Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: q5qjv9BGAHKIB33f6Hz41ycEL3eRKMVyF33PU4YriFc=
Subject key identifier: DA:8A:88:E8:83:3F:2D:50:91:E6:8B:3C:56:4D:8A:56:BD:71:D3:C9
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019CAAFD1FB400A9E0C34873A389D73FF22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 046C
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: L+6OZ5ZEMPN/k0JSTyDU3/XddolT/N34HVDSriqaGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:1f:b4:00:a9:e0:c3:48:73:a3:89:d7:3f:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=da8a88e8833f2d5091e68b3c564d8a56bd71d3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:e2:e6:43:0c:89:b2:23:87:64:6c:64:ac:
9e:3d:6b:78:8f:75:1b:94:2e:51:4a:54:84:4a:b3:
ed:73:5c:1b:b6:ef:52:73:9a:c5:5f:6e:87:cc:76:
0b:5b:e5:ae:30:6e:12:ca:c4:9f:34:df:f0:25:dc:
d4:9a:7d:7f:db:aa:17:7a:ea:f2:49:aa:2c:00:ca:
19:6f:ff:f8:e0:a8:6c:64:79:07:58:77:87:9e:51:
50:75:a2:03:e0:c7:4e:0b:c3:92:17:55:66:ef:f8:
17:db:1b:04:b2:cf:d2:13:e7:8e:66:ad:12:77:1a:
5d:df:54:61:1a:b8:6f:6d:ab:74:2f:b8:be:36:d7:
88:3a:13:a3:89:62:0e:58:40:69:8d:74:31:ce:21:
84:d5:cc:79:6c:7a:db:83:f0:47:cf:54:0a:0d:ef:
04:8d:f9:7f:4f:4c:70:e8:81:2c:b7:a0:b7:fe:88:
2c:37:ca:0f:7a:5f:e2:db:89:11:e0:ad:57:6e:15:
20:73:b2:b5:eb:ce:e4:a2:69:0e:d9:7b:b9:0d:15:
23:7b:2f:ec:12:ae:47:97:dc:2a:2f:8d:df:f7:02:
76:67:6a:24:4b:c4:20:ae:c9:88:29:47:dd:d3:07:
56:c5:7a:f8:60:bc:04:be:71:d3:5b:00:1f:ba:c0:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:88:E8:83:3F:2D:50:91:E6:8B:3C:56:4D:8A:56:BD:71:D3:C9
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0a:cd:1e:e3:82:91:fb:a6:0d:4d:2f:24:cb:a6:66:6b:40:
d4:be:71:87:5c:db:52:d1:e4:12:6f:f0:79:f6:f3:cf:db:9f:
e2:0f:87:59:3e:25:14:3a:b6:f6:02:ab:46:32:01:db:92:b7:
d6:fa:7a:72:cd:86:9d:94:65:67:b1:9c:0b:3c:c2:4f:11:48:
5a:c3:f4:5d:0e:d6:0f:71:f5:6e:b6:66:16:51:a1:43:25:50:
0c:2a:5f:05:e3:57:17:7d:12:10:29:ea:a2:47:8f:85:d2:e9:
af:4b:19:a5:3d:e1:c0:21:74:a1:df:0c:5c:eb:f8:64:ae:0a:
12:cc:41:d6:23:70:60:3a:eb:a9:ef:37:c4:4a:fa:4d:7d:a6:
c5:79:25:77:be:26:01:11:f5:7f:41:7e:b8:8a:6e:aa:45:f5:
1f:ad:89:ab:27:f9:fa:ef:f3:ed:e1:b1:29:f3:cb:a6:7e:b1:
b5:bd:7a:72:01:d6:f1:b4:cb:02:e6:58:94:9d:2f:52:65:a4:
03:c3:6b:48:10:80:4c:4b:9f:7d:ff:46:66:de:dd:18:c5:60:
21:51:4c:c5:ad:ef:43:71:06:87:1a:e2:2e:3f:b1:ca:bb:79:
7e:de:9e:28:ec:d7:eb:71:24:d4:2f:7b:a3:09:7a:fa:e9:7b:
ad:17:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:58 2026 by rpki-client