Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: bXDChVjKGlTd9vjufATbHTri6NDNadM+QoMxs5H18bY=
Subject key identifier: 4A:D8:7F:15:5B:2B:E1:39:FA:51:CD:44:AE:0B:B5:08:75:85:DE:5E
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 019CAF1162F5698D01F8A0D2699BB38699CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 10A4
Signing time: Mon 02 Mar 2026 15:01:18 +0000
Manifest this update: Mon 02 Mar 2026 15:01:18 +0000
Manifest next update: Tue 03 Mar 2026 15:01:18 +0000
Files and hashes: 1: Ntq657VT6l4Y2gPWI-QPcLNDXIM.roa (hash: Pt8tZkYbxo4DV40Mb0Y1qZZ49X4ObdKzZapAV4hW5og=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: rwqJGNrh8K+Jvc3q6152cqXHNa4OERdzTfBuLaHYmls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:62:f5:69:8d:01:f8:a0:d2:69:9b:b3:86:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Mar 2 15:01:18 2026 GMT
Not After : Mar 3 15:01:18 2026 GMT
Subject: CN=4ad87f155b2be139fa51cd44ae0bb5087585de5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:95:f9:93:41:80:a7:12:22:3b:f5:1c:02:
46:a1:72:e3:60:6b:40:13:36:f3:cf:00:e1:c2:cb:
4d:aa:65:81:ea:45:5d:9e:0c:39:6f:6a:65:10:b8:
6a:e8:e6:41:13:9e:8b:14:f6:8a:b2:d0:f7:6a:44:
34:2d:27:c0:cc:9b:15:e8:5b:5d:ee:4a:7d:fa:98:
68:af:65:f7:7e:81:16:c5:03:be:9f:a8:ac:f1:1d:
41:8f:ad:40:ff:50:ae:89:68:87:62:7f:e9:84:fa:
93:c3:50:62:98:c6:c4:88:4e:5a:90:c6:71:3a:08:
0d:89:9b:07:63:d7:7f:82:e2:cb:58:82:d5:98:3f:
af:ab:a9:29:a8:54:dc:dc:ab:f1:ab:3d:1f:15:ec:
fc:06:19:ba:39:d6:bf:57:82:50:36:f0:bd:8f:f1:
2c:d7:81:cf:2e:f7:e3:08:96:10:62:29:dd:70:97:
28:39:5d:ad:07:5d:49:b3:a5:4e:32:13:72:a4:88:
de:c1:9c:22:3f:17:be:3e:91:14:10:5d:fe:07:fb:
06:c6:73:50:fe:ec:63:5e:11:4d:c3:74:b8:4b:d1:
0d:4b:eb:5c:28:ef:d4:a8:23:0d:64:53:d3:04:86:
b5:76:2a:2b:0a:cb:41:24:21:df:ae:79:80:d3:86:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:7F:15:5B:2B:E1:39:FA:51:CD:44:AE:0B:B5:08:75:85:DE:5E
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:27:1c:e6:9e:b7:95:b8:44:62:df:cf:80:47:35:35:b5:4e:
77:fc:30:8a:07:aa:b9:8e:e7:92:52:0f:78:0c:68:36:20:bd:
2d:54:de:6b:9d:fd:6b:39:23:fd:5e:de:2b:99:83:cc:c3:7a:
42:80:0f:a5:56:e0:ad:48:00:3a:38:24:ee:a0:1a:0e:6f:c1:
d0:dc:68:89:de:fb:99:14:3e:7d:e8:c4:2a:ea:fe:ae:94:da:
02:32:b1:ec:72:9d:64:7e:58:28:8c:53:16:13:84:e9:1a:aa:
e5:b5:96:52:37:41:bd:7f:c8:43:39:69:65:46:6e:20:a3:de:
07:20:fa:37:2e:b5:46:05:46:ff:f4:43:1c:91:b4:9a:e0:73:
c8:8c:bf:ea:4f:89:2a:14:80:8e:df:9a:12:81:77:34:56:1d:
6b:dd:49:76:57:11:21:ae:cc:29:d9:52:b4:af:63:b1:d2:c6:
be:74:7a:3d:cb:2f:73:54:88:9b:05:96:eb:26:c7:42:22:70:
13:dd:a9:62:39:d6:4a:98:aa:e4:04:f3:0c:1f:63:b2:2a:af:
0a:4f:79:88:58:1b:0d:c6:2c:60:8b:59:98:a6:62:22:74:65:
6f:88:e8:d4:ef:47:56:46:4d:82:d8:9f:92:de:f9:3d:7d:2c:
0a:86:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:55 2026 by rpki-client