Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: DfKUEz3PKSxhpPHLOdWVIu/QayepHFqE6e5VcuVDyjQ=
Subject key identifier: 64:5B:12:65:48:43:78:48:B1:37:FD:5A:26:DF:AA:8C:4F:21:A6:B1
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019CABD93BF3EC67745C53F1D586AA31F8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 068C
Signing time: Mon 02 Mar 2026 00:01:06 +0000
Manifest this update: Mon 02 Mar 2026 00:01:06 +0000
Manifest next update: Tue 03 Mar 2026 00:01:06 +0000
Files and hashes: 1: TSjfj-QisRfZKTbvFvagtYYtljU.roa (hash: aXZ9GQHn0MfhoPq/DrK3cj/6rgXogLzvprkNtDCtBy0=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: 3yTE89qA0dAxuxNx61LK+r6ErLJaLkFUuLZoqH1YY80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3b:f3:ec:67:74:5c:53:f1:d5:86:aa:31:f8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Mar 2 00:01:06 2026 GMT
Not After : Mar 3 00:01:06 2026 GMT
Subject: CN=645b126548437848b137fd5a26dfaa8c4f21a6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:d3:8f:97:8d:03:91:f2:a3:a0:12:86:4b:
0e:27:9b:5c:a1:2a:e3:97:89:38:a9:d1:b0:f8:c7:
96:f5:ca:cc:10:66:7b:86:80:ac:da:0b:26:81:9f:
88:c8:3b:15:e6:1f:ae:d0:ac:15:fd:53:64:25:20:
1f:7f:2d:fb:76:69:28:69:11:a3:79:12:c9:8c:93:
84:b0:da:f2:d6:66:bc:9a:e9:18:90:9f:5e:6b:ad:
63:bb:9f:56:da:39:8e:d6:6f:12:07:55:46:0a:90:
0b:62:f2:c8:05:f3:8f:04:5e:d8:f9:0f:d6:6d:12:
40:c2:a4:98:b0:a4:9e:94:f0:23:c4:1d:81:17:36:
fe:39:6d:cb:b5:ef:06:46:85:c6:6a:3e:27:d4:29:
ca:35:be:ba:81:01:51:a0:6f:5f:06:38:eb:67:74:
34:ac:55:cf:e4:64:09:bb:fb:7f:15:5c:af:7e:50:
93:85:77:5f:56:35:1e:c5:9d:9e:89:6e:38:37:4c:
d8:e8:8c:e1:04:c5:df:4f:5d:4a:bb:2e:2e:66:2a:
c8:ba:d5:91:77:d2:07:5f:47:65:d0:65:84:3d:e2:
35:27:f9:05:85:a8:ba:ba:fb:03:88:0f:3c:05:dc:
ff:bc:2b:6c:78:37:6a:18:73:35:a8:c7:59:bd:cd:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:12:65:48:43:78:48:B1:37:FD:5A:26:DF:AA:8C:4F:21:A6:B1
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ef:e3:35:7b:e1:4d:0e:5d:5b:1a:5a:70:6c:7e:01:51:32:
45:73:6e:32:16:3d:9d:09:b8:89:a2:a6:4c:2a:e8:2a:a4:5b:
bf:5b:9c:46:ca:06:4a:24:ce:27:68:18:91:2e:a9:f5:2a:d2:
bc:47:08:1f:c2:68:08:e7:00:9e:13:66:8e:e2:5b:51:29:b8:
ca:97:b9:d7:73:45:80:88:47:53:bf:de:a2:80:3c:7a:94:55:
e0:51:19:6b:13:52:a1:df:bb:a3:fe:94:77:a5:53:81:5d:f7:
cc:f6:cf:10:ef:42:bb:05:37:87:59:2b:8b:b8:65:e3:b9:1a:
f5:94:f6:de:0f:e0:c0:43:cc:ae:fc:1b:df:52:f7:0e:19:ca:
ae:e7:78:d2:5f:b7:a5:f6:0b:8b:6f:31:2a:0e:63:75:e9:1c:
05:92:fd:0f:e3:98:5f:e8:27:52:13:66:d1:a9:79:85:8f:a1:
ed:3f:a7:0e:39:21:5e:1d:ae:a3:c2:9c:f1:37:85:92:e4:59:
21:81:d2:20:f8:00:4a:8f:a2:94:9a:df:79:7b:13:14:18:f1:
65:ac:0c:6a:49:0c:9e:98:b1:e6:32:5f:75:da:9d:95:5a:dd:
34:70:43:66:63:ed:f1:53:fb:0f:fa:ac:85:1d:7c:0a:5d:01:
64:de:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:00 2026 by rpki-client