Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: j+ntob8iI+cOUibLx77ctaaGaXZ76ROVbb+0bjd8S14=
Subject key identifier: 5C:D1:36:F3:A0:5D:02:F2:77:F7:59:8A:56:77:FA:C8:64:16:DC:56
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019CAB341A1429FFC7EEC98AEFFCA8ECCD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 059C
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: iz_xe4vV8iZmoEs0Y-HTinvfCfM.roa (hash: Y15srvbGhoTRPaD39kB2d6ubFndfoUSXFPdXVYcdeBQ=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: 5m8BYrPqs/bfd3WdwGvSbwpOhG2VlNMjh9yV8i3si0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:1a:14:29:ff:c7:ee:c9:8a:ef:fc:a8:ec:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=5cd136f3a05d02f277f7598a5677fac86416dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:33:3e:cb:d0:6f:f2:fb:46:4d:ef:ca:53:
63:9b:4d:a2:20:bb:9b:ed:ea:fb:6c:db:8f:b3:84:
1b:90:6a:67:f8:94:6c:6f:4d:ba:9f:f2:ba:8f:ef:
69:4d:b3:2c:9e:15:82:a6:8c:b1:95:01:98:37:91:
ca:8e:a8:c1:61:4a:ce:e2:6d:1a:b7:bc:7d:7c:99:
15:06:5a:93:99:e9:68:cf:09:23:38:b3:8f:df:57:
73:67:3e:e9:09:30:04:59:3f:0d:8d:e8:b3:43:60:
2e:c7:d6:6c:f4:8f:cc:5f:22:6f:18:bb:f3:97:24:
ad:cb:5d:0b:38:fe:d6:04:e6:47:b8:0c:94:24:ba:
eb:77:82:8d:eb:03:cf:c6:76:6e:b1:79:90:52:80:
58:15:4b:56:4c:b0:2f:27:c7:42:52:a8:ad:28:b0:
02:00:2e:92:7e:5e:73:23:93:81:a7:ac:5f:f2:70:
d0:0f:a6:c1:f1:90:e4:5a:cb:33:13:90:4f:05:1e:
ef:31:87:4b:d6:a3:3d:90:71:0f:58:23:e2:3b:b6:
40:07:28:cd:0c:6d:92:d0:ad:24:32:38:be:da:5b:
b5:a2:90:ee:be:e8:a0:78:1c:0f:1d:28:37:06:a4:
b6:cc:29:d4:56:ec:af:88:80:27:b2:69:cb:8f:82:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:36:F3:A0:5D:02:F2:77:F7:59:8A:56:77:FA:C8:64:16:DC:56
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:92:51:53:fc:a5:0c:72:79:63:d0:1a:7d:5f:ee:ad:1e:
01:f2:93:67:d4:b0:dd:a7:42:f8:57:75:22:32:7c:08:f5:a4:
af:f4:7d:ab:8c:d3:92:f3:cc:d5:0d:46:66:03:79:25:14:eb:
6a:57:84:82:bd:c5:80:f7:0e:b4:4b:aa:ab:e3:e2:db:71:a2:
46:90:c0:e4:0a:0b:56:4c:46:a9:0f:73:57:27:d7:ad:5a:54:
89:a4:14:da:e8:b5:c2:41:6c:ff:d6:20:41:2d:76:56:15:fa:
a5:c7:f1:4e:d5:4f:16:40:a6:07:b2:38:d6:06:2f:7c:a3:66:
4c:92:45:75:23:ae:7d:86:de:8e:44:9c:55:05:f2:4b:cb:cd:
71:e6:fd:a6:0f:4e:60:da:0b:2b:43:46:9d:92:53:d0:d4:01:
e1:2f:29:5b:44:66:e4:09:31:78:64:ee:9d:0f:a8:12:8b:53:
ec:b9:08:51:bc:f3:2f:40:1f:e9:05:ef:5f:07:da:a6:48:66:
d6:4e:c6:cd:1f:eb:e5:f4:59:b4:ef:c1:13:49:f0:82:76:71:
cb:9c:a3:44:a7:c6:f7:4e:d1:bc:de:ff:7c:4f:ee:c4:c9:cf:
aa:47:43:1b:c1:b4:2e:9a:0d:df:8e:16:2f:74:9a:01:6b:63:
7e:a2:2c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBoUKf/H7smK7/yo7M2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD
Eyg1Y2QxMzZmM2EwNWQwMmYyNzdmNzU5OGE1Njc3ZmFjODY0MTZkYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWozPsvQb/L7Rk3vylNjm02iILub
7er7bNuPs4QbkGpn+JRsb026n/K6j+9pTbMsnhWCpoyxlQGYN5HKjqjBYUrO4m0a
t7x9fJkVBlqTmelozwkjOLOP31dzZz7pCTAEWT8NjeizQ2Aux9Zs9I/MXyJvGLvz
lySty10LOP7WBOZHuAyUJLrrd4KN6wPPxnZusXmQUoBYFUtWTLAvJ8dCUqitKLAC
AC6Sfl5zI5OBp6xf8nDQD6bB8ZDkWsszE5BPBR7vMYdL1qM9kHEPWCPiO7ZAByjN
DG2S0K0kMji+2lu1opDuvuigeBwPHSg3BqS2zCnUVuyviIAnsmnLj4L8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzRNvOgXQLyd/dZilZ3+shkFtxWMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAuSUVP8
pQxyeWPQGn1f7q0eAfKTZ9Sw3adC+Fd1IjJ8CPWkr/R9q4zTkvPM1Q1GZgN5JRTr
aleEgr3FgPcOtEuqq+Pi23GiRpDA5AoLVkxGqQ9zVyfXrVpUiaQU2ui1wkFs/9Yg
QS12VhX6pcfxTtVPFkCmB7I41gYvfKNmTJJFdSOufYbejkScVQXyS8vNceb9pg9O
YNoLK0NGnZJT0NQB4S8pW0Rm5AkxeGTunQ+oEotT7LkIUbzzL0Af6QXvXwfapkhm
1k7GzR/r5fRZtO/BE0nwgnZxy5yjRKfG907RvN7/fE/uxMnPqkdDG8G0LpoN344W
L3SaAWtjfqIseA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:07 2026 by rpki-client