Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: o2bv/PhvEQgVGCiPyxgSt1MuVRBkoPkc4k9RG8+Oz4E=
Subject key identifier: FB:8F:A3:C3:13:B2:80:A2:AA:76:5A:21:95:DC:0D:D1:B4:AB:43:88
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019CAAC6C96C773D4DB7AD0F93CBCB1A3F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 15A1
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: S1qegLO2NR6WaqfSEqoeV3Pe6WzdvnJonaDD7GiHYFM=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c9:6c:77:3d:4d:b7:ad:0f:93:cb:cb:1a:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=fb8fa3c313b280a2aa765a2195dc0dd1b4ab4388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:13:b5:13:a1:ca:a0:a8:25:b0:e2:b3:a2:
b2:0d:68:aa:c7:89:b4:b0:69:52:84:e1:ce:51:ab:
d4:d4:e2:37:b6:97:e8:6c:d9:b9:a3:4c:60:5f:e4:
96:cc:a4:ec:c1:7a:3d:66:a4:a6:16:f3:28:d7:06:
7d:73:4c:20:90:08:20:0b:51:cf:bb:e2:f0:07:03:
e7:6b:47:ae:7c:57:9c:74:9b:ab:50:69:3e:43:76:
54:df:a9:70:b1:d1:af:36:f0:98:2f:43:2e:ba:ea:
f5:02:3a:28:15:90:e1:b0:e3:09:91:4a:0a:10:36:
2c:c7:24:33:2b:8b:44:e1:cb:96:fb:d9:6b:c0:cb:
9b:65:a8:36:5d:1c:56:53:c6:29:42:72:68:2c:7d:
67:d5:69:b0:28:44:00:b7:ed:c9:3e:9f:c4:00:b4:
82:c8:fe:16:14:df:3a:77:6b:1c:3e:ff:a0:e8:db:
b1:6c:97:98:39:b0:49:33:16:a5:95:24:c3:40:1c:
81:8f:01:53:d4:a9:f3:f5:0f:39:c3:42:9e:19:2d:
d8:7e:21:a3:b2:dd:05:50:1d:7b:68:82:3f:01:1d:
19:90:d1:36:09:49:84:3e:9b:f8:2d:7c:c6:2b:d5:
0d:92:39:7a:5c:cc:e2:fc:3a:f9:f2:43:90:e1:7a:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:A3:C3:13:B2:80:A2:AA:76:5A:21:95:DC:0D:D1:B4:AB:43:88
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:11:22:33:51:ae:a6:4a:ed:05:67:f2:f3:c3:80:bf:e3:
76:34:7d:81:58:e2:94:9d:12:7f:6e:49:25:77:f1:06:6e:4f:
ac:ca:e4:1d:9c:48:ce:6f:d4:95:2e:46:de:c9:e0:62:6c:bf:
07:72:10:05:73:94:26:18:2f:9b:42:72:b8:50:fe:aa:8c:a7:
4d:f6:d1:e9:1c:02:77:d7:3c:4c:1c:cf:9c:f8:9c:14:ca:08:
ec:28:d1:1b:b1:d7:db:37:83:75:a0:95:ca:21:3f:8a:c8:24:
68:ba:92:c6:9c:09:7d:df:43:0b:c4:dd:fc:1a:83:c8:db:4f:
45:54:6a:9b:58:53:bf:5a:d2:98:cd:b6:06:ce:ab:a7:36:be:
d5:82:6c:cb:52:67:47:43:83:9b:77:dc:b2:45:d9:20:3d:49:
0c:09:cc:3c:aa:0f:40:74:a1:69:84:04:1f:6f:b2:67:72:75:
6d:42:c8:ff:19:8c:23:c9:08:e5:e2:d4:ff:0b:6e:9b:4a:fd:
b5:24:3b:3e:3a:ff:4c:cc:20:6d:0e:6a:ac:6e:c5:bc:3d:e5:
e0:4c:64:7d:d8:11:e8:86:33:21:cd:a1:e6:46:c4:71:46:32:
bb:36:9b:70:13:c0:27:65:94:1f:3b:5c:66:08:88:17:a4:c3:
a0:99:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:09 2026 by rpki-client