Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: bq+YozRHG/aLbg/e4/RVtTdcOeWh6I6nG+7xiZUwkGs=
Subject key identifier: 51:2B:D6:A6:C6:F5:9D:24:CC:D5:48:E5:77:33:D1:D8:71:E0:8E:81
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019CADC85678383AD20F2CF7AF0F12C314E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 0639
Signing time: Mon 02 Mar 2026 09:01:53 +0000
Manifest this update: Mon 02 Mar 2026 09:01:53 +0000
Manifest next update: Tue 03 Mar 2026 09:01:53 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: DR3AoZzH7U+2eE7+jk86Z7/xAqkKbIuhWTobJAvcGhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:56:78:38:3a:d2:0f:2c:f7:af:0f:12:c3:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Mar 2 09:01:53 2026 GMT
Not After : Mar 3 09:01:53 2026 GMT
Subject: CN=512bd6a6c6f59d24ccd548e57733d1d871e08e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:9b:26:62:97:db:a6:27:a7:b8:ec:c5:bc:
9b:f5:d4:1a:ff:ed:63:89:11:d2:bf:83:91:b4:d5:
95:4f:24:cb:d7:4a:28:54:6b:34:65:d5:30:8d:26:
86:50:dd:94:79:ef:3a:6c:16:af:2f:3d:cf:75:c0:
30:39:62:e7:af:9c:5b:c4:7e:59:d5:ef:4d:6d:3e:
00:2d:37:30:03:90:1d:87:2c:8c:b0:a9:7b:52:02:
75:10:92:1c:de:fb:71:62:58:ce:91:da:84:fb:24:
1c:db:e1:1b:48:24:a7:3e:83:75:cc:ea:82:c1:ae:
a0:f1:44:23:1b:dc:3e:74:81:36:e0:e4:b2:30:85:
13:c6:1c:96:e4:a7:8c:fe:15:3f:0e:9c:b7:e1:79:
64:f1:62:c9:2e:e5:e0:1d:63:71:15:89:ff:6a:90:
5d:59:4a:28:f5:d0:e8:87:ce:aa:43:b4:85:ca:ac:
ff:23:e3:9f:39:bd:6a:9e:f5:3e:0f:0b:6d:be:15:
08:3e:83:c4:37:0e:79:a4:77:14:36:3d:0e:ea:f6:
3e:7b:28:a0:57:79:b7:7c:6f:e2:6b:5f:11:e8:c3:
ce:e3:1a:64:f4:85:2c:6d:90:0a:df:93:b0:67:77:
61:9c:13:5b:85:3e:85:4e:2f:43:b5:4a:56:7e:aa:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2B:D6:A6:C6:F5:9D:24:CC:D5:48:E5:77:33:D1:D8:71:E0:8E:81
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:99:67:89:60:f7:33:97:36:4f:98:d5:45:84:d5:08:cd:
db:44:e9:59:25:bb:15:90:14:ef:6c:97:40:63:76:16:d7:74:
b4:c0:1f:97:17:88:dc:6a:15:f6:08:1f:f0:97:9b:86:b5:0d:
c2:a5:6f:45:7c:ff:38:d1:11:1c:45:4c:a5:a5:71:c2:d9:a5:
b2:a2:8e:b4:6b:91:69:aa:3d:b1:e6:ad:9d:a0:6d:ae:9e:aa:
c7:87:64:21:3a:1e:74:b9:80:78:89:65:a6:c4:49:41:a5:4f:
18:c7:2d:3d:f4:83:24:65:59:54:19:42:2e:e3:5c:16:56:a6:
67:9e:69:4d:b4:14:57:c3:b8:85:1f:1c:3e:c6:d3:f5:35:c6:
2d:98:e3:85:ea:48:90:9c:d6:b2:4b:28:ba:4e:21:b2:19:a5:
59:89:46:54:93:ce:c1:fb:d2:88:0e:cf:67:46:b6:ff:e6:b6:
75:f5:11:1f:b1:68:f6:e4:c5:6a:2f:ce:2c:51:c9:68:a8:d7:
d8:03:06:01:da:37:e4:d3:5a:10:85:d7:61:48:a7:4f:51:e8:
90:ce:dc:9c:dd:2e:46:98:af:ca:bb:2c:46:8b:f1:6d:aa:d9:
da:0f:39:d7:0f:f0:5c:7f:23:1c:ed:4b:ef:03:87:d4:67:c5:
62:ee:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:03 2026 by rpki-client