Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: evhdAAtwmZpNU8td6ZnmDrcG3kygAMLZLQ6noSWYpVo=
Subject key identifier: F0:3A:EB:3B:6A:B6:B9:26:B7:54:FF:FA:F5:01:23:0F:35:96:47:99
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 019CA97CC58C203E31691DF3CD1D16958D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 158D
Signing time: Sun 01 Mar 2026 13:00:52 +0000
Manifest this update: Sun 01 Mar 2026 13:00:52 +0000
Manifest next update: Mon 02 Mar 2026 13:00:52 +0000
Files and hashes: 1: 6feLhGZNxoXnjxOWltLLEWo3w_w.roa (hash: WsluKnulotDxPx8j4niJ1mddplF8Z7pdwFLIc7RHFSg=)
2: jIkBln67tBEqFrddInS7FiZiLBA.roa (hash: XeN/N3RSEi8zGMX3oXezfBvkd+PC1ufTYKGx8KmK4ps=)
3: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: D84FC2gUhoaIAxoY9yLJ2oQ3HNT/X2GLGAV+wohzkaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:c5:8c:20:3e:31:69:1d:f3:cd:1d:16:95:8d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Mar 1 13:00:52 2026 GMT
Not After : Mar 2 13:00:52 2026 GMT
Subject: CN=f03aeb3b6ab6b926b754fffaf501230f35964799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:6f:85:52:0a:8c:4e:6a:56:88:50:07:8d:
74:ca:54:99:bb:e2:9c:43:1f:d0:93:00:88:83:94:
ba:85:9b:16:1c:35:27:6c:28:82:90:f6:55:7f:28:
bc:58:99:c7:b2:17:90:74:19:d1:23:c8:5f:f3:43:
8d:d0:3c:db:c8:55:dc:90:9c:24:67:41:00:fa:a2:
e0:8c:0c:bd:73:37:88:b7:5e:ee:a0:9e:95:e5:33:
75:56:89:63:4c:89:62:03:41:9c:5b:e7:74:13:3b:
ee:5a:2e:fb:df:4b:39:5f:e2:23:55:17:9d:17:0e:
6c:85:67:d9:65:42:fb:3a:70:48:fb:df:7c:d4:7f:
68:49:2a:a3:52:48:a6:af:df:79:33:80:dc:ae:75:
ad:a3:7f:8b:29:c5:bc:20:2d:a3:57:2c:ad:a5:4a:
40:28:f8:73:79:b5:aa:67:1f:c7:90:88:49:1e:9b:
d7:d0:55:92:fb:ee:09:bc:a0:82:d3:8d:57:a2:f0:
fe:2d:e9:81:d9:c9:0a:62:74:ca:52:85:6d:24:cb:
d8:91:47:4f:20:05:6d:d9:f7:c0:c2:85:a3:df:db:
50:a5:b3:7f:f6:d9:70:27:e7:d5:85:95:19:ed:d8:
13:0e:c6:d3:c9:22:13:85:56:83:5a:5c:78:d3:2c:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:EB:3B:6A:B6:B9:26:B7:54:FF:FA:F5:01:23:0F:35:96:47:99
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:67:96:3b:b8:88:4b:48:f6:b9:c8:6d:44:c0:37:2f:ae:90:
50:07:42:68:ec:5d:6d:66:82:89:fd:d1:67:8c:e6:5a:6c:09:
da:b3:4b:36:cb:91:a7:7e:fb:43:cd:84:07:48:81:d8:76:db:
8b:64:d1:fc:86:b9:5f:2d:43:3a:ec:38:8d:67:82:8d:4f:63:
59:c4:00:31:1f:71:a8:4e:d4:86:25:3a:0a:21:bc:ae:f1:21:
0d:25:a7:ea:08:18:87:fc:9a:60:43:19:7c:58:39:9b:90:e0:
67:c2:00:21:1a:61:50:89:ab:0d:97:69:f9:14:22:6f:0d:88:
72:46:39:d2:b4:ad:e8:75:a3:1b:8f:cf:ee:e3:14:37:48:51:
78:f4:15:32:b8:dc:19:79:3a:cd:1b:f9:58:a9:f1:6e:e8:18:
3b:7a:19:5e:bc:62:6b:a4:e3:0a:0b:fb:68:7f:f3:31:f8:1b:
7b:c0:d5:a8:ac:f4:f0:5d:3d:6d:da:ba:ce:60:92:de:1c:db:
18:ea:4f:89:5c:40:53:b4:d5:e9:41:83:ed:45:d1:55:0e:5f:
5a:39:90:d6:ad:a3:bd:3a:90:55:2b:85:13:f2:1f:f9:22:12:
c3:be:5b:cf:d4:0d:1f:ad:7e:43:77:9c:e4:4e:13:43:5f:03:
eb:ef:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:04 2026 by rpki-client