:
b7:0a:a0:21:0f:f6:65:0b:7d:1b:a5:2f:4f:1b:6d:
6b:09:66:b8:14:3a:93:c1:dc:66:75:69:61:19:0c:
34:ef:9c:5b:40:84:d2:26:59:25:d1:fd:8b:44:d1:
d9:52:8b:9c:4e:fa:34:af:7b:b3:98:ca:e6:1d:08:
ec:14:b1:a4:f5:c0:7e:0e:95:7f:49:41:b2:49:5c:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:BB:5B:62:E0:49:9C:E2:65:22:52:00:18:06:A3:06:5F:4B:3E
X509v3 Authority Key Identifier:
keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:cc:16:fd:69:b2:8b:3c:54:1d:db:e7:c9:37:e1:98:c3:4d:
37:e9:37:46:81:43:a8:4e:5f:da:53:2e:6f:ee:36:73:07:6f:
48:25:20:88:c5:1e:2f:c7:4c:5b:65:02:2d:f5:c7:94:4c:75:
03:81:3b:24:85:7b:9d:73:e1:f8:ae:c2:d0:da:78:34:54:8b:
c8:87:75:17:20:ff:d3:ac:bf:73:cd:bc:f9:1a:43:97:73:b5:
ae:62:d0:f0:57:41:c0:b1:d2:8b:07:62:b9:95:d3:e6:da:c5:
73:11:f9:d2:78:0e:67:73:50:96:41:a7:5e:0a:50:79:5c:5c:
30:35:3a:0b:c0:7e:91:39:e5:19:94:cf:21:4d:6d:e3:bb:ff:
2d:d4:0b:f0:21:1c:21:a7:22:7e:9e:f1:22:0a:3e:74:ea:09:
7f:8b:11:52:07:32:e5:4c:73:d1:4a:bd:dd:45:99:c7:ed:ec:
2e:9f:13:ce:a7:4c:cf:73:d6:ff:9c:64:74:7d:b3:00:67:98:
2d:3c:53:e3:5f:72:5e:07:96:34:16:63:25:e8:77:54:03:3a:
36:7a:b1:3b:c5:29:9c:07:74:09:b5:64:0f:5e:a9:ed:8f:82:
cb:32:f8:20:3a:7d:69:19:e8:93:69:21:51:c5:da:7d:d6:93:
37:54:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:03 2026 by rpki-client