Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: ++liEM/fMtnA9EPD0MT/ntvlHkz3H7JFun4cIK8i1Ec=
Subject key identifier: C5:10:C4:CA:EE:3A:3E:EB:88:14:18:02:3A:AA:51:A9:E1:FA:92:1B
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 019D262893613EF5F338D76FE64DECD33808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 1855
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: sxw94R-8dpDBFwr_QuU2x8m1Z70.roa (hash: nGqPu9eVja8tiL5hL0aJIPFGTLc3iJ+u/5CYg63lyAY=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: fWw9v/yi37UpwRkyLNKZKyOfX+2IKdc37MrruUXGinU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:93:61:3e:f5:f3:38:d7:6f:e6:4d:ec:d3:38:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=c510c4caee3a3eeb881418023aaa51a9e1fa921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:98:cf:c0:c3:3b:2e:c1:36:c2:a3:20:85:
bd:8d:1b:ef:55:bb:dc:d3:a4:81:6b:65:99:64:0f:
99:95:c6:a7:cc:35:1c:1e:3f:78:e3:8f:2a:5e:0a:
b5:9d:8a:26:ae:c2:c3:6b:aa:e8:98:e5:36:4b:e5:
51:ff:d1:f8:3e:33:87:10:40:ff:1e:b4:80:58:33:
4e:db:98:8a:a8:9f:4d:cb:5f:96:3c:db:80:3f:0f:
b1:4f:35:bc:4b:a1:9f:6c:79:aa:49:82:e5:ab:c2:
7d:ea:29:18:9e:63:b3:35:41:b6:ff:0b:a7:47:25:
3a:6c:c4:c8:c5:2b:05:26:66:d6:b9:a3:1e:23:5b:
0b:62:50:94:96:8e:a2:95:bf:ea:76:e9:47:51:2e:
0d:83:c0:b9:e3:ba:93:39:c0:9d:69:25:05:e6:60:
b5:20:f0:7f:13:0d:f2:47:7c:c0:fd:1b:51:8f:6e:
c1:2e:82:a8:ac:0a:d9:ce:a4:5d:a7:d9:6f:2a:42:
89:27:10:fd:c2:13:6e:17:de:16:4d:8a:9a:f3:f6:
0c:8a:20:2f:26:60:b7:de:fe:87:6f:e1:c6:b7:7e:
63:58:a0:6d:ff:50:9e:19:98:92:d3:96:88:02:43:
32:61:88:e1:a0:cb:32:92:e4:da:54:d1:7f:4f:06:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:10:C4:CA:EE:3A:3E:EB:88:14:18:02:3A:AA:51:A9:E1:FA:92:1B
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:74:23:a3:23:c4:8f:57:a8:84:d2:12:95:a7:21:3f:0a:ec:
17:5e:60:1f:32:80:56:da:2d:e6:57:4c:15:13:53:e7:96:d7:
db:34:38:f1:90:70:67:b1:3d:17:67:23:11:3a:ee:a4:0b:56:
3f:6d:6c:5c:aa:38:76:ec:e7:7a:4d:c1:39:4a:e0:19:8c:62:
ad:67:75:57:1c:82:b6:87:ed:e3:da:b5:09:a5:a0:6d:ee:80:
91:bb:b1:dc:26:4c:79:d0:78:37:a6:07:b5:fc:0c:57:ce:9c:
12:77:d1:d0:3b:e5:4f:0b:ca:57:f3:b3:ce:e5:5d:43:0f:10:
ae:20:59:43:58:cd:cf:4a:8f:f6:c6:0f:46:4a:ee:49:5d:0a:
27:2a:50:0e:b8:e7:37:93:dc:8c:6f:99:11:13:84:68:6c:c7:
5c:19:3c:a7:e8:eb:d4:56:23:48:5c:6f:7d:99:dc:0b:2a:1a:
be:7b:10:ed:fd:8a:59:3e:3a:94:9c:65:4c:50:6b:95:cd:6e:
fe:cc:5e:02:93:05:20:02:4e:7b:89:76:be:ac:3b:dd:40:06:
30:a8:d4:59:8c:30:e2:2b:7b:90:bb:05:c1:a1:7c:d7:cd:e8:
db:e6:ff:64:e6:2c:19:45:4a:e3:34:2a:18:e0:c9:d3:db:95:
18:6c:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:54 2026 by rpki-client