Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: sThHT3lGOoy71FsTA7u4E8joh2m6kO7jHbIh8pmgdE0=
Subject key identifier: 58:44:34:7F:13:4F:21:F8:DE:B1:0D:81:03:DE:AA:F6:ED:D7:8C:FE
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 019CAB6BB3F1B1FD670D57B5DF945D8ABADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: YExe/1ecfpiJ9coNV3IDmvMp0cRbRd1aP3k+lBxMHFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b3:f1:b1:fd:67:0d:57:b5:df:94:5d:8a:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=5844347f134f21f8deb10d8103deaaf6edd78cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:5d:58:cc:c4:72:51:0b:35:38:ed:d4:32:
1d:25:34:50:30:32:1a:d7:83:fb:87:3a:65:e7:4e:
0c:38:0e:ef:36:ab:39:28:50:e5:37:b3:0e:b9:18:
cb:9b:f4:56:69:32:4b:d4:df:f3:fa:d1:85:d2:62:
7f:e9:20:1d:49:c6:d1:ec:84:b5:21:3c:d8:60:53:
e3:a9:1d:c5:c1:10:79:03:cf:34:74:08:ca:2b:67:
aa:e7:32:ab:c8:71:81:18:b7:07:b8:19:ab:34:bb:
80:bf:5d:72:48:f0:6d:86:85:63:4d:0e:f7:c8:35:
dc:74:46:c0:72:12:aa:bf:51:bf:0b:5e:6e:9b:29:
52:2a:ab:4e:13:62:f5:8a:c5:48:9b:80:7f:9b:e0:
a7:9d:0f:6d:a1:48:1d:24:b8:15:56:0f:9a:69:b6:
b7:8d:68:69:80:c5:d1:5f:c7:8b:b9:a0:2d:32:89:
d9:f8:f1:31:3f:f3:42:ad:f4:8b:79:f7:7a:8c:a3:
8a:45:6a:ca:d8:b1:86:a9:b0:f9:2e:31:47:76:0a:
b6:6c:6f:a4:8c:70:59:c4:7f:dc:4f:a6:33:88:65:
47:e2:55:98:2a:0b:c6:5c:e4:83:b6:6b:1c:7d:f9:
0e:47:83:8b:8b:bb:af:dc:43:c1:2d:28:11:65:a6:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:34:7F:13:4F:21:F8:DE:B1:0D:81:03:DE:AA:F6:ED:D7:8C:FE
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:84:15:61:b0:e0:91:26:0d:06:ad:c1:36:90:95:46:20:
30:01:b7:4a:ce:a6:a2:f8:16:15:18:ed:5a:c9:7b:15:d9:fc:
f9:39:4e:f1:73:24:27:20:a2:0b:33:79:f0:8a:09:f3:b5:12:
ad:ec:26:44:f5:49:d0:10:a1:81:7e:c5:e0:7a:7e:3d:89:15:
cc:8c:ed:82:70:8b:8b:5b:c7:0a:4b:37:68:45:76:a4:1d:a1:
d4:6d:ed:ed:87:6c:09:b1:27:d3:bf:cb:f4:f1:a4:5c:e1:ec:
cf:cd:41:60:49:3d:d3:04:7d:07:69:a1:7d:88:a6:60:28:c4:
af:b5:db:58:3d:87:6b:29:b0:3b:94:0b:79:91:17:0d:29:09:
6e:0c:23:f8:e3:01:6f:f3:1e:f0:73:39:85:7d:59:3b:ef:b8:
a7:b0:85:ce:f0:81:16:55:0e:2c:34:b5:7b:b8:a4:25:aa:21:
98:06:dd:35:f7:5f:3e:78:bd:2a:6d:b6:3b:24:30:f9:f1:b8:
ff:d3:c6:cb:7e:46:c9:be:df:f1:a3:26:79:d0:c0:75:5d:57:
13:6f:1c:be:a6:e5:73:62:bb:e2:49:5f:d6:dd:d4:30:56:0c:
eb:e0:b3:35:fe:c7:8d:e9:04:63:9c:a2:90:46:b2:47:18:34:
18:b8:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:18 2026 by rpki-client