Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: 1ZUeKC3hrlr1LHVD444XKYTLzWQykGix80n8E4rjLYU=
Subject key identifier: 0B:DD:EC:69:3B:43:F9:A0:33:89:EA:89:0C:19:B6:E2:A3:54:06:90
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019CA9B355E7751DE0B84FB9F7F736657276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 1051
Signing time: Sun 01 Mar 2026 14:00:28 +0000
Manifest this update: Sun 01 Mar 2026 14:00:28 +0000
Manifest next update: Mon 02 Mar 2026 14:00:28 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: ZhIyFbqwxGPguTaDOyFEcj6MBRwjCgdfW9G2MPXv7RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:55:e7:75:1d:e0:b8:4f:b9:f7:f7:36:65:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Mar 1 14:00:28 2026 GMT
Not After : Mar 2 14:00:28 2026 GMT
Subject: CN=0bddec693b43f9a03389ea890c19b6e2a3540690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:e3:80:51:7c:2d:0a:a5:55:14:b3:f0:58:
98:c0:26:73:86:7b:36:d8:1e:03:45:30:41:07:82:
0d:5d:46:1f:10:53:28:cc:40:aa:c8:60:a5:8d:0b:
a2:f5:2d:99:5b:f5:0a:1f:4c:f0:ed:83:d1:4d:9e:
9b:50:28:63:68:bd:95:14:e2:fe:e1:90:12:cb:45:
5e:ab:5e:63:ca:2a:ba:bc:b4:72:bd:35:8c:e3:31:
c1:61:0b:df:7b:bc:34:44:07:c9:de:d8:e8:2e:1e:
32:04:96:8b:ff:ce:4d:ab:b2:1b:25:2f:12:ca:54:
e1:11:2d:e3:ee:de:d6:bd:77:fc:84:0c:10:28:a7:
16:3e:73:9d:6d:b1:3a:29:da:24:66:28:b4:5f:c4:
9f:11:0e:b6:6a:b6:57:24:df:77:04:df:3f:77:42:
a5:bb:d2:12:3f:19:c6:5d:ac:14:94:01:6d:e8:2c:
d3:e8:e9:db:63:ac:7f:5d:92:07:47:f8:b8:c7:d9:
38:1e:5e:e5:02:b5:9d:ec:c8:56:aa:b0:42:a4:1b:
72:97:ad:45:4f:d3:d6:79:c5:f4:99:e2:a0:df:45:
d2:12:5b:e9:88:6a:5e:e0:ae:c7:db:e5:94:1a:c6:
40:6a:d7:39:d6:93:85:b6:1f:a8:16:e3:bd:2a:11:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:EC:69:3B:43:F9:A0:33:89:EA:89:0C:19:B6:E2:A3:54:06:90
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c1:55:6c:9e:f7:fa:d1:93:f8:de:5a:4b:64:18:b8:72:cf:
76:86:cd:37:57:c7:cb:24:82:3f:d4:75:0a:06:07:b6:de:3c:
75:d7:bc:d7:b6:8c:cd:a3:d5:96:8b:a1:a2:92:fe:23:a8:78:
be:15:7b:f4:dd:a8:96:cf:3e:52:a0:0f:86:3c:8b:db:b9:bf:
60:8e:4c:c8:80:98:06:e1:60:18:89:84:b6:fe:cd:f9:80:31:
b6:e2:33:a4:a6:b6:52:28:7b:a7:54:0d:14:8b:36:d3:fd:d2:
87:8f:44:73:30:45:8e:5a:b5:ad:5f:28:bb:9e:23:d7:18:46:
3d:00:53:31:79:31:7d:3a:83:9a:a4:fa:6a:c4:5e:83:f7:31:
cf:d2:42:79:d5:4f:a8:cb:3a:c0:ad:38:0b:d5:0d:dd:b6:da:
97:8e:b1:41:ba:d7:90:1e:c5:5d:8f:aa:d6:ef:e8:0b:e7:73:
02:2b:05:4c:de:e7:45:ec:ce:d9:cb:66:3a:b5:eb:ec:ab:8b:
c9:db:70:1f:10:68:07:5b:8c:f2:a0:53:89:4c:09:ca:16:50:
24:5d:f8:57:a6:ab:6a:4b:bf:7f:0c:70:14:f5:b5:56:6f:25:
e0:ac:85:20:51:a4:f9:47:49:a1:1a:66:8a:ed:78:84:1a:a2:
bd:58:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:45 2026 by rpki-client