Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: 4rTos57zSoplCWLed0fEgLsEW1+5UbJ9eY16xZy3k6s=
Subject key identifier: AF:EA:59:10:9B:6C:F3:60:16:CF:EC:A3:E8:15:51:EF:6D:3B:F8:56
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019CABD9AAC91D32D8DE91E613BB2BCD2A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0FCF
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: /ywfyyu518iOuOny1ye7GltpPkxDMpSOsJorM2p05iw=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:aa:c9:1d:32:d8:de:91:e6:13:bb:2b:cd:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=afea59109b6cf36016cfeca3e81551ef6d3bf856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:4b:6a:6c:52:17:c9:88:ce:df:5b:69:47:
bf:14:72:70:6c:6a:da:4c:88:8a:76:80:68:e4:30:
28:99:af:f1:d5:c0:06:2e:15:7a:e0:c3:09:01:ef:
89:e4:ad:5c:79:27:51:3e:e3:d1:eb:82:b5:24:ca:
d0:c1:65:6c:18:ef:58:09:ba:1a:d5:e2:39:0f:d1:
bc:fc:cc:e2:88:3e:64:ef:d9:f7:8d:b7:e1:84:87:
5d:db:04:09:46:43:37:c0:a4:09:8a:5d:da:1a:79:
60:31:a8:c7:5b:1e:20:35:24:f8:4e:e7:f7:b7:e9:
25:39:06:85:9b:45:96:74:f2:c5:9a:7c:28:95:75:
fe:c3:78:76:1d:b2:d8:0d:0a:e5:68:d1:12:f7:14:
70:66:28:0e:db:dc:8b:02:0f:93:b3:31:c1:6c:47:
2a:8b:22:a9:b4:63:b7:f1:36:41:0e:0b:48:a5:71:
f3:e9:bb:a4:0b:92:36:87:57:d0:97:e7:52:2b:18:
15:d4:46:6f:82:84:4d:cf:dc:e9:4f:fa:35:7c:73:
ef:f2:db:0e:59:42:5a:a4:3f:58:3b:eb:22:df:18:
cd:b5:9e:89:cb:c7:e3:a2:8e:f9:c4:41:a1:26:8b:
c8:f2:6a:bc:ef:d8:95:a4:64:ed:ef:66:94:e8:83:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EA:59:10:9B:6C:F3:60:16:CF:EC:A3:E8:15:51:EF:6D:3B:F8:56
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:7f:ce:9e:76:cc:38:37:99:64:e8:e2:99:87:b6:d0:5e:
0c:bf:f4:f7:81:38:86:c5:b7:7c:c9:96:19:7b:12:b0:61:fb:
57:fd:1e:55:ce:5b:f6:5e:af:2c:0b:19:8a:7d:ea:b7:f6:e5:
f4:dc:e4:02:f8:49:6f:cd:64:f5:db:e4:2d:30:c3:64:23:70:
1f:d5:d6:6b:d1:35:13:68:8f:6b:bd:3d:c0:de:d6:a8:1a:da:
af:3c:4e:41:d5:d4:f8:3f:ac:4c:8f:b2:72:da:35:2e:60:52:
d2:7c:6b:15:a3:0a:a2:54:45:70:53:8e:90:1b:7e:df:ee:fd:
2e:1c:fa:02:83:47:c7:b9:03:12:f5:ee:b3:06:7d:90:71:c5:
c4:72:50:aa:e9:07:4a:63:7c:95:74:20:e5:59:88:92:e8:71:
a0:6e:20:bd:71:c2:1b:e9:17:48:78:8b:71:1c:a5:44:7f:39:
7e:a2:07:f9:f1:65:79:4c:c4:9a:0a:9d:30:49:e4:f9:35:59:
c4:d2:fd:35:2e:7d:a5:93:65:12:8e:41:8b:7c:f8:61:4f:72:
b4:e9:10:67:e1:94:c7:ba:3f:ed:8c:d7:74:2d:75:44:43:09:
42:de:17:70:4a:fb:27:1e:7d:bd:46:5a:95:87:1a:2a:90:6f:
c3:51:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:15 2026 by rpki-client