Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: 7NJmyFuPhZJ5fBk0qT3I+osySXa+w40T5bkXQNPJEH8=
Subject key identifier: 85:94:D5:39:20:B2:3A:85:64:3C:B1:F8:90:99:6E:D3:BC:CD:2B:A4
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019CABA2493CC0D8BB2993ACF630F327DA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1877
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: 1-oZ9nA1GvkJpmmO85td9UjPVOL8.roa (hash: WbrVzJ+KKcYmbA1ae+jXGRaz8FSjlb5bMrreVZGWW2A=)
2: 74FH53_qCyxdfdEDKjvoSC_Wclw.roa (hash: AIZwtyfbxw2VOFHLL9K5sj06w7V4DfeUDPOP1/okP6o=)
3: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: P8XdTSailqTLcvdgD2aI66CNLHMgklZ1eQ3K7FVGFdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:49:3c:c0:d8:bb:29:93:ac:f6:30:f3:27:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=8594d53920b23a85643cb1f890996ed3bccd2ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:43:9c:8f:e9:8b:5e:1b:15:aa:20:79:ff:
92:fe:a2:ee:b4:ae:c9:e7:29:25:8d:74:cf:62:ca:
fb:1a:92:f6:cf:e7:97:84:76:f4:b1:bc:f8:bb:be:
7d:50:15:43:0f:df:94:41:3e:7d:c0:56:01:53:00:
99:03:78:d4:69:37:33:52:dc:ab:aa:6a:c6:08:af:
4f:b5:1c:a7:49:82:cf:d1:7d:72:aa:b7:d3:af:1b:
1e:56:9c:66:1c:c3:95:7a:5c:59:de:68:55:49:2b:
84:6a:ca:8d:a0:23:4d:0f:bf:21:f6:ab:1a:8e:d4:
1f:99:1f:de:31:e2:7a:ff:1f:0d:56:40:eb:af:18:
ad:2b:68:95:db:bc:4e:d6:18:91:1c:5f:af:06:a8:
2d:02:2a:d6:f2:5e:21:a3:6d:ab:39:3f:9e:40:d3:
bf:0d:b2:d8:c5:74:a9:d8:4f:a0:7b:53:51:5e:5d:
c8:42:8d:d3:17:64:b4:1b:da:0b:c6:6f:51:e9:a5:
57:e2:95:23:dd:87:7b:89:60:75:70:c6:1c:38:27:
71:de:19:68:9b:9f:c9:46:b6:a3:70:f0:11:39:4c:
e7:eb:bf:e6:ef:9d:18:f2:21:02:cf:79:04:bc:45:
7b:71:4b:a6:e6:e1:33:5b:3a:cb:e1:3f:e5:db:f4:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:D5:39:20:B2:3A:85:64:3C:B1:F8:90:99:6E:D3:BC:CD:2B:A4
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:8e:4f:13:d0:b6:59:2c:1a:c7:00:38:44:7c:cd:60:f8:
32:1b:35:84:07:b6:15:d6:08:45:13:b6:cd:e7:16:12:e3:b9:
b1:92:27:fd:fa:9b:7a:0e:02:8c:86:9b:f1:f1:6d:8f:03:bb:
d3:6c:be:5e:42:97:4b:a6:a6:c7:a8:54:f1:e3:34:03:01:e3:
2b:07:38:2c:15:72:87:00:b1:8a:e0:49:88:4d:0b:32:df:37:
22:b0:e1:af:50:f9:eb:5e:7b:f3:b4:66:ef:02:c8:ef:27:76:
96:e5:1a:5c:9f:98:78:5a:a8:52:9d:dc:ab:94:5d:67:3c:3f:
7f:cc:d3:90:aa:50:b8:8c:b2:fe:c4:f6:cb:2f:2d:cd:26:0a:
63:14:a6:91:7d:9c:57:95:92:5b:0c:12:86:24:72:00:82:87:
6a:7f:e9:fd:9a:3c:ee:ea:c5:61:9a:1d:e6:e5:37:3c:56:f1:
2b:90:fd:79:74:7d:e3:72:aa:f3:ef:1b:88:9a:76:c6:1d:5f:
15:23:ac:d4:1b:34:ba:7b:71:24:f5:89:4d:86:62:60:38:55:
78:f7:bc:c2:4f:e9:07:68:55:f2:aa:0c:d0:3a:4a:54:4d:75:
93:a8:32:4b:2d:62:17:e4:29:18:ec:00:92:8f:98:93:31:dc:
bf:37:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:06 2026 by rpki-client