Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: NrV7FWekXVXV2zlqjYu2qK5Jio7WZbjPv909ffkDA0g=
Subject key identifier: FF:6B:C9:40:A1:78:A8:A0:D2:2A:22:95:78:B7:30:B3:5F:08:98:47
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 019CAD5A3FBB5EDF3F984E8E122E5CE8B85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: 8z2MsUIxn5nw1nALL7LRWOPfhD8.roa (hash: 9llBO7otknupIcgUJiQCvbsRcVO2MsJYLXN6HgTAZ1I=)
2: KHEZbMvYE8xTVowmo6UQmw6DqDg.roa (hash: cvAQSN4DUv0yDrAvqweWU+LLGRpqR/gzJ2hNAerTPDI=)
3: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: Li5Iv2LFWRndwDd5NdZwJ9NSBpSnR9eyCm/TiGfAtu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3f:bb:5e:df:3f:98:4e:8e:12:2e:5c:e8:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=ff6bc940a178a8a0d22a229578b730b35f089847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:c8:dc:6f:dc:17:1c:36:85:4b:fe:83:00:
20:36:5d:b2:dd:44:0a:56:07:fc:e3:92:3f:80:5f:
92:30:c5:bb:bb:ce:28:be:8f:f2:65:d8:a5:86:e9:
16:43:f8:15:cc:2b:7d:d5:88:33:50:90:4c:11:03:
d2:4b:a6:83:e3:a5:85:f7:95:06:b4:f1:3b:be:52:
0c:1f:6d:d1:0e:1e:c5:f1:c2:d1:b7:8d:1b:20:65:
31:e3:25:f6:b2:26:a6:34:94:b3:5a:07:1e:2c:92:
3e:99:a0:2d:d6:c4:16:77:d2:6f:ae:0b:97:54:59:
38:b0:a7:6a:08:25:3d:cd:31:62:cb:0a:a8:0e:da:
b5:99:68:92:d4:aa:b5:fe:51:05:d2:4a:a0:c2:b0:
0d:23:9d:c6:34:29:5a:81:37:30:7c:40:76:b6:8f:
e6:b0:93:56:9a:93:6e:33:81:9c:46:97:8f:8e:56:
35:ff:d2:38:4a:52:87:48:06:c7:5d:da:ab:6b:12:
a2:c7:a1:c6:a9:dc:8c:e7:c8:94:3e:b6:f6:d5:24:
e5:77:6d:b5:58:6d:b8:44:d3:4f:44:20:f3:14:3c:
0a:da:ac:cd:4a:6e:c5:43:f6:52:c4:24:9b:fc:15:
55:28:7a:38:3c:b4:e1:7f:c1:a5:f9:30:97:ba:2f:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:C9:40:A1:78:A8:A0:D2:2A:22:95:78:B7:30:B3:5F:08:98:47
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a4:b7:ed:c8:5b:96:ca:cd:c5:4c:8c:11:fe:0e:07:08:e6:
dd:be:4b:88:5a:26:29:5c:41:5c:aa:a3:4a:c4:d4:94:2f:e6:
cc:98:0b:19:77:de:ba:9e:56:d3:fa:0b:c1:d0:9b:a0:bd:60:
24:dc:72:eb:15:92:75:b7:01:6c:64:f1:ce:21:28:64:7e:f4:
ec:3d:1d:3a:e1:73:f7:eb:47:2d:a8:31:b3:2e:24:1a:8e:36:
9e:69:ab:64:d5:1b:70:43:d9:9f:20:ec:37:c1:85:ef:1f:45:
e8:22:ca:eb:24:ed:ed:f9:4b:02:f0:49:cb:ea:9a:da:57:f3:
ae:c6:34:67:87:76:a0:b4:c3:98:39:11:e7:f2:1e:23:b0:7a:
7e:81:6d:96:38:df:d3:49:15:26:16:ac:ca:13:98:5f:02:da:
14:f5:bc:40:8d:95:bf:07:87:b8:61:a2:8b:ca:58:9a:6d:d1:
1b:a7:8a:6e:ff:79:e5:f4:ac:66:3e:34:4c:81:5e:d0:ea:d7:
03:a8:8c:8b:df:6b:54:6c:71:c9:7b:58:0e:2e:d7:b6:7a:e9:
48:a9:ba:2c:b2:1e:91:06:18:2d:09:04:ac:99:eb:48:81:f1:
f9:a8:61:3b:4b:a3:fd:d4:22:1c:01:d0:46:c5:94:38:44:81:
3e:92:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:18 2026 by rpki-client