Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: XxqI4/v/w5nPC1Lp3I8yGC3F/L2akaz5ikM5oyZ7sMU=
Subject key identifier: 4A:9B:B5:7F:5D:E7:F3:71:A7:B6:6E:0D:96:31:A2:EB:96:1F:7E:88
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019CABA20F0B08F9DE0529DE6A98ADD9D7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0F8B
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: aThq/d+xqA5b/IilB62P4EQOWFXSgzC2O1s+b4Yf2ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0f:0b:08:f9:de:05:29:de:6a:98:ad:d9:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=4a9bb57f5de7f371a7b66e0d9631a2eb961f7e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:4c:82:d8:b8:ed:31:5c:3e:a2:bc:be:29:
93:17:43:03:52:97:1a:20:f7:ac:6a:38:28:33:97:
ab:54:39:2c:c5:c4:cd:22:4d:70:37:b7:13:fb:ee:
6f:b9:4d:39:97:bd:a2:49:ca:54:06:46:6f:ee:79:
54:56:27:64:2f:18:fb:d9:d0:e2:61:8d:d6:8b:7d:
59:59:26:48:be:ff:e3:0b:23:a2:1a:36:f8:96:ed:
ee:30:9f:57:38:e3:d2:67:82:89:85:2a:3e:d5:cd:
e7:d1:93:ec:87:e6:2c:98:9b:80:91:79:02:31:37:
a9:14:65:b9:12:44:d3:bf:34:ea:38:9d:6a:7e:71:
b5:8f:63:81:27:78:15:76:9b:73:91:5f:29:55:2a:
e0:d9:d6:b2:55:9e:ea:db:d9:0b:49:85:3e:87:8a:
ee:5f:79:49:d7:1d:7a:79:cc:f7:48:29:34:91:29:
bc:3f:a0:01:ef:71:c6:4f:e1:dd:93:a2:15:fb:cf:
a2:0d:64:c8:02:e7:dd:cb:dd:03:90:03:d8:5a:0f:
40:42:18:1a:06:d2:e8:7e:d7:2f:ee:64:79:8a:4f:
2a:48:55:4e:3e:1b:28:e6:5c:8e:25:fb:89:9e:7b:
be:73:ba:8b:43:9e:5f:cb:6f:5f:e2:44:42:4b:98:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:B5:7F:5D:E7:F3:71:A7:B6:6E:0D:96:31:A2:EB:96:1F:7E:88
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:59:75:4e:ad:d5:8e:44:0e:2c:ec:7d:34:a8:f1:1d:ea:
36:65:03:19:64:b2:a6:85:a5:06:50:f4:c8:85:ad:89:16:45:
e1:53:e0:11:3b:b5:40:99:f7:b4:d6:b9:fc:ce:9a:62:ef:88:
79:a0:3f:c7:80:a4:6d:8c:ca:61:4b:0b:3b:e9:56:8c:50:11:
c4:75:ae:04:85:02:11:48:0c:f6:ed:50:43:93:b7:88:f8:4f:
16:2f:5f:88:f1:46:dc:17:83:8d:f9:34:cd:88:9a:c1:75:2a:
ee:9f:f8:7f:e6:2c:2a:fe:19:97:3f:71:b9:93:88:90:c3:47:
a3:68:c4:ae:e3:aa:64:9d:d9:3b:5f:41:cf:6b:76:ff:60:77:
32:84:3b:1a:cd:8e:dd:65:03:04:fd:65:0e:be:69:91:a7:67:
99:3b:2b:85:e2:fd:a2:4c:bb:7b:29:a3:6e:30:e5:f2:1d:30:
94:72:0e:a7:5a:0e:25:6c:9b:4a:13:25:74:d9:3f:8b:94:6b:
d4:20:47:c5:1b:f2:f1:74:d9:56:a8:0d:07:ca:f4:c1:05:7f:
07:4e:59:cb:d5:c9:8f:fc:a9:75:2e:4c:a9:eb:81:2d:c9:5a:
db:89:af:2f:0c:ed:00:16:97:2c:70:7d:02:e6:6a:9f:df:23:
c7:a4:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:40 2026 by rpki-client