Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: aioHKWZn2eSlIuR/Gyzip6ym+TdZ2AXqwyn+l0M25gM=
Subject key identifier: 73:9F:A8:BD:8F:D8:8C:7C:B3:7C:E4:D0:18:9A:D2:45:DF:EF:37:29
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019CABD9AA62333457BE9FAEA0736E8651F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: 7Z7t5B8B25oTxhJzQ1CGhnSwhphUg7et/ClxYiycboY=)
2: pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa (hash: UleN7udW9nm6GoIks0+gA75pmdznZCROwYpJMoJdnLI=)
3: rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa (hash: IMvnqVI7Pxn9M/xoV7ucEgQIFBZmeqaGx6nvvxRV2JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:aa:62:33:34:57:be:9f:ae:a0:73:6e:86:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=739fa8bd8fd88c7cb37ce4d0189ad245dfef3729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:87:da:56:e1:dd:88:c9:ab:d6:02:3b:dd:
43:15:3d:27:5a:93:b0:e9:99:46:c5:f3:e3:3e:ef:
d0:b9:b1:21:f3:9e:c7:21:c7:ed:76:43:b3:58:b1:
40:59:5a:57:bf:ae:7a:ba:14:08:06:02:5e:40:d0:
3c:e6:ee:23:bc:fc:b2:9d:72:8f:ff:ee:15:87:1b:
e3:fc:6d:06:eb:2c:60:01:53:20:79:9a:75:db:b3:
3a:d7:2e:2d:2c:b2:b9:1e:4d:46:83:c1:31:c2:8f:
38:a9:b2:eb:a8:23:71:e4:57:b5:02:2e:5c:85:f5:
5a:ee:bc:27:b1:6e:3f:3f:a7:f5:ad:44:44:51:a7:
a3:6d:f0:d7:4c:c9:de:f5:e4:53:70:6c:a1:72:05:
97:70:1d:0b:1f:da:80:31:14:af:2e:df:14:a7:17:
ee:fa:bd:93:da:6a:67:66:39:6b:ab:7c:1a:73:58:
8c:59:95:34:05:3d:05:ad:78:51:e3:4c:88:dd:0a:
d9:ae:7f:69:85:24:91:04:05:cf:37:58:ed:41:bd:
de:38:96:64:89:a8:e2:e1:cb:b4:90:6f:74:a4:fc:
e8:a7:59:3f:f4:7a:66:1f:4d:55:fa:9e:19:fb:ec:
ee:66:2a:b5:bf:bd:8d:59:95:54:6c:76:7c:c0:40:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:A8:BD:8F:D8:8C:7C:B3:7C:E4:D0:18:9A:D2:45:DF:EF:37:29
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:27:5f:68:39:e1:b5:12:bf:6f:19:3b:8f:f6:82:d3:48:20:
71:87:da:91:98:78:b3:d8:51:b9:8e:ef:a2:62:a5:0f:56:8a:
5b:92:31:cc:24:da:ec:86:ad:ff:53:c5:d5:82:e7:41:d2:e3:
d6:67:af:b4:e0:02:15:46:11:7d:4f:34:db:db:1c:54:e8:3f:
b7:ea:ad:7d:89:66:f1:d3:41:c6:6e:18:e0:74:3d:da:f6:23:
f4:15:0e:de:a5:c3:76:3a:ea:21:40:56:e1:82:6b:95:6c:38:
47:e7:19:dd:3b:06:a8:38:05:9f:0c:f8:83:ae:85:ac:67:a7:
ea:5e:eb:cd:15:c8:e6:00:f8:e7:48:76:cd:2b:ca:fb:64:01:
02:2f:91:98:12:26:90:7e:62:a0:0f:37:bb:a0:9d:14:79:af:
99:9f:dd:24:22:f4:a5:b4:bf:15:03:ff:34:dd:e4:7f:17:3c:
37:7c:be:82:39:24:9e:bf:6d:68:7b:ad:75:15:96:86:0d:79:
ee:e7:62:fc:87:5e:b1:87:db:52:dd:0a:35:f7:f0:8e:5f:c3:
d1:ae:e6:84:0c:62:42:32:8d:27:7b:0c:11:ac:c9:a5:d2:ec:
05:43:e9:0a:12:95:58:a8:6d:d0:5f:cc:ac:d4:70:dd:44:b4:
1f:d5:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:11 2026 by rpki-client