Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: NuD4jqahjvSOtycALQePJejnhsuPSx4kA2/5yYbrfW0=
Subject key identifier: 42:B1:DA:E4:9E:F7:34:CB:49:73:34:C4:60:F2:F1:6C:8D:01:98:7A
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019CAB6AEE2DC5EF37D690874C7DBE30857C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: /eHZmFwjn0G9NRTQEefdoF6Aa5uAKtHNOHRCm6zFM1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ee:2d:c5:ef:37:d6:90:87:4c:7d:be:30:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=42b1dae49ef734cb497334c460f2f16c8d01987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:1a:7b:ee:f5:fc:f2:e8:44:75:7d:97:ac:
fd:08:49:c1:6e:7c:d3:b9:1c:3d:46:b1:de:a8:bd:
5c:cd:19:f5:f7:27:7b:b2:c2:4d:a4:67:e5:95:53:
40:0d:fb:4a:71:df:77:f0:a3:eb:6c:91:da:74:a3:
82:5e:14:f7:3a:e8:04:13:63:1b:f2:e8:61:df:42:
2b:2d:93:f3:14:19:6a:3e:2e:e9:52:c0:75:37:6f:
00:17:11:21:61:ef:d7:f8:fe:f5:09:14:6b:c0:be:
0e:cd:55:61:ba:db:86:88:55:11:c9:79:c4:50:f3:
33:df:de:63:78:d1:16:60:e7:21:85:73:e0:1d:d8:
91:79:c5:83:1c:63:60:d6:a4:8f:d7:30:88:af:1c:
b5:a5:90:eb:12:64:ca:b5:a0:9d:cf:21:6f:8d:63:
05:04:e3:65:02:47:10:48:9a:a6:4f:25:8a:0b:c3:
9e:da:77:b5:52:a6:9d:db:a1:62:bf:17:e8:93:23:
12:b9:54:5e:53:38:d2:3d:1a:51:7a:fe:c5:0e:fd:
b6:f7:83:56:f5:20:18:c5:62:78:47:0b:f1:b6:f0:
89:75:c4:8b:8e:74:e1:42:8a:81:19:77:8d:50:4c:
44:5e:f7:e6:95:da:8a:7c:12:bc:96:75:88:58:85:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:DA:E4:9E:F7:34:CB:49:73:34:C4:60:F2:F1:6C:8D:01:98:7A
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:4b:e3:e4:c5:c5:d2:2a:be:7d:e7:e7:2c:9c:49:5b:07:
f4:87:8e:7b:e3:89:cf:6a:d9:d7:93:98:5a:21:5e:5f:c7:23:
be:32:c9:68:78:f3:71:cb:ff:51:33:12:21:31:04:6f:7c:e8:
78:0c:7e:59:27:6d:f9:5f:ed:09:09:95:b5:45:da:3c:f2:4b:
4e:7d:1e:de:d5:35:1e:39:cc:b6:10:47:c9:73:31:40:db:f8:
77:d1:1e:15:77:65:7e:a6:e8:57:07:48:a1:8d:38:5d:16:93:
15:d3:65:f6:db:b5:2f:4f:d1:7b:ac:5e:57:26:4f:b3:a9:c6:
3b:5d:f0:aa:2c:08:4d:dd:d2:7b:7e:95:38:c9:3c:17:e4:25:
b2:13:79:1b:4b:2a:b6:5f:22:44:ce:8a:6c:07:63:ea:44:6a:
ef:cb:ca:9b:46:3a:8b:4e:69:94:a8:b3:d4:c5:9a:6c:da:d8:
2f:f3:11:1d:16:7e:39:63:77:57:6b:58:91:a9:6c:75:e1:c6:
dd:64:98:58:4c:ed:25:31:9a:67:55:1a:13:74:0b:b6:bb:fd:
e4:8f:c8:d0:0a:54:6f:c7:5b:28:3f:63:80:af:01:30:32:d1:
6e:68:e1:6b:a2:7b:ad:45:b1:94:18:bf:36:5c:2e:9c:30:b2:
c0:a6:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:09 2026 by rpki-client