Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: jgJKhMuCm5Gg9npw+n4HZA+jklHOuqgNGN+7039yDZs=
Subject key identifier: 0C:AA:BB:9C:73:0D:68:D2:28:29:8F:5D:0B:DE:14:36:0F:4D:38:4F
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 019CAB6BEF8518C735C5C71F3C61E127C920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0D90
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa (hash: kONkryDJeTUuCH5Fe3xmEEAXi2nBdTccviaLlcLsCzE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: 6A1cgEQtTISOC2RiBuRE8haB6vkXKP3KYPLF4meMvAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ef:85:18:c7:35:c5:c7:1f:3c:61:e1:27:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=0caabb9c730d68d228298f5d0bde14360f4d384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:ed:31:37:55:4b:28:df:ad:1f:9b:a4:b9:
4f:f2:32:6e:a7:be:24:2f:d0:0b:b9:74:0e:f2:ea:
3c:c2:45:7f:09:e2:90:81:a3:75:d1:73:11:48:45:
4e:9b:f5:e1:06:8c:23:80:9f:3a:f5:3c:81:2b:47:
73:f0:db:af:8f:47:1e:23:5c:8d:d9:c3:de:b8:c7:
73:68:8e:d3:15:25:4c:a5:70:a9:06:74:3c:9d:72:
e5:bd:14:f6:3b:62:6a:e1:7d:c3:6b:1e:bc:0b:5a:
8e:a9:ba:75:cc:7c:3b:be:8a:32:c3:6e:54:fb:20:
60:10:70:7f:a3:ae:2d:b9:89:09:13:9c:c3:3c:9f:
fc:1d:15:1c:fb:d3:a0:0c:f6:ef:97:90:5c:8b:7a:
73:68:4b:6a:c9:9a:7d:a5:e8:a7:d1:e9:82:4e:f1:
5f:fa:31:ae:b0:89:be:6a:ec:67:fb:af:81:fd:9e:
c7:b7:88:0d:71:5d:f6:13:cc:97:de:3a:a3:c1:95:
aa:49:72:fc:48:42:16:5b:89:74:aa:7e:36:71:76:
51:48:f3:b6:0d:f7:7c:58:49:83:74:8f:55:95:ca:
ae:55:d4:bb:75:ac:88:28:0c:64:ab:f4:c8:b3:0f:
a5:4a:4e:88:fa:04:a7:91:11:35:8b:da:7b:02:f9:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:BB:9C:73:0D:68:D2:28:29:8F:5D:0B:DE:14:36:0F:4D:38:4F
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c5:30:1b:01:0a:42:06:26:a9:9c:8e:cc:4a:64:43:5f:b5:
65:b3:d3:b4:b7:38:53:dc:57:01:58:56:f0:d7:02:9e:d1:b1:
ad:d7:c8:8b:35:4d:13:d6:8a:82:e2:33:fe:5c:7a:cc:16:9b:
db:e8:e3:d1:ce:a2:7c:19:17:cb:73:ef:75:9a:a3:09:cc:18:
2b:d7:36:8c:0d:0e:bb:85:d6:1b:2f:bd:f5:bc:c6:10:41:b2:
f2:9c:1e:de:fe:12:41:b3:c4:0d:64:da:6a:35:f0:41:dc:6a:
41:f4:b6:fe:32:8c:47:6d:1e:a6:61:03:d7:79:65:7c:7e:b8:
8d:82:59:9f:67:c3:66:40:cf:75:02:74:ed:bd:39:84:fb:c6:
42:3c:51:d4:db:26:47:5c:fb:87:00:f3:8c:bb:1f:ae:f6:87:
a8:39:71:b7:a5:ba:30:f1:ad:59:d8:0a:70:24:86:2d:51:68:
93:da:ff:59:a4:47:4c:f2:2c:19:bd:7f:a6:43:c9:c5:46:7e:
85:62:f9:93:2c:8a:39:25:ca:95:40:2b:af:62:3e:c4:4b:bc:
2c:7e:1a:98:a5:e3:6d:10:3c:fa:f9:13:70:55:d6:ce:a2:f7:
b4:83:3a:68:0f:13:4f:7b:59:0d:fb:97:d5:7d:93:77:f8:87:
71:3e:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:20 2026 by rpki-client