Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: GkmwpsrfUmAGZYkR/TK10lMRL5iidZE8s3IEMF8BfMk=
Subject key identifier: 80:91:DC:3A:07:45:22:02:42:5C:6E:36:25:59:A0:4D:0E:5E:EF:83
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019CADFE903EA08786039E3DB047B4D60FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 0825
Signing time: Mon 02 Mar 2026 10:01:07 +0000
Manifest this update: Mon 02 Mar 2026 10:01:07 +0000
Manifest next update: Tue 03 Mar 2026 10:01:07 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: GuX+svLCLfFJ17IIedQUhWMn4uwbRArqz+hFigrvFuI=)
2: w6o_mFdaC1iE9HreLWZZW7CeetE.roa (hash: ULCFerhBb+X2OLMdFVdyDjPTSfhj+p+sqvjNiKXZOJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:90:3e:a0:87:86:03:9e:3d:b0:47:b4:d6:0f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Mar 2 10:01:07 2026 GMT
Not After : Mar 3 10:01:07 2026 GMT
Subject: CN=8091dc3a07452202425c6e362559a04d0e5eef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:b9:74:3c:3b:fa:53:e9:20:66:85:e5:d4:
c6:4c:ed:9f:c8:ec:c6:59:de:58:ea:9a:f3:e0:ec:
d8:a3:3a:5a:7e:25:1d:2b:9d:1d:c6:27:04:0b:d0:
53:0e:58:07:ce:09:5d:a3:d1:0b:c2:5b:25:0e:0b:
d0:0f:e9:d4:f9:13:9c:da:60:e3:a7:cc:66:80:90:
20:eb:a9:38:8a:f4:32:a2:18:10:2e:cb:bc:7e:4c:
d6:c1:1c:53:d8:dc:de:b0:51:d7:d5:53:6d:02:e5:
30:6d:c4:f8:15:2c:09:51:92:bf:9c:14:e7:56:91:
a0:e7:d9:1e:48:88:9b:cd:3a:87:2f:41:af:5a:8e:
40:86:1c:a7:5f:e6:67:d7:a2:1f:5d:99:d6:71:a6:
08:3e:2b:2a:f3:77:2b:34:de:bc:db:d2:01:bf:ef:
5e:e2:29:c9:c1:21:3b:88:ae:c6:b1:92:b6:ce:59:
ec:e7:14:1e:76:06:fa:ff:37:45:6a:f1:a7:4f:b0:
e8:cb:b0:49:81:4d:9b:21:d5:e2:d8:a7:7a:57:82:
51:95:fe:4e:82:a5:44:47:28:cd:c4:f0:3f:e5:5e:
8a:85:97:f0:fa:ca:79:a2:95:d7:b9:10:91:27:a5:
ea:cd:d1:38:a5:c5:51:0a:24:fc:c1:9b:b5:13:02:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:91:DC:3A:07:45:22:02:42:5C:6E:36:25:59:A0:4D:0E:5E:EF:83
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:4d:74:b7:74:ce:79:be:2f:78:65:ab:d2:3b:67:bd:bc:
7f:12:a0:5b:da:93:51:76:e8:69:d1:04:7f:94:cb:52:43:3d:
d2:49:f9:e0:75:12:e2:2e:6f:94:22:33:54:c2:45:97:8a:87:
eb:f5:11:ee:f9:dd:af:be:35:81:e7:f9:b0:64:e8:b9:50:39:
e0:60:43:f4:1d:38:c3:8d:1d:69:47:04:3f:76:2b:f7:72:03:
00:bf:31:bf:47:20:39:d1:18:af:da:4f:19:16:70:db:99:75:
cf:21:60:5f:79:46:be:a9:ac:ca:67:51:41:1e:b9:e8:c6:60:
ac:11:e3:e9:ff:a1:1f:18:d5:67:b6:52:5d:fa:31:9d:7f:d0:
dd:2c:ba:05:bc:fd:28:94:a2:b8:92:75:aa:9d:d4:af:dd:5b:
10:ec:fc:48:ec:bd:7c:d0:62:db:2c:a0:5f:98:d2:bd:db:de:
18:d8:5c:89:10:ed:c9:e0:50:ce:cd:cb:25:ce:a9:65:d2:dd:
b3:05:bf:a0:6d:46:4f:67:12:c7:7f:72:40:04:39:c6:3c:30:
fd:a9:b0:fd:8d:7e:8e:94:d6:77:2e:cc:10:da:b5:00:d1:b5:
02:3b:19:1b:23:d0:b0:55:bd:54:2f:53:95:c0:40:9b:8f:d3:
cf:ce:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:00 2026 by rpki-client