Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier: PXxG5dvgZOjiNFAB5ZOsh5ytDM3I8KSmZJQmb3W42MQ=
Subject key identifier: 79:6E:38:EC:CB:93:1B:4B:AF:CF:41:24:E0:CC:AD:6C:85:38:CF:36
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 019CAAFD7745A3C73AAFF389B48B020A6565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number: 10C9
Signing time: Sun 01 Mar 2026 20:01:03 +0000
Manifest this update: Sun 01 Mar 2026 20:01:03 +0000
Manifest next update: Mon 02 Mar 2026 20:01:03 +0000
Files and hashes: 1: VAvUr1f-cH2wVMGQJ7gXcOubzkw.roa (hash: wf7BIMcrMEI40pV4LBSertjbA6/RgKL8Q4IuVS5+68E=)
2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: zk82udD8F73ZKX35kxmdjQAqriEmIa1X58PBl6sqnaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:77:45:a3:c7:3a:af:f3:89:b4:8b:02:0a:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: Mar 1 20:01:03 2026 GMT
Not After : Mar 2 20:01:03 2026 GMT
Subject: CN=796e38eccb931b4bafcf4124e0ccad6c8538cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:66:f1:f0:49:37:a5:11:2e:ec:9b:a2:78:
4e:9c:a9:56:bb:fa:52:37:25:0d:a2:f3:2d:fe:15:
4e:44:5b:5d:fd:63:6a:47:bb:a3:84:c6:ca:29:83:
00:e3:3b:ef:44:28:23:d9:c8:90:ac:dc:da:bd:d2:
bd:01:55:80:43:43:e9:94:e1:12:4b:42:a1:d9:4b:
05:a4:21:26:d7:de:29:be:4a:80:a1:85:a8:6d:97:
d9:6e:7a:18:15:47:59:5f:3c:fc:36:f9:71:34:79:
48:48:f7:e4:5d:ac:67:d4:96:48:6c:83:eb:d7:2d:
53:2f:9b:bf:2c:d0:fe:d1:be:2b:ec:b6:77:f1:65:
69:89:a6:4d:8e:e2:71:1f:da:1c:b2:ad:48:1e:81:
0d:9f:dc:4c:2f:13:85:03:ea:56:75:18:b3:9d:fe:
a3:5b:f2:24:3c:0d:7c:bb:eb:20:ac:b0:79:20:0f:
48:22:7b:d6:fc:e0:5f:c4:09:2c:e6:3e:a1:17:f3:
01:ad:0c:f0:19:85:12:85:db:04:0f:cd:4f:5d:cb:
73:d1:09:c1:ce:3c:3d:2f:d8:b3:67:02:b0:8e:3d:
92:5a:f0:1d:95:55:87:a1:f1:34:33:3f:b8:9a:f6:
2d:06:84:bd:87:95:4d:88:32:09:46:53:f8:17:e1:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6E:38:EC:CB:93:1B:4B:AF:CF:41:24:E0:CC:AD:6C:85:38:CF:36
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1a:b3:0c:b5:54:45:0f:2d:62:9c:f8:4e:18:0b:67:8d:34:
b8:48:60:16:94:3d:bd:bc:66:ff:59:76:3a:b2:c6:a6:d3:a4:
ba:96:2a:f6:43:11:97:5a:6b:03:11:7b:67:a4:29:b4:a9:e0:
48:3b:a7:08:24:f4:85:61:51:ba:5f:fb:d1:eb:15:15:81:a8:
29:73:a3:6e:6b:0e:2e:2b:3b:66:a4:85:da:26:8e:81:70:49:
96:60:cd:58:88:fc:9d:c6:93:69:82:be:eb:ac:64:f5:63:1a:
8a:42:15:41:e5:17:f3:dc:2b:3d:45:24:5d:72:9f:9f:5a:ad:
a5:79:4b:2a:25:9e:27:c2:18:40:52:83:4f:c1:f2:63:1a:1c:
c7:e6:19:41:67:e6:51:c4:86:f5:3a:73:1e:0e:f6:c0:da:31:
b6:81:a5:12:2e:18:a4:a4:f4:5b:18:4a:73:f7:60:a4:9f:5e:
3a:77:9c:a8:89:58:a4:87:d7:3b:06:69:97:9b:2c:e7:25:bf:
03:3a:50:0f:28:7e:f2:03:4f:8a:61:f9:9f:8b:04:ec:d2:b8:
47:d9:43:cf:24:78:c3:f0:72:c5:ff:af:b3:80:03:b4:d5:6e:
0d:ee:c8:4e:65:08:bf:dd:97:5f:65:9a:68:df:6d:2f:03:a8:
ae:b2:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:34 2026 by rpki-client