Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: r5oMZhCrwbIjtYgdXJwr5pLZTgE9pesCazN6zoQLFp8=
Subject key identifier: AD:B2:C3:A0:9D:A5:10:2A:34:F0:EE:A5:C2:AD:0B:B1:83:72:0F:EF
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 019CB0240FACEC0F5B1E8D9C4A3B6622668F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 20:01:19 +0000
Manifest this update: Mon 02 Mar 2026 20:01:19 +0000
Manifest next update: Tue 03 Mar 2026 20:01:19 +0000
Files and hashes: 1: B8DoC5brIbdcKCleVmQPvjtWXBY.roa (hash: fwuSLYiomHoCM+ValZyW+pJ6ZXG5StCk1C5NhErYdTA=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: vk4cMkQf1Tc5TnS4AU7iByCLnVD0+N+QXAjvAGDGEhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:0f:ac:ec:0f:5b:1e:8d:9c:4a:3b:66:22:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Mar 2 20:01:19 2026 GMT
Not After : Mar 3 20:01:19 2026 GMT
Subject: CN=adb2c3a09da5102a34f0eea5c2ad0bb183720fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:17:66:e1:54:e9:c3:9f:03:8a:71:e5:88:
69:bd:36:8e:8a:54:74:0e:ad:65:88:61:da:75:2f:
c8:aa:47:c5:e6:88:8c:09:a0:1b:4b:94:d3:7b:a8:
e7:2d:a4:25:96:83:97:aa:f4:95:28:20:2e:fe:51:
49:ef:0d:e4:f9:20:7f:0e:22:e6:60:db:6a:10:3a:
d2:2d:4f:97:08:a4:51:38:c0:92:4b:44:1c:b8:d4:
4b:30:29:af:da:a7:33:17:d6:f9:09:cd:10:fd:76:
89:48:c9:3a:05:00:92:c9:24:13:f9:56:88:81:97:
24:e6:5d:12:b7:c2:d1:ed:f4:d0:89:78:ae:34:e3:
25:36:10:5e:ad:5b:fb:95:ce:e4:63:3b:f0:6e:60:
a7:8c:67:36:7b:d4:ca:35:fb:e8:97:7e:d6:92:0d:
79:58:ea:81:f2:5d:18:e1:58:05:ab:2b:85:20:df:
7f:f7:ba:e4:6b:c2:35:00:29:48:e5:7e:28:0c:29:
52:60:ff:b3:2f:67:f1:88:69:55:3a:07:b8:42:48:
6b:0f:93:9f:f9:3d:fa:93:89:bd:ff:4b:a4:8d:c8:
bf:51:bc:f8:7f:90:92:10:85:e1:8e:f3:d1:8c:7f:
3f:de:98:88:43:45:56:b8:aa:d0:58:46:51:d5:6e:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:C3:A0:9D:A5:10:2A:34:F0:EE:A5:C2:AD:0B:B1:83:72:0F:EF
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:65:fe:24:77:a6:77:80:26:af:7e:9b:ae:37:a1:a8:03:
c6:37:59:17:fb:ee:9a:f8:13:0b:c4:50:15:4a:19:20:1c:c2:
ab:d8:ae:03:5f:34:50:71:99:22:86:3b:7f:95:06:55:7d:00:
bb:61:46:b9:54:05:e9:64:47:28:00:30:5a:db:62:76:6a:35:
1f:e2:2f:13:65:e2:03:94:2d:22:c5:ab:c7:c2:c0:ea:a9:2e:
ad:f9:e9:c0:1b:9b:9f:55:fe:7a:e1:af:2b:fc:c3:37:de:6e:
49:61:58:7e:3a:f2:82:ff:60:58:9a:ee:3d:df:1f:e5:f8:49:
9b:ea:4b:df:00:4d:2e:3e:7d:8d:82:38:17:cd:e8:60:df:5a:
bc:01:51:a3:92:1f:1c:c9:b9:22:a7:53:a9:7f:94:41:d7:94:
16:44:f2:7e:b3:15:9c:9e:c4:76:99:59:89:61:9a:6a:dd:f6:
29:2f:ec:f4:38:99:f4:a4:71:8a:22:8c:14:78:c3:b5:4a:dd:
d5:08:64:fe:b1:3f:b4:10:a8:46:7e:9b:15:d3:9a:6a:db:70:
26:ae:6c:d7:ad:a1:b4:33:7b:2b:67:81:cd:af:42:a1:ad:cf:
58:d4:2a:8d:d8:4f:61:bd:31:82:09:db:2f:99:6c:53:ba:87:
17:ac:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:04 2026 by rpki-client