Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: mNuRbuYlIdKSBQPpU9tM+xixN/LndxZkQBiVd+G8ZV0=
Subject key identifier: 8B:D6:9A:1F:BB:87:1D:D7:0D:3F:9B:DB:E1:B8:0B:F8:18:42:84:7C
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 019CACEB6790B4E55EE211C1CF8703ECD800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:00:34 +0000
Manifest this update: Mon 02 Mar 2026 05:00:34 +0000
Manifest next update: Tue 03 Mar 2026 05:00:34 +0000
Files and hashes: 1: m1puyXsqifJhZhUWL-_6YnwL1mI.roa (hash: fIIYEWkHjVVTWq75uZEvzmf8hXUsvrfxvNJcwhLVfwI=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: 2bkblnrsp1/5+BqyBkegmnjRbPeKUEe/AggcN+VYAcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:67:90:b4:e5:5e:e2:11:c1:cf:87:03:ec:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Mar 2 05:00:34 2026 GMT
Not After : Mar 3 05:00:34 2026 GMT
Subject: CN=8bd69a1fbb871dd70d3f9bdbe1b80bf81842847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:18:ac:8d:0b:85:6c:a0:51:e6:b8:a8:f2:
fa:8f:8c:b8:8a:f6:fc:a0:5f:4a:87:a4:d3:f8:e8:
45:e9:ad:ee:d8:f7:d0:24:a1:58:0a:2d:ac:dc:94:
89:1e:15:32:f4:4b:1d:dd:47:ad:66:7b:ef:d4:a9:
8c:ee:c2:cc:58:fa:14:98:8c:bf:41:ec:af:9a:91:
85:c0:a6:47:8e:82:f5:1d:68:96:f6:80:2c:eb:ec:
87:04:6c:21:a3:22:db:cb:2a:d0:34:c0:12:65:93:
0d:94:37:96:c0:62:2f:ab:34:ca:2d:0f:f0:f0:29:
44:14:e1:e2:f1:ed:78:5e:36:81:10:44:aa:b0:17:
99:d0:06:32:de:ab:54:b4:91:b2:e5:34:4b:10:3c:
24:1f:80:a5:4e:36:8a:2a:f1:72:0f:c5:ab:76:26:
a3:d2:88:e7:9c:57:36:91:95:86:f8:20:64:f9:e9:
61:c5:83:d0:f8:bf:13:06:0d:1d:21:e5:49:24:a2:
1d:34:a1:ca:a6:9d:5f:2e:37:8f:a6:4d:9b:c0:ba:
be:11:fb:0d:e2:37:1a:88:99:7d:ee:20:e1:42:62:
53:4e:3a:db:2d:98:b8:da:08:3a:68:a2:a6:77:b5:
c9:6b:fb:05:ef:59:24:28:09:88:65:1b:89:23:13:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:9A:1F:BB:87:1D:D7:0D:3F:9B:DB:E1:B8:0B:F8:18:42:84:7C
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:56:57:c3:d8:0e:18:be:50:58:52:fa:8d:bd:80:42:51:
7d:70:9f:26:08:6f:90:37:5b:9d:fd:a5:17:4d:14:8d:1c:fc:
87:c0:cd:1a:13:d1:4f:0f:6f:5d:e8:c9:f4:52:6c:20:aa:98:
54:fc:01:96:0d:f6:00:6d:2d:1b:3c:90:c4:2a:48:82:36:2f:
02:a5:9f:e7:3d:c8:e8:e9:6d:1a:1a:e1:c8:af:4a:11:e7:a1:
d1:b9:06:05:ff:3e:7e:f6:14:6a:73:25:7c:3d:05:14:bd:d6:
3e:89:46:23:12:1a:cb:ff:0c:04:b7:c8:66:d9:b9:f5:5c:f8:
9d:d2:49:4c:01:3e:e1:7f:ad:1b:02:1d:04:f9:da:ea:dc:c8:
02:1d:38:11:89:9e:22:42:61:e7:4e:e7:03:39:c7:b3:d6:3a:
1e:72:c7:c9:cb:e7:c0:04:c4:08:ef:dc:c0:bc:5a:48:3e:7a:
ca:61:85:64:7e:c0:0c:ff:27:86:8d:14:87:a6:c3:9e:d3:fe:
2f:77:b9:9f:d4:c7:f8:64:58:97:be:25:62:b4:5e:b2:4a:0d:
82:a2:b6:df:fe:c3:d0:88:fd:b1:7d:73:72:45:ff:84:ce:0e:
65:e8:79:a0:4b:3c:3c:05:ce:fb:17:12:75:28:91:90:8e:a1:
c5:9e:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:13 2026 by rpki-client