Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier: HdG5trOjdq1nj+dQb7wUja6DzAzm8GK7g+BNTdRISrE=
Subject key identifier: FB:79:15:1A:3E:B0:7C:95:C0:BB:5F:A9:7A:76:CA:DE:9A:EE:B6:4F
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 019CABD98DD23020E409C19A80168F224721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number: 085D
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: _R9reWa8MF6i_0GtsC9MqO5XdM0.roa (hash: RpCmFg94gtFIxSyeDWhJqoErRSnSfBXY9f+R3zExZ1k=)
2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: Nr4AyxGmWZJ0OG+vpCleBopk861Sk0gu9PBvQ4DUY88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8d:d2:30:20:e4:09:c1:9a:80:16:8f:22:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=fb79151a3eb07c95c0bb5fa97a76cade9aeeb64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:82:c2:0d:0b:9f:14:3e:ce:ae:52:79:43:
1e:b6:f8:20:4d:7a:c9:b6:bd:b9:31:01:c6:a6:8c:
7e:0b:55:ab:4a:88:c9:20:2b:f0:2b:9d:46:ff:79:
26:fa:94:9a:64:e1:da:b7:db:8d:0f:93:0d:96:a6:
fa:95:59:96:27:fd:66:24:38:8f:83:f0:d9:59:3f:
56:2b:fd:15:43:69:a5:fd:b8:7f:fb:6f:a6:00:ad:
5d:e9:dd:c3:8e:55:4b:84:7e:a9:a7:a0:ad:c9:4c:
9c:a6:8b:e1:b5:3b:9f:3b:f6:12:7c:a8:ee:aa:82:
a3:1b:16:2b:13:bd:ee:eb:02:76:12:35:61:72:9c:
30:69:34:ef:c7:4c:65:39:ee:9f:ae:21:4f:e5:d9:
97:99:f6:e0:42:87:56:4b:c8:99:6e:45:21:fe:a4:
34:f2:c9:c9:02:88:40:52:3f:c7:9f:93:cb:2a:5a:
a7:69:b3:7a:fb:22:37:81:af:b8:f5:02:88:c2:93:
0f:29:92:2d:d2:0d:67:ff:48:a7:6b:a0:f6:b0:50:
76:96:fe:1e:6d:35:48:58:f5:50:8c:91:23:99:3d:
e3:0a:b2:49:43:fb:c5:08:c1:00:a6:01:17:70:1f:
0f:02:e2:90:20:4c:d8:ff:fc:65:6f:3d:bc:0a:6e:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:15:1A:3E:B0:7C:95:C0:BB:5F:A9:7A:76:CA:DE:9A:EE:B6:4F
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:10:4f:45:a4:5f:f3:4c:69:be:14:29:fb:d1:fa:1b:8e:62:
52:6e:9f:9a:d9:cd:9a:69:8c:e9:0a:ed:44:59:0a:46:d1:37:
76:f0:5b:c0:17:10:99:7d:94:91:c2:5b:58:8f:99:d8:b9:1e:
98:16:85:fb:96:00:64:27:ba:fd:99:c2:fa:10:c2:f5:cb:77:
06:6a:0d:ba:15:16:43:20:9d:28:50:69:83:e0:2e:5a:6c:9b:
8a:16:70:c3:75:45:27:f4:ba:cd:fe:1c:ca:5b:69:24:ca:70:
07:2b:cc:32:3a:99:e4:8b:3b:94:6d:27:99:94:67:39:8b:93:
07:c4:20:39:9d:b2:4a:fe:c0:6e:be:92:5b:1b:e2:0f:94:67:
0b:e1:ff:e0:f3:fd:e6:e6:9c:7a:f5:16:61:bb:7c:2f:35:c1:
af:a1:00:3e:61:6b:b2:62:22:03:b1:4a:29:64:da:1a:6d:95:
ff:fe:86:37:00:c2:f1:dd:7a:90:80:df:0f:80:de:7f:81:42:
71:50:7e:89:7f:1d:cb:cf:8d:25:f8:8e:4b:5e:dd:da:79:f0:
35:81:5f:d9:fa:30:e2:a8:ed:5c:4e:8b:7f:3d:7a:bd:20:93:
92:0f:96:b8:65:76:96:1e:9e:2e:4f:53:1a:54:65:e3:1c:51:
97:05:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:35 2026 by rpki-client