Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: 3XyhwMmF7adIBFYZIKOcC7xl+r4PbeS3Pqs8XrmxrYc=
Subject key identifier: A1:09:48:37:4C:17:00:1B:0A:99:03:CC:8B:B5:60:16:BD:99:CD:12
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019CACEBB1EE54338296575FB9CDBD0057CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: mrMV29oLYJWNj5+vo0vsEVI3Bkj4uK6E9u69Zza8kzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b1:ee:54:33:82:96:57:5f:b9:cd:bd:00:57:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=a10948374c17001b0a9903cc8bb56016bd99cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:f9:a3:23:53:02:1e:56:e3:d4:ca:93:f7:
6e:63:ff:29:c9:2d:5f:90:94:fc:7d:a3:08:42:92:
f3:fe:bc:47:39:39:9a:da:a3:37:c2:45:27:56:22:
b8:89:4d:ba:9d:8c:60:40:f2:00:a1:54:0c:13:40:
1a:27:45:3f:68:1f:02:08:c9:74:86:a6:f5:15:75:
16:e1:8f:5f:70:64:5f:d9:54:9f:fe:d4:39:3e:6a:
cb:d4:ef:b7:8d:51:1b:7c:21:23:4e:57:9f:80:ad:
ac:79:7b:ff:60:b8:68:df:fe:a5:94:e5:08:9c:0c:
a8:02:85:ca:8e:0a:f4:7c:4e:41:62:80:31:6e:ab:
02:4d:dd:cc:be:99:b9:d9:0d:8f:eb:90:98:7c:71:
b2:1c:18:8f:05:a6:1b:c4:a3:ee:af:c5:1a:5e:2f:
2b:5b:e5:ac:e3:a3:af:3d:3f:c7:65:cd:18:41:18:
c6:dd:e8:b0:7b:60:26:4b:8c:19:75:77:f4:b2:8c:
90:11:de:03:68:78:d5:17:f6:96:21:15:e7:7c:a3:
16:f5:8b:d6:1a:fa:30:db:43:fa:d8:fd:f4:0f:1f:
6e:79:f0:3d:13:bd:bb:09:90:03:b4:2e:48:28:b6:
ab:07:c9:ed:6c:b8:7b:98:95:0f:f3:e8:92:2c:10:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:09:48:37:4C:17:00:1B:0A:99:03:CC:8B:B5:60:16:BD:99:CD:12
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:92:fb:e1:00:0d:4c:ad:0e:43:84:d8:c0:ec:58:bb:9e:35:
b5:ef:35:59:ab:96:f1:7e:95:89:df:a7:5e:c9:af:80:dd:3d:
c7:ec:18:2a:46:f6:4e:a8:91:21:0f:4a:c6:86:2d:9d:7d:eb:
5e:58:89:7e:c4:b3:fb:b4:ba:c3:38:a3:7e:14:71:1e:cf:44:
de:a5:3a:cd:4a:2f:72:72:15:fc:ae:ab:24:e3:9e:f4:43:5f:
36:e8:8b:19:2f:45:cd:c5:22:97:39:e7:7d:75:14:17:02:7a:
a5:ac:e8:f1:a1:be:78:ed:e7:42:45:8c:bf:2e:d4:da:55:6e:
3e:ae:50:8a:cc:b2:23:2b:c9:6d:d1:a4:68:af:c1:9f:89:52:
b5:0e:90:b2:c1:ad:61:f9:34:2c:8c:b6:83:65:e9:b3:0a:f1:
2f:89:6e:d4:ba:5c:47:79:65:32:2a:58:0e:9d:a7:19:8b:be:
9f:9f:50:64:dc:26:ba:33:18:dd:a5:0d:dd:d8:1b:8f:2f:74:
da:1e:06:a8:68:64:52:14:8d:9b:17:e7:f6:d2:d8:07:6e:73:
69:e5:64:ae:6c:84:78:4f:9f:dd:67:96:20:90:0b:63:f8:4d:
81:a3:9b:12:35:e7:38:09:e8:81:d7:2b:33:88:32:bf:1b:42:
7a:ad:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:02 2026 by rpki-client