Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: /iwjv/pYTgAY0X/6Lx49W8VwXQVQCN/Q81D8SgS59u4=
Subject key identifier: 45:67:9D:AF:13:B0:DE:B9:1D:26:31:AD:60:43:25:56:7E:F7:69:5D
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019CAB6B6D70530C1D43D3FE232A991CCA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 07DF
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: JCWvr/9I323qilmg7sefrQIG/tULdWgSZPSBCkoIhIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:6d:70:53:0c:1d:43:d3:fe:23:2a:99:1c:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=45679daf13b0deb91d2631ad604325567ef7695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:f9:8a:05:6d:ee:f0:54:fb:0a:bd:2e:b1:
ed:e3:00:7f:ea:63:03:9e:c8:13:24:7a:fd:13:68:
36:a7:ae:f4:22:cf:f0:95:25:34:77:86:24:8f:9b:
ec:1c:8a:13:2c:af:9d:b3:6d:01:30:82:49:2b:c6:
de:51:98:16:24:48:78:46:16:37:f7:35:d8:2b:ed:
41:da:c5:cf:8f:67:bf:c6:f8:94:cc:54:58:42:03:
22:76:a4:ef:6c:4c:0a:dc:13:aa:ee:0d:86:e1:cb:
8d:f2:20:1f:9b:93:55:7f:80:58:b4:46:01:0a:b6:
6c:a1:d3:fb:e3:9b:df:11:d7:10:ad:b9:e2:1d:8b:
09:f9:7f:8a:9d:38:09:ae:7a:9a:a3:10:87:2f:34:
1d:79:f2:d2:a2:b1:12:bf:85:5d:7c:f7:80:9d:72:
4b:ae:5a:13:2f:30:26:53:c3:ea:31:04:d7:69:2e:
1a:c8:7a:bb:47:1a:e5:d9:2d:d6:7a:eb:61:9a:83:
8c:f6:21:ae:5d:ac:d1:72:8e:8e:b1:42:02:b9:ea:
6e:e8:04:12:b8:17:63:2e:20:3a:10:e6:ff:6e:44:
9d:8c:27:c0:3d:81:9b:fd:84:c0:d2:01:70:e5:77:
31:3f:8e:de:9a:7a:d0:6b:6a:05:cd:01:fe:68:62:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:9D:AF:13:B0:DE:B9:1D:26:31:AD:60:43:25:56:7E:F7:69:5D
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:05:53:76:d7:90:81:a3:7a:1c:90:98:fe:33:4d:e4:47:1f:
94:23:ff:31:e9:93:37:71:49:49:b3:a4:c0:16:35:a8:94:bb:
4d:9a:0f:d2:a1:ba:66:96:02:14:7d:4a:16:b4:ce:d9:fc:58:
c4:de:f6:04:fc:93:16:da:9b:b6:d0:c2:6e:2b:b6:47:bc:03:
b6:95:94:96:95:b6:9b:93:48:fb:e3:dc:00:f5:b8:d5:c5:11:
52:a8:1d:a0:1c:84:bd:05:e2:18:07:7a:e7:c4:3c:69:bc:91:
9a:72:86:fd:f3:fd:dd:fc:71:64:82:66:6d:a0:58:73:be:d3:
44:c0:08:ef:af:44:a7:45:38:dd:9c:b2:9b:af:6e:66:a2:da:
0a:4c:5e:75:39:72:85:b0:4a:a2:1e:2e:59:fd:72:4b:a6:ad:
05:5e:87:b1:38:4f:d8:13:7c:7e:cd:47:cf:25:21:5a:78:fb:
18:d2:e4:e6:c2:2e:59:86:fd:38:a0:d9:46:71:83:7e:80:95:
94:22:97:37:a6:27:0c:ab:3c:67:b0:ec:3b:6b:86:cc:fa:8a:
be:4f:e2:ce:c9:1a:23:b0:17:1b:9a:b5:b8:b7:ac:64:0c:2a:
82:f2:40:f7:7b:ba:dd:cb:f6:10:ac:34:88:e6:f9:64:eb:a4:
ad:06:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:52 2026 by rpki-client