Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: A8lJPolWR8pZneZv20tYi6uj2+dXieWF9iZaXY2mfKw=
Subject key identifier: BE:67:E3:EA:0F:5D:2B:41:64:87:CF:F7:6A:D4:C3:55:3B:0F:AD:C2
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019CAAFD40435A61B2C4DFA7EF4D94BB950A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: lpz+fBwMkI7vrzqiDm0VX3DaT9GdIQ6h8MhPXj5+WU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:40:43:5a:61:b2:c4:df:a7:ef:4d:94:bb:95:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=be67e3ea0f5d2b416487cff76ad4c3553b0fadc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:95:30:6d:5c:1a:38:85:56:51:9c:52:00:
22:44:2a:00:06:f0:fa:d9:73:7b:68:ee:a9:6e:12:
90:8b:b1:2d:b3:49:69:96:f3:c3:72:2a:b2:69:4c:
b0:52:56:95:d5:92:eb:cc:e1:5d:e5:b2:bf:72:15:
a9:bc:f5:73:e5:bb:5b:d1:57:c8:6e:61:90:71:c2:
9c:3b:00:c4:29:06:f2:69:46:16:40:60:85:1d:d5:
c6:2b:27:f0:d8:d0:29:be:4e:66:c4:ba:89:a1:4c:
74:c7:5a:31:6d:15:94:81:61:69:39:86:ca:9e:2b:
5f:aa:2d:e7:4d:61:c8:bf:67:91:bf:51:c0:71:6a:
d3:06:75:e7:d7:d3:c9:b6:cd:7f:c3:62:68:47:33:
87:f1:3a:d4:21:4c:18:73:39:87:23:4b:6e:4c:23:
5b:43:94:bb:de:91:ed:46:9a:20:cc:ab:b4:e2:94:
77:90:2d:cc:7d:b9:8c:3a:bf:55:20:21:ea:e8:21:
e3:ab:d4:19:20:37:3e:1d:82:b1:61:53:6c:14:49:
9f:4a:8b:e3:3b:e3:88:34:ff:04:f6:26:67:a4:1b:
c7:72:f8:ef:e6:f1:a7:e0:7a:e2:af:80:59:d0:44:
4f:6a:cd:b1:7e:51:48:c6:81:86:87:a0:e1:02:c7:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:E3:EA:0F:5D:2B:41:64:87:CF:F7:6A:D4:C3:55:3B:0F:AD:C2
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:d5:f6:b6:a4:a5:72:7f:c6:64:45:1d:28:0e:fa:da:0f:
67:37:87:7b:2f:fb:e3:8f:76:e0:6d:e9:ea:aa:40:08:78:14:
b5:40:e8:0b:f3:73:97:f4:32:d8:cf:e2:91:ab:c9:dc:05:2d:
d5:6c:e8:2e:ba:e7:41:73:b6:3d:96:43:72:24:ac:bb:c7:f8:
fc:6f:a2:5d:bf:b3:2b:33:02:f0:43:7a:68:fa:ec:c9:60:9d:
35:7a:3c:44:cd:3c:19:96:0a:ee:ae:f5:5c:b9:d9:eb:e5:48:
18:c7:5d:3a:6d:49:93:6b:85:3a:62:fd:7b:76:e3:f6:0a:27:
63:6c:ce:00:77:a5:2a:b7:97:4c:bd:92:11:d3:f6:6c:2d:fa:
99:43:ab:4b:51:dd:30:b9:4f:af:de:c9:01:94:89:0c:c1:24:
fc:3b:ed:67:17:99:9b:93:55:60:90:73:a5:a5:57:f9:06:fd:
4f:17:e7:1f:83:4e:86:fc:00:5a:b4:2b:dd:22:be:8e:21:ad:
93:d0:2e:81:91:d4:ac:54:26:8b:a6:47:34:30:fe:9a:cb:51:
fc:02:a6:ec:4f:a4:5a:5e:e5:8c:5d:52:fb:76:ea:64:aa:5e:
83:23:66:d0:8c:34:10:f9:3e:34:0e:c1:87:e7:5e:47:fb:f6:
72:fe:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:28 2026 by rpki-client