Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: oM521ygg5REYvbi21621cF1Qb4XZOxyAOADh5r+30zE=
Subject key identifier: 38:65:99:8D:93:7C:34:D4:D6:82:01:B3:83:9C:14:FC:D1:DD:9A:59
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 019CA9463DD5BD89A4204E50539CB57FAF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (hash: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: IrBKXaHGPJ2jKqSDcRPOKzYVqAVKYa6KogCRGqJZNvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3d:d5:bd:89:a4:20:4e:50:53:9c:b5:7f:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=3865998d937c34d4d68201b3839c14fcd1dd9a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:2a:52:dd:e3:f8:ef:78:c2:0a:fe:38:15:
69:19:04:dd:ac:d9:5b:98:8f:6b:85:67:61:7f:55:
18:3f:60:a5:f2:3d:ac:f6:7d:d7:32:db:03:dd:4e:
66:c8:e1:0e:46:0b:0f:b5:37:de:df:83:fc:0a:82:
d0:51:56:d2:71:07:57:79:5e:1c:f1:e0:dd:ff:74:
8d:44:61:36:75:35:a7:b7:2b:1e:74:4f:2a:72:48:
ae:50:53:55:19:db:19:06:e4:01:a4:a5:5e:e8:1b:
c8:41:ed:11:b2:79:58:d7:b9:9c:45:0f:11:a6:45:
a6:24:68:c9:41:97:4f:28:0a:15:de:bb:d9:c2:cb:
6b:a3:a6:81:68:b4:57:d5:8d:88:a4:36:fc:f5:9a:
fd:3d:a4:9e:ab:80:04:d8:02:ab:8f:22:76:ba:11:
ff:38:41:95:f7:bf:4e:7a:04:f2:14:0b:e8:7f:e7:
74:aa:70:47:8a:94:25:db:79:9c:2f:a7:45:7a:f9:
30:6b:39:76:a3:5d:49:bc:df:f3:ad:44:1f:95:04:
7b:95:1b:2e:96:63:98:d6:a6:8c:61:fa:a0:5e:9c:
c1:c5:75:53:65:8b:b0:cc:2c:6c:95:d1:b4:bc:fd:
88:6b:d7:5e:fc:3f:1c:9c:57:e9:a1:f6:b9:2e:56:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:99:8D:93:7C:34:D4:D6:82:01:B3:83:9C:14:FC:D1:DD:9A:59
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:a1:90:08:79:ab:1b:5e:d0:69:bb:28:a2:79:a3:21:0c:
2c:60:a9:96:54:4e:63:c2:1c:6b:cf:27:48:6d:e7:ca:90:ef:
80:04:b0:94:38:53:b5:86:9e:da:ef:f7:72:0e:f2:d4:0a:8b:
a9:c0:94:51:44:91:8e:83:50:37:9d:7e:25:67:25:14:e1:8a:
ec:b2:da:28:ba:65:73:07:6b:ce:95:31:5a:f8:37:59:dc:e4:
e4:83:00:72:31:19:14:c5:80:ed:29:61:08:0f:58:ef:98:84:
b2:77:de:2d:cc:81:3b:d9:12:87:f9:ac:7d:0c:39:91:1d:47:
81:4c:e7:b4:98:f3:ab:9f:9b:74:56:9f:1c:ee:db:a3:b8:a9:
41:92:95:4b:2b:cf:d3:58:91:91:8e:72:b2:20:d1:ae:fa:71:
a4:4d:99:5c:a7:18:ba:1b:31:94:aa:9d:34:60:87:11:12:39:
22:02:93:2f:a8:0d:8c:14:b0:eb:55:06:a0:5a:db:62:65:fe:
c9:4c:24:fe:03:b5:21:ca:ed:21:f5:9f:bf:e5:c6:d6:33:57:
dc:23:bd:e3:66:70:b8:08:2f:68:c0:60:be:da:e4:81:82:ca:
a0:9e:15:53:93:d9:33:16:93:0c:8b:28:a9:0a:df:b1:40:39:
5f:11:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:33 2026 by rpki-client