Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: gSPd0PbeY4N2O7W+PPJPI0CdoGpOpmWyF9vWvs/NQCU=
Subject key identifier: 43:CA:C4:F4:A5:DF:D7:3A:A6:5C:B6:F7:8B:81:FD:47:E7:16:43:19
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 019CAD23102CBD53CFC3DCBCFA21BA1DAB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:01:21 +0000
Manifest this update: Mon 02 Mar 2026 06:01:21 +0000
Manifest next update: Tue 03 Mar 2026 06:01:21 +0000
Files and hashes: 1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: j18odUnXCdzvkeP2OFEvcM9MnvVTHtnZUZb3zgxdXxg=)
3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:10:2c:bd:53:cf:c3:dc:bc:fa:21:ba:1d:ab:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Mar 2 06:01:21 2026 GMT
Not After : Mar 3 06:01:21 2026 GMT
Subject: CN=43cac4f4a5dfd73aa65cb6f78b81fd47e7164319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:21:11:b3:33:27:fb:3a:d6:81:a2:d8:c8:
f1:3a:53:f9:4a:0a:d3:1a:fa:45:4d:05:e7:ff:55:
c2:8c:74:f8:c9:ae:db:55:9e:59:7b:a7:0d:78:e4:
54:9c:4b:be:d8:b9:d0:45:cd:8a:b4:d9:2d:0b:ad:
34:df:64:bd:72:b2:25:64:c5:d6:fd:57:3f:ba:41:
7b:2e:48:75:20:51:7f:b6:66:97:ce:30:fc:30:b1:
cb:43:bb:42:a0:62:59:61:e0:12:69:d8:62:0b:e0:
c8:35:50:9c:8a:16:8c:ba:98:2a:5b:4d:83:df:30:
cb:b3:f3:3e:7b:34:3f:de:90:d7:d5:57:41:58:b2:
48:3d:bb:62:f8:ca:07:2e:5d:0e:0d:62:e4:b5:44:
ca:93:49:c9:d1:30:46:31:cb:59:76:a9:28:10:85:
03:f6:64:c9:8f:15:52:71:d8:d4:80:4a:15:b6:d2:
6f:b7:05:10:fb:58:83:f5:62:b7:4d:64:1d:6f:6c:
92:b5:c3:37:ec:bd:1f:b2:cd:dd:ba:e7:33:24:80:
44:62:0e:23:cb:1e:4a:e1:9e:44:17:73:90:96:a5:
33:1d:09:7c:32:e4:e6:42:b6:aa:b7:16:0a:51:ff:
9b:b1:55:29:4a:2e:32:08:ae:0c:ec:86:b5:5b:14:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:C4:F4:A5:DF:D7:3A:A6:5C:B6:F7:8B:81:FD:47:E7:16:43:19
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:90:d4:4d:3c:2f:e8:9f:51:d5:36:87:82:6b:af:72:8c:
a7:75:1e:c1:17:05:a9:e5:32:52:7f:dd:27:ef:39:7d:24:ff:
e8:31:d7:a1:ef:c8:c3:1c:fd:42:6b:8d:1c:fb:a7:1d:66:05:
f7:37:60:70:51:9a:e1:b7:37:42:c5:87:40:25:c8:b7:b5:df:
b5:3c:ba:78:18:8c:1f:e4:11:5e:89:e3:41:62:0a:44:35:73:
9f:7f:6a:a5:de:64:42:de:8d:e1:76:cd:40:6d:70:6b:8c:0c:
72:81:62:91:09:17:57:24:d4:6a:54:67:f2:62:b4:e1:11:3f:
61:58:4a:25:2f:c7:a6:f4:86:6b:11:63:2f:cc:69:81:e0:c1:
14:95:68:ab:b4:74:e3:b7:a3:ea:9f:4e:d7:2f:4e:02:eb:c5:
e1:7f:b9:ea:f5:08:b2:eb:13:d4:ce:e2:18:32:9d:3e:7a:73:
46:88:86:1c:42:b9:4f:34:5d:ca:de:09:82:56:94:7a:80:f7:
6c:74:75:3e:34:6b:fb:ad:05:51:20:1b:51:8e:5a:6e:13:e9:
1f:c7:ef:2f:33:95:c3:bd:62:22:a8:ca:22:9d:6c:7c:e8:05:
a1:9b:3d:99:31:ac:52:34:93:cc:a7:eb:ce:dc:7e:7d:dd:51:
29:48:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:48 2026 by rpki-client