Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: 4ZS9JV0rf00NoEM68vxFhcO/T07NS3IQOA8FDH/PX+c=
Subject key identifier: 81:55:0C:99:B4:E2:A8:B9:94:4C:19:91:B7:CD:96:E8:F0:EA:53:2A
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019D2583197A4692533CA0F0A5311DB08287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 11A8
Signing time: Wed 25 Mar 2026 15:00:41 +0000
Manifest this update: Wed 25 Mar 2026 15:00:41 +0000
Manifest next update: Thu 26 Mar 2026 15:00:41 +0000
Files and hashes: 1: 7_6PqMOGWDvG_0a0CBpZCjoPH3M.roa (hash: ELHzePk+eTFwUV0lzyfOvVlVrH0Oe68AnbgtcOo/mUI=)
2: AwKBOhlF9uaXHOgDwaWxiRTycC8.roa (hash: ulOM++8A5dnNmN9Kuzc/O4/HWsO5q48Fbn6dGRtakzw=)
3: eSb5SaQiTFGxJv1r1Rg9Zwy6k48.roa (hash: 3gfCITmerObL4KZJwGEUq8/MM5Wu7GSAZmrfKVP18TY=)
4: pSuYpl6WxbthlcwSwOwfJ2eEOEM.roa (hash: 0ZM4/++BdSQLGaayny50tbB3TCayRFezzAq6CjxEPBs=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: dfzO83178bpiYNLG+vW0KQV/mlmKS0x28c376cT5jEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:19:7a:46:92:53:3c:a0:f0:a5:31:1d:b0:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Mar 25 15:00:41 2026 GMT
Not After : Mar 26 15:00:41 2026 GMT
Subject: CN=81550c99b4e2a8b9944c1991b7cd96e8f0ea532a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:28:f9:9e:5d:1b:aa:fb:50:22:b8:bf:e0:
fc:de:a6:b3:c2:09:b3:94:90:db:e3:97:6f:20:04:
80:02:cd:c4:9b:d3:7c:b5:55:26:35:d9:0f:e4:a7:
71:f9:23:c8:b0:f9:e7:b8:1d:e4:3f:65:5b:52:15:
e5:25:7d:da:49:ee:46:14:a7:eb:bf:e3:09:60:c6:
a3:d9:e2:30:0e:a7:86:25:7e:fd:83:fa:84:1b:16:
75:29:f0:e2:92:c2:44:ab:9d:fa:bf:e0:44:75:f0:
9c:90:70:b9:c7:78:0a:b1:a2:80:99:db:9d:f0:95:
fb:6f:b7:d9:d7:f4:fa:6f:de:21:84:b2:cb:5c:62:
3e:80:43:49:81:df:be:5a:a7:2e:2d:8a:e5:c1:ac:
a6:12:db:eb:a8:7d:d0:bd:56:83:f0:af:b2:5d:34:
e4:89:3a:e1:2b:e3:9d:1f:37:d0:0b:1f:cf:97:f0:
b3:a6:b7:9b:17:a5:66:5a:bd:3b:5a:05:94:63:31:
62:54:a8:ea:6b:52:f8:0a:62:ff:e4:43:8f:4f:9b:
ce:df:34:c8:6b:45:29:cc:19:9f:7b:a7:af:5b:d2:
98:6a:0c:2e:dc:53:a5:47:73:c1:af:e0:d1:a5:6b:
b1:48:38:a4:48:19:15:7a:06:b2:38:f2:d3:05:22:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:0C:99:B4:E2:A8:B9:94:4C:19:91:B7:CD:96:E8:F0:EA:53:2A
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:14:8e:55:cd:4c:79:a6:44:cd:98:d1:09:69:8c:75:a0:6f:
24:2d:7a:0d:dd:e9:f7:ea:76:78:1c:7c:ad:0c:3a:3e:83:6f:
9f:c8:f3:26:2a:d0:0c:09:2d:c0:52:a7:6e:67:0b:85:28:60:
f9:45:0d:7e:a2:7f:b6:69:75:e5:ff:f5:2a:bf:1d:ba:e7:d9:
20:93:56:b9:77:f8:01:5d:73:c3:ed:54:42:74:ab:2c:35:01:
b0:f2:ac:10:5d:d0:11:fd:9b:c1:02:c2:5c:25:47:d0:8e:f1:
99:d2:d1:5d:00:25:4b:6f:4b:b3:24:9a:37:9b:dd:10:6c:10:
f2:2c:4d:ea:df:db:f5:25:1e:6d:48:4c:9f:57:de:29:36:bf:
29:9d:95:23:c3:6f:01:35:98:69:54:f0:e7:14:f7:40:e0:a8:
5b:45:73:d2:f5:58:9a:dd:41:4d:45:7d:0f:53:3b:27:05:1e:
b5:fc:31:5a:ab:2a:d4:4a:27:1c:40:1c:c0:33:9b:9e:d0:40:
87:f9:be:2e:b0:ea:ab:96:1e:16:32:15:25:4f:6e:4a:8e:5f:
78:a5:6e:9d:37:7b:69:ea:ed:f7:4c:6d:16:17:42:ac:b5:bf:
8c:f3:49:9e:62:5c:f0:91:c0:35:5c:37:c8:2d:fa:1d:7e:62:
c4:5e:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:27 2026 by rpki-client