Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: pSLmHReYxY80bpwY2mRr6j+G/UL1JBe8X15uspBba60=
Subject key identifier: 9B:97:C2:FD:C9:DD:12:CC:BF:E9:95:D8:20:F1:C2:3C:52:ED:04:93
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 019CAA587F344D31A4F51E1A85A081715B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 0AFB
Signing time: Sun 01 Mar 2026 17:00:52 +0000
Manifest this update: Sun 01 Mar 2026 17:00:52 +0000
Manifest next update: Mon 02 Mar 2026 17:00:52 +0000
Files and hashes: 1: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (hash: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: v+qr/vAILycPk74uWDb1zfRz1SeqgfRE20bZKLsXeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7f:34:4d:31:a4:f5:1e:1a:85:a0:81:71:5b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Mar 1 17:00:52 2026 GMT
Not After : Mar 2 17:00:52 2026 GMT
Subject: CN=9b97c2fdc9dd12ccbfe995d820f1c23c52ed0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:49:24:cd:39:e6:56:40:68:51:d1:3c:cc:69:
5e:a4:ec:2a:c7:94:34:de:e3:cd:60:fa:50:d8:df:
12:1d:0a:f8:cd:07:86:46:42:d9:f4:f4:2d:51:f8:
c2:9f:81:2e:65:52:4f:3a:a0:62:1f:2a:a6:58:7e:
3d:39:7a:58:9a:00:04:3c:d9:f0:cd:8a:93:cf:a0:
61:65:70:ef:de:b3:96:69:13:1e:a7:1a:34:1e:6e:
6a:5e:b4:8a:88:87:be:fc:ee:9d:45:2e:85:6b:3d:
ea:1f:0b:95:2c:c8:18:3b:91:38:66:e7:4c:86:89:
5e:b9:cf:91:54:47:04:a6:70:36:b8:50:a8:51:88:
d2:b3:bf:94:5b:56:a9:c7:58:a6:43:6c:ed:6a:4f:
6d:aa:1e:e7:e9:00:5b:99:15:7c:e1:05:41:87:72:
62:7d:2e:07:ad:53:44:38:3a:d5:b0:ed:a9:21:9d:
da:a5:03:ff:39:c6:01:08:2e:31:aa:f3:0a:91:63:
09:05:67:58:e4:c7:79:96:6f:29:96:1b:40:14:16:
da:18:71:c1:e4:d7:44:f5:96:c0:99:71:bf:c4:f6:
d8:fd:f5:ca:3c:93:f1:0b:d4:b8:07:14:92:c2:fd:
8b:f0:d0:72:15:4a:b1:1f:88:16:c6:7d:6a:2d:d6:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:C2:FD:C9:DD:12:CC:BF:E9:95:D8:20:F1:C2:3C:52:ED:04:93
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:85:60:3c:01:0d:1d:50:7f:8c:c5:1f:bd:eb:8e:52:48:01:
30:e8:a9:ea:81:31:6c:9c:72:af:5d:10:55:c2:ae:f1:aa:af:
f7:e5:4c:6d:9d:61:0b:3b:9d:63:02:cd:1f:8d:7c:a2:81:3e:
47:8a:4a:6f:d0:fa:cd:c3:e9:91:da:43:d5:f1:93:f4:ef:ea:
69:69:7c:85:8d:e8:9c:35:da:8f:b1:90:56:43:1b:e1:be:aa:
b4:4a:de:03:ab:64:1a:24:dd:47:6e:13:d7:58:d7:ae:05:3a:
ed:65:ac:74:ca:02:9f:28:50:7f:9d:25:85:ac:0f:18:1e:0f:
5f:9a:4c:64:d3:0a:aa:9c:21:84:fa:19:a4:a8:5e:10:2e:51:
f5:36:22:19:7d:a4:f8:91:70:37:16:39:d6:e8:07:8c:9d:f3:
45:c5:62:41:86:16:a4:c8:7f:e4:e6:3f:f1:12:e8:05:cf:ee:
bb:0b:66:fd:4c:04:0d:b2:fc:78:de:8f:76:53:74:2b:03:11:
8d:c7:6d:49:dc:04:83:7e:b2:75:68:6e:7d:87:da:de:64:49:
be:3d:7c:73:5c:c2:cb:4f:f6:3f:fd:be:d8:fc:2c:a4:af:9d:
07:d8:9e:2d:db:de:a5:ad:8a:ff:4a:08:18:41:da:24:07:67:
b4:3c:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:05 2026 by rpki-client