Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: vc3KmWCuguDK/lK/f230IGMISU7f66WAWkKmSIvwti0=
Subject key identifier: 89:4B:BC:42:03:25:83:AD:DD:2A:CF:11:A0:F9:7E:C5:FA:42:6D:40
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 019CAEDA3BDF369AEA2B31FB67C281383F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 0197
Signing time: Mon 02 Mar 2026 14:01:03 +0000
Manifest this update: Mon 02 Mar 2026 14:01:03 +0000
Manifest next update: Tue 03 Mar 2026 14:01:03 +0000
Files and hashes: 1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: 1HO51vKLcrj2sI8AuCqIX4xutFgq/BRuZpLR5L+JFo4=)
2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:3b:df:36:9a:ea:2b:31:fb:67:c2:81:38:3f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Mar 2 14:01:03 2026 GMT
Not After : Mar 3 14:01:03 2026 GMT
Subject: CN=894bbc42032583addd2acf11a0f97ec5fa426d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:62:2a:99:0e:e4:0c:67:f6:75:0e:19:47:
06:e4:81:ed:2c:ce:92:69:7c:f0:f0:62:eb:e5:e7:
ce:44:7f:a8:aa:12:3c:15:9b:ed:a2:a3:f2:c3:d2:
ab:10:cf:8b:90:70:3f:d7:b0:8a:90:12:88:f1:ef:
cf:ee:fa:98:ff:e4:3f:9a:9a:7b:b1:b0:82:79:5f:
1a:09:f1:49:19:d1:ad:74:b7:0f:b3:ac:c0:af:a5:
e6:08:2f:92:76:70:be:17:55:09:76:d6:93:0f:00:
4b:91:7e:db:0a:04:d5:ce:87:90:2e:98:7a:3a:1e:
5d:e0:dd:fc:01:9b:af:8f:0f:5e:26:3b:bb:7b:e7:
0b:5f:79:e6:a3:d9:0e:02:0b:e5:1a:77:6a:46:29:
bc:6d:5e:e2:c9:32:56:ce:58:9f:89:45:d5:5b:cf:
58:3f:a4:a1:33:ad:20:0c:ef:7c:c9:a3:3c:f0:25:
d8:ed:b8:f2:7e:43:9c:8a:ae:75:0d:d8:9c:bc:30:
73:ed:02:20:d8:56:80:ee:03:07:6e:ac:09:15:10:
4d:e1:8b:b1:2d:85:f0:46:55:2e:00:de:24:22:03:
df:86:ab:64:55:db:e0:6d:ea:af:4a:a5:20:8a:6c:
20:9a:ac:1a:75:15:13:86:27:a8:d4:d3:15:60:13:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:BC:42:03:25:83:AD:DD:2A:CF:11:A0:F9:7E:C5:FA:42:6D:40
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:71:f2:06:98:ee:28:dd:a5:2d:e1:8f:fb:9e:a1:78:37:d6:
72:f9:65:87:c1:5e:26:e8:20:47:78:8f:d0:cf:ab:4d:b5:65:
b5:b2:5f:e6:73:a4:8d:8b:46:8c:d5:ec:2b:78:b1:44:6e:be:
a5:e5:07:0d:ae:97:c1:e2:59:ba:b5:e8:88:28:b3:4a:05:24:
8d:6d:0e:00:44:52:b9:4a:0a:93:ba:c1:81:7e:fc:76:dd:6e:
7a:96:f2:65:9c:d3:e1:ce:7c:1b:ca:7e:a6:81:4a:ad:b3:da:
dd:ee:8c:34:7e:b4:32:61:92:b8:87:04:4f:c6:3e:f5:fb:30:
78:da:ff:ea:cb:f5:44:07:91:6f:48:1f:17:f7:ee:1e:23:e6:
64:be:69:e9:ea:e6:e9:80:ba:7b:59:b0:f2:82:b0:82:3a:74:
56:11:96:a5:f5:4b:98:31:b2:57:01:01:0a:3a:1c:e9:7d:58:
70:dd:9f:5b:26:e0:2b:cd:67:ee:0c:9e:47:a9:c0:9a:64:d6:
6a:ec:65:7b:59:79:0f:02:46:b5:c9:25:bd:b9:19:71:b7:55:
b8:52:88:bf:33:0a:1d:a8:34:87:51:f9:ff:39:b1:63:00:b9:
db:b8:e9:35:61:16:8f:77:ee:67:1d:8b:6b:19:54:32:d5:ed:
5e:2e:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:11 2026 by rpki-client