Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
File: uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft (raw, json)
Hash identifier: GL3uEWkdNhTPSCQk8S0sdM6TJp0ww6gQT8TL8DwArsk=
Subject key identifier: B2:D6:FF:19:AC:A2:E5:89:CF:42:DD:A6:3F:C9:E9:B0:9D:65:65:49
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 019CAB6BCB8799F06037A9EA31D694097D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
Manifest number: 06C3
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: oBChBHssUzYUcBfM7zouya2w7Xs.roa (hash: 672YmL+cLtseSafY7vPPp2vT+ULtUH/ebbvzsneaNTo=)
2: uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl (hash: A7UVxZJmgAyWUpN3Lk8pLchScmo12FnOFyD0Ms5X25M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cb:87:99:f0:60:37:a9:ea:31:d6:94:09:7d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=b2d6ff19aca2e589cf42dda63fc9e9b09d656549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:53:ff:59:b2:ca:58:62:19:fe:e4:e1:81:
76:ea:b9:68:7a:b1:3a:dc:c8:64:eb:a6:6f:7a:6c:
8c:de:8d:8f:c2:1e:6f:bc:04:e4:9e:cc:43:38:61:
bc:9f:13:6b:32:3e:2d:59:13:e9:0e:eb:b1:c3:1d:
d6:bd:ca:a7:12:c1:d5:2a:f0:f6:b1:f0:7a:6a:15:
8a:87:a1:06:ba:ba:0e:24:e0:26:bf:fa:88:44:8b:
d7:6d:23:74:10:bb:1c:6f:5c:b8:1c:e6:a6:3e:9e:
05:50:ab:1a:a9:af:b8:9d:d9:eb:bb:b4:46:7f:b7:
d5:4c:85:82:c3:af:1a:1e:89:fa:20:66:fe:64:4f:
1b:fe:1c:e4:69:9c:09:15:66:10:db:5d:d5:a1:3c:
d0:6a:eb:41:da:ff:a4:46:53:7e:65:7f:22:1b:d5:
aa:42:d7:e1:7f:9e:97:9b:b6:23:f1:4c:15:0e:14:
bd:f7:43:1b:11:8d:01:55:3d:7a:63:97:41:64:96:
92:27:8b:81:bc:4e:4b:40:5a:3b:1a:54:b5:49:05:
8a:7c:b1:5e:b2:4b:85:5f:3a:44:17:a1:d8:9f:e6:
d3:29:20:76:fc:3a:36:e1:9a:c7:30:b7:b9:8f:1f:
ed:ad:66:8e:ae:f6:13:87:a0:09:2b:40:d8:37:d2:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:FF:19:AC:A2:E5:89:CF:42:DD:A6:3F:C9:E9:B0:9D:65:65:49
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:f7:1d:92:49:d7:37:53:09:18:80:f2:c2:90:ca:c6:e9:
8c:f0:e1:c4:80:1d:26:aa:f3:c3:03:84:28:fd:7c:5b:f6:8a:
7c:78:b6:86:cb:5f:24:fe:1b:2d:2d:21:ce:5f:b5:5a:ee:97:
86:7a:0b:3e:b5:94:40:b1:56:7c:c8:96:ea:02:85:1c:bb:33:
33:4b:34:88:87:60:08:56:0c:a2:b6:81:86:ab:c0:a8:a2:61:
18:ed:51:5d:62:9b:0a:1f:40:e3:35:74:10:b3:4c:60:5a:f3:
bc:0f:63:cf:2e:02:b2:a4:c1:21:76:44:5b:43:7a:5a:2f:ef:
c3:d6:dd:ab:cc:97:e4:41:20:e5:9b:04:d3:04:a3:25:97:c6:
2f:3d:4e:a5:36:09:49:f5:ad:a7:b8:c8:50:6b:5b:8a:f6:13:
97:82:d1:16:15:20:31:77:f9:35:6d:6a:d2:a9:9d:da:4c:ee:
33:54:68:df:09:aa:e7:26:4c:d7:2c:d4:2b:11:44:6c:47:f3:
6b:2e:a8:ea:1d:80:6e:6f:2d:3f:07:dd:d0:fd:c1:23:ee:60:
9e:b1:7d:a8:19:46:c3:85:74:16:dc:01:b5:58:e6:40:87:d6:
97:ca:f3:e7:6e:82:8c:dd:8c:d5:5e:e6:39:82:34:82:71:9b:
b9:5d:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:18 2026 by rpki-client