Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: 5+5ARv1X4BRstbtyc5YuU8pnP7g1Fhf6WeUvzdGV5zk=
Subject key identifier: FF:61:2E:D9:3F:15:BF:38:07:EA:39:3D:B7:2C:42:33:8E:9B:1D:CA
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 019CAEA3584749C82EEF2FB66B2E9BD4BABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0BAF
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: OUJf-sc0f-zTH1OOEDEe1u3vDUI.roa (hash: jsm1Kc9N3YzBvdT9WWkethSdjz6IIBqoQUC68R7xEgA=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: 6Whz4pV2iqs6CDdhdaQbhfQvz7o34XeQowLUQIQdjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:58:47:49:c8:2e:ef:2f:b6:6b:2e:9b:d4:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=ff612ed93f15bf3807ea393db72c42338e9b1dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:56:b3:6f:b9:42:fc:d8:8a:2c:d3:4b:a6:
e4:a1:12:09:51:50:6f:58:cd:8e:a3:d7:da:b2:1c:
31:14:70:d4:7c:15:42:f5:89:d3:17:80:b8:a7:4d:
6a:45:09:4b:7b:43:e4:50:92:08:63:65:eb:d3:19:
61:73:5a:ee:38:bf:f7:11:87:73:ce:6d:e0:5e:e5:
62:ce:02:db:7e:6f:f5:70:3a:e3:ab:99:52:94:14:
13:69:db:b0:ab:a2:d3:b0:a9:48:0c:8e:ea:b1:10:
74:67:b7:14:05:be:ca:9d:de:02:3d:a2:22:38:57:
9b:c5:72:94:a6:5c:7f:47:0c:91:da:38:42:f0:7f:
e7:43:69:de:fd:16:f1:77:89:9c:30:3a:55:7c:7f:
93:7c:8a:04:58:28:c3:04:be:90:06:14:f2:58:40:
f3:1f:e9:2c:12:e6:1b:6a:b1:aa:b0:6d:9b:cb:72:
cf:05:20:94:e0:2d:30:7c:20:f0:77:c5:36:aa:6d:
17:8a:69:30:2f:50:05:06:09:89:cf:b8:12:2f:f4:
74:49:ac:ab:9f:d5:bf:dc:4d:9d:58:0a:c4:f7:e1:
5e:94:6a:a8:68:02:db:68:ef:0f:df:4b:c2:9e:e8:
50:74:ed:71:16:cd:11:97:4f:39:2a:ec:f4:75:1c:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:2E:D9:3F:15:BF:38:07:EA:39:3D:B7:2C:42:33:8E:9B:1D:CA
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:37:ff:ad:87:13:19:f2:04:cd:1c:ed:82:f7:21:79:d9:cb:
7a:88:32:52:b0:fc:e1:33:b0:4f:c7:8e:c1:03:60:3b:19:8d:
7e:6e:f1:d8:4a:de:f6:43:5b:6a:9f:25:63:28:0b:dd:6b:95:
ba:ff:75:c1:09:4e:8a:94:8f:76:12:c7:b3:2d:9d:5f:bc:d8:
c4:a6:90:4e:0f:03:99:52:1d:0c:10:cc:c1:c4:c8:ac:5e:f2:
04:62:59:1d:8a:72:6d:19:8f:49:a2:c5:48:97:4c:0d:45:40:
60:e8:0c:d3:b3:94:a7:cb:a6:b7:77:33:53:da:59:8c:3d:f2:
c0:d7:ea:74:12:85:b7:14:08:a9:f3:fe:9f:12:b9:5b:be:0f:
a5:cd:d1:a2:cd:90:7c:13:06:b3:c9:d8:e9:92:0a:15:a4:e0:
6f:60:e8:72:c5:90:7d:9d:1b:46:32:9e:d1:bd:ad:52:68:b8:
df:89:7d:52:1a:4e:54:ce:37:ab:e6:a1:1a:9f:95:dd:c9:a8:
55:85:ef:c8:84:21:59:25:c8:4e:14:ac:84:f3:2b:0b:2d:e5:
94:5a:2d:5a:5e:04:42:29:be:c3:5d:c6:a8:9e:dc:73:e4:96:
b1:6a:13:ab:47:b0:7a:6f:d0:65:86:d6:38:5d:15:e5:be:6d:
12:7a:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:06 2026 by rpki-client