Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 376ZJtHEGUx1yRBK8zvdPEJYK7wk0pK0cXbdItErmfA=
Subject key identifier: BD:16:00:D0:28:D0:4C:D7:CD:A6:0F:BD:13:4B:09:D2:C1:0F:E1:65
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019CAAC6EB56B03EBE893FAD0B11BA816AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0E95
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: HDKPqD6SoSePxkml1p+LHU55sAoo3XUlXiCaT1lBLmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:eb:56:b0:3e:be:89:3f:ad:0b:11:ba:81:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=bd1600d028d04cd7cda60fbd134b09d2c10fe165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:89:b7:5e:98:00:5d:37:ce:57:71:5d:60:
44:51:b8:33:00:0e:75:69:4f:e3:1e:35:c3:0b:c5:
63:73:c0:db:1b:19:6c:19:49:56:b2:38:ad:30:6c:
9c:05:8f:a1:fd:bd:5a:61:25:2b:fb:19:c4:65:87:
af:4d:d0:bf:74:71:54:8f:15:8f:33:5e:99:e1:b8:
c8:3d:84:41:fc:6d:ca:da:ce:70:0e:a8:dc:5f:89:
54:f9:c0:3f:77:84:93:4c:5f:73:8a:8d:5d:b6:3f:
57:d6:64:2e:e3:d6:b1:03:52:74:6b:f2:cc:3a:c2:
a4:17:4b:5b:96:8e:af:e7:6d:31:67:01:32:96:ba:
c0:04:71:07:80:a2:37:de:de:36:c4:ff:a1:8e:50:
4d:36:c0:4c:92:92:d3:cd:90:ae:d6:f6:3c:79:bf:
3a:e4:91:5c:5d:a7:ac:e7:ab:2d:ac:5a:d4:29:7c:
ee:76:be:16:a1:af:87:69:75:00:74:db:9c:20:1a:
d6:e6:3f:da:96:dd:cf:db:d5:dd:61:25:c7:ad:0a:
1b:23:25:45:13:4f:cb:ff:85:7f:de:19:a8:19:d0:
a3:2f:58:fb:df:d9:fe:dd:4e:92:ac:44:22:d8:3b:
5a:63:f5:75:45:c7:f1:72:cf:f8:96:ea:f3:25:7e:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:00:D0:28:D0:4C:D7:CD:A6:0F:BD:13:4B:09:D2:C1:0F:E1:65
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:16:59:cf:ec:0e:db:a5:6e:ef:87:23:c5:fb:7f:75:d7:9f:
50:17:7c:2b:08:23:07:d1:8c:8f:ff:25:b5:75:1c:42:01:4f:
7a:bc:d0:7b:f2:fb:02:e5:69:38:1b:3a:f3:77:c3:09:8d:2a:
33:50:78:4c:ff:f8:7f:93:d9:0b:30:3d:f9:36:34:d6:aa:08:
8e:e8:b8:fa:9d:d1:d4:01:76:d9:eb:74:f6:37:aa:bb:55:82:
30:87:c8:fb:9a:f2:1d:18:29:a3:58:32:44:54:c0:a7:41:55:
61:04:98:02:97:d2:ce:b4:ff:63:fe:93:25:19:c6:7c:2b:fa:
40:10:2c:d8:64:0a:cb:85:49:84:13:1f:3a:59:27:bd:b6:31:
76:e3:57:fa:a0:14:ab:38:49:c8:fe:44:52:5c:86:56:51:07:
8d:00:ba:fd:be:60:ca:e4:54:2c:24:a2:ad:47:d4:74:bb:d1:
d2:4b:cd:23:cd:b3:4b:21:09:9c:77:fc:aa:66:67:c8:83:28:
50:50:8a:15:cb:19:e5:6c:c4:bf:2e:d7:48:d0:6b:d2:b5:49:
53:46:24:52:7e:4f:41:0b:e9:59:b6:cb:7e:a7:b7:61:e5:fd:
f4:43:cf:47:0e:ba:6e:e9:31:45:a6:35:16:5b:db:30:9d:76:
c2:c9:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:48 2026 by rpki-client