Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: 2W8LDXNAwXH/AGDZAnB+awBDBYShtip956oHJ0Ey8u4=
Subject key identifier: E1:AE:A3:3C:AC:AE:33:82:EF:CA:7E:5F:5D:01:CC:D2:53:20:F0:13
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019CABD97ADFC2DD19FB2467A0DD462657C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 069D
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: Y62NiF4BGlWRQiLBXfLblzCnW+ehcee67q6m/EANdPc=)
2: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7a:df:c2:dd:19:fb:24:67:a0:dd:46:26:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=e1aea33cacae3382efca7e5f5d01ccd25320f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:c3:42:6e:8c:b8:66:94:6a:ff:7f:a0:57:
62:9a:c8:d8:8c:eb:c1:78:6e:df:36:b1:9f:39:1e:
7b:d1:a6:3d:4f:b5:8f:96:64:22:a7:2b:48:ed:7b:
73:08:c2:a4:23:cf:24:ab:98:8c:97:be:ba:37:6a:
8b:8f:83:1c:86:1e:55:41:65:9e:63:c1:e2:f9:fc:
99:99:ad:77:48:58:5b:0e:3d:11:da:95:ea:cb:15:
cd:09:05:3c:0f:92:af:da:9a:5c:0f:34:60:65:05:
f2:98:5c:13:08:59:77:c1:d1:0b:d3:04:13:ef:29:
57:d0:c3:2e:79:41:02:9f:90:cf:e2:84:ac:48:09:
8a:b8:bb:73:ef:2b:6a:5e:9a:46:d5:47:ae:d2:c3:
24:76:d6:4c:9e:f4:89:30:8b:cf:7a:8e:9c:02:71:
5e:62:32:3a:66:90:52:26:d4:48:74:9d:fc:18:09:
fd:2c:7e:b0:d7:68:e4:ad:01:36:7f:3a:ac:66:cf:
e1:e8:11:b8:15:15:ee:b9:bb:c4:ed:3d:f7:bf:b7:
5f:1b:e6:61:89:5f:fd:2d:34:5c:d1:eb:25:a4:71:
03:1a:07:42:7b:d2:2a:6c:e9:f9:e6:1c:49:cc:56:
3e:8a:0c:e2:3a:eb:20:d3:33:3d:99:06:57:85:30:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AE:A3:3C:AC:AE:33:82:EF:CA:7E:5F:5D:01:CC:D2:53:20:F0:13
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2c:81:62:6f:e8:a7:84:17:31:7c:a9:5b:b8:8d:65:81:a6:
61:ad:98:11:69:51:53:3a:cc:67:f0:af:4d:b4:b4:74:97:6b:
27:31:c6:39:59:ce:86:9b:fc:c8:aa:43:13:24:f9:aa:7d:60:
f0:d1:02:94:d9:f7:29:74:0e:5d:dc:74:37:f8:e5:14:30:d7:
3b:9b:c7:f3:b6:da:3b:61:01:32:d9:6e:54:59:85:9c:5e:8d:
6c:38:a8:40:c8:d9:5e:e7:50:e8:bd:1b:20:72:06:ee:1d:c0:
35:9e:cb:ea:6a:b8:3d:f8:1b:e3:04:0f:18:d8:5a:10:e4:ec:
3c:c0:1c:c2:ce:ea:d4:cd:3e:3d:55:da:21:24:aa:2b:a6:30:
b5:d4:d4:e2:a0:3e:8d:c9:94:1c:3b:a9:ae:29:60:02:b9:b9:
c5:91:8b:d6:94:77:97:42:71:09:ab:a1:29:72:e9:cf:2e:f5:
d9:c7:4b:93:01:2d:ee:64:0b:de:34:75:59:e5:a4:ea:f8:c9:
d0:f1:7d:07:21:73:9c:75:67:06:9f:41:f7:dd:92:bd:7d:9a:
3e:23:c6:84:89:de:79:fd:64:18:9e:cd:21:cf:4f:75:55:49:
13:5e:a6:bc:2f:5d:b3:f4:38:f6:3a:cd:ea:db:2b:08:57:0c:
90:33:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:07 2026 by rpki-client