Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: kOiAJTKer26KfYjjyVdCEqsElImdiCV9lvfTv8FeJLI=
Subject key identifier: 92:BE:B8:51:62:87:2C:5A:86:C4:3E:91:FF:19:4B:EB:D9:28:32:FC
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 019CABA1D4A97E8C9F587B22022FA7812C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: k8cdudOxt-UXEB9vti7Ssvsk5vU.roa (hash: Is0dEg8TeiJuTJaXHNZDTXw2F+T/OPQFA/UKJWJv0ys=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: 6gFSOzTj9H9hkw4oo0WLFbv9/XHfc0vonNNv/AQFosY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d4:a9:7e:8c:9f:58:7b:22:02:2f:a7:81:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=92beb85162872c5a86c43e91ff194bebd92832fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:bc:55:c3:79:29:47:66:24:cf:a1:c9:1e:
91:8a:25:e8:5c:d8:f8:4d:1d:94:72:ed:fe:56:16:
19:f3:bb:3b:07:78:16:61:15:df:a6:2a:f0:b2:50:
dd:65:ff:63:13:4a:91:7f:af:39:11:1b:2b:b8:e0:
e8:33:2f:c1:95:e1:bd:a9:4b:d0:91:97:ee:bf:e2:
20:84:f4:b8:08:5f:2b:c8:a1:c4:12:9a:a4:cb:21:
a3:12:ed:4a:ef:73:e1:b7:c8:2e:f2:f5:f7:74:d8:
72:dc:35:5d:45:b1:42:1a:93:51:6b:37:dc:05:3e:
b7:b2:b0:34:6b:59:83:73:6c:6b:57:f5:18:22:3d:
05:7f:22:58:48:0f:e7:55:d0:61:6e:26:dc:35:ad:
b6:62:96:13:0c:c2:2d:25:08:72:e6:1c:a5:18:c8:
77:ac:99:9c:59:59:03:f5:cc:bc:77:82:5d:24:9f:
1b:08:64:51:1a:ac:de:f6:ce:e9:70:09:0b:63:18:
95:ef:5a:3c:8f:af:7c:96:c5:23:77:71:ad:37:fc:
65:b2:04:29:ba:8d:c4:e0:58:6d:e4:db:f1:6e:14:
88:42:d0:53:76:ea:a2:7b:20:29:6f:49:2d:f4:03:
f8:6f:47:dc:e3:dc:73:3e:88:8e:a8:19:ef:09:64:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:B8:51:62:87:2C:5A:86:C4:3E:91:FF:19:4B:EB:D9:28:32:FC
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:5e:f2:4f:3e:52:ef:81:b1:a5:93:0b:a3:28:36:ff:79:
d8:e9:b9:1a:5a:1f:a7:cd:8d:d4:4a:23:0a:df:d3:90:91:d9:
c9:14:47:f2:c8:68:cd:7e:79:2d:d8:5a:e1:06:2c:97:cb:2b:
b9:3a:6d:f3:09:75:db:a9:2f:61:26:36:93:46:be:a5:7a:5b:
75:f6:5e:5c:a0:82:c8:cf:3f:9b:ca:0d:b4:6b:82:97:0f:10:
27:b4:75:8b:48:d4:37:13:5d:8d:72:2a:ae:c8:39:56:81:2c:
46:d2:b0:b2:fb:44:78:7f:19:97:05:9f:3c:bf:63:2d:05:22:
4a:e6:ce:72:50:1d:8d:41:5c:c1:34:9e:87:4f:a3:7c:15:99:
db:f7:98:42:8b:4a:97:77:29:ee:dd:e7:87:14:0d:af:53:4e:
5e:cf:55:23:19:0f:be:b9:3d:9d:84:18:5b:d3:aa:c0:f7:40:
52:c2:6e:57:d0:2f:a7:4f:2d:02:4e:d2:36:ee:86:27:df:55:
40:c5:0a:d9:12:ca:1f:0e:5c:95:88:86:ca:40:7b:9e:8f:78:
6b:37:0f:8e:31:1f:9a:24:cd:7d:fd:58:54:49:a4:c1:20:4f:
31:10:89:a3:97:95:cd:bf:07:53:7c:e4:00:6c:73:91:bf:02:
8e:77:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:07 2026 by rpki-client