Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: tbYyAD7q8Fss4IzR+SHmAlYWMkEH20vlbifpU5vr2zs=
Subject key identifier: 09:B9:55:74:76:D6:20:1B:C6:10:F8:7A:6E:C6:9C:25:B7:40:B4:FD
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 019CAF7E8148F191231077C7D61BB3120A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: 78
Signing time: Mon 02 Mar 2026 17:00:29 +0000
Manifest this update: Mon 02 Mar 2026 17:00:29 +0000
Manifest next update: Tue 03 Mar 2026 17:00:29 +0000
Files and hashes: 1: dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa (hash: cqmuHZPjL4XCoT6u5gjSCm4ZP/CSi/q+3ENIMNnmOs4=)
2: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: M9HlgucyJBYSH6pKAnotAEtspXl4LINMR5QwvH8a4i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:81:48:f1:91:23:10:77:c7:d6:1b:b3:12:0a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: Mar 2 17:00:29 2026 GMT
Not After : Mar 3 17:00:29 2026 GMT
Subject: CN=09b9557476d6201bc610f87a6ec69c25b740b4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:dc:75:6b:de:49:f6:41:32:3e:59:aa:8b:
21:3e:2b:e1:41:9e:7d:c8:b7:ec:29:8e:62:9b:de:
e0:84:13:a5:1c:dd:05:b8:76:46:8a:75:6b:fb:23:
39:6c:2c:65:94:a6:5e:d5:f1:a4:69:85:dc:f6:55:
a4:fd:cb:e0:c2:e2:1f:b3:1c:52:22:8e:2e:4f:a0:
3e:90:8a:52:f9:2c:78:b1:f7:11:f0:82:dc:bd:16:
12:44:b5:4a:37:51:06:9c:c2:a8:ca:75:15:25:45:
01:ca:89:ce:a3:7d:33:b2:72:f0:d9:43:04:16:bb:
9e:6b:e3:ed:0c:c7:ea:f2:ed:09:f6:17:ee:9b:15:
3f:cc:10:69:4b:fb:69:1b:3f:c5:05:e4:5f:eb:e8:
f3:ac:92:b8:41:a3:46:c1:36:bb:6c:49:40:51:e9:
32:65:50:9b:e2:fc:57:c7:ee:f2:f9:50:f1:d2:3f:
86:01:17:6c:cc:db:51:08:23:b3:6c:4b:78:5d:ef:
01:7f:41:5a:a7:28:2b:5f:59:82:74:bd:57:d4:3c:
4e:d6:f4:90:01:af:ae:84:4c:64:6b:4a:e3:df:4b:
f9:06:75:ae:20:5d:59:d1:7d:ec:c2:c4:bd:38:95:
6c:12:36:d8:8b:6a:a2:34:f8:69:c3:4c:2f:4d:42:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:55:74:76:D6:20:1B:C6:10:F8:7A:6E:C6:9C:25:B7:40:B4:FD
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1b:a0:08:3d:75:33:8a:03:d9:db:44:35:ed:38:94:a2:e3:
52:66:e2:43:bf:8b:68:70:9c:81:d5:5c:d9:fe:b1:93:bb:2f:
4e:b6:09:c4:56:35:6d:bc:69:02:d0:35:6e:bf:df:55:e8:9e:
37:cb:f1:99:5e:27:cf:f4:36:a1:e8:14:ad:4a:41:c1:1a:da:
9d:eb:ea:7a:7b:f8:41:f1:78:e4:66:54:22:1c:8d:f7:1e:45:
88:7c:d8:b9:6b:ac:fa:68:b3:2c:c6:1a:02:6f:a7:84:96:65:
c4:02:2c:71:90:77:73:92:22:27:86:5b:b1:a5:dd:6e:5f:90:
72:c4:10:2e:11:cd:1d:a3:73:87:e1:a6:ee:7c:c7:2e:a9:dc:
8a:54:2d:7e:dd:1b:b7:05:c9:ac:de:f2:2e:2a:40:b8:65:b8:
0b:22:89:48:e9:36:3a:19:8b:76:77:5c:ea:c5:a9:eb:27:01:
b4:4c:9f:d9:bc:df:51:51:5d:a8:59:61:e4:a4:17:28:21:c0:
00:74:9a:a5:89:0c:6f:5a:f9:1a:62:15:96:c8:fd:d7:14:3b:
79:ca:de:5a:74:90:6f:69:f4:07:50:26:83:ec:e8:cc:d0:e3:
50:79:cd:f3:4c:35:bf:ad:63:54:eb:ff:e9:38:ca:53:02:0e:
10:87:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:54 2026 by rpki-client