Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: 7153dgGJEIV11WxOf7hYERHRXJGAcXgzfbzAM1d3KnM=
Subject key identifier: 2C:F0:BB:89:E6:71:B8:36:12:F4:F1:AD:96:B5:77:93:1E:84:85:8A
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 019CAC7E11A2C2BE493D17BD85FEB52DB529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 1857
Signing time: Mon 02 Mar 2026 03:01:08 +0000
Manifest this update: Mon 02 Mar 2026 03:01:08 +0000
Manifest next update: Tue 03 Mar 2026 03:01:08 +0000
Files and hashes: 1: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (hash: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI=)
2: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: gNDm4TxBNm+0yyA1iZ6yzYHJxyfa14MOH1WjOTJe9tw=)
3: zEeP9jNbHcrziM4NoTdt_uL6054.roa (hash: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:11:a2:c2:be:49:3d:17:bd:85:fe:b5:2d:b5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 2 03:01:08 2026 GMT
Not After : Mar 3 03:01:08 2026 GMT
Subject: CN=2cf0bb89e671b83612f4f1ad96b577931e84858a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:20:bd:a1:c2:f9:e8:b9:45:45:69:5f:4c:
72:69:ca:58:43:1d:d6:ee:c3:48:da:d8:af:9d:84:
83:73:a0:be:a1:0b:85:4f:f0:18:aa:dd:e0:03:91:
33:af:d5:70:5b:f9:62:12:25:03:f0:63:04:7d:9e:
70:e0:6c:e4:51:5f:33:d5:fb:f4:3d:20:13:00:7e:
28:d2:cf:1a:26:c7:0b:af:8d:00:03:40:09:d4:0f:
79:db:0d:8b:c3:2a:55:73:88:b5:39:c6:52:7c:88:
0f:5b:a3:ad:f6:80:b0:81:a9:56:57:27:e5:7a:bf:
02:ef:12:27:6f:5a:24:d5:d0:2f:fa:01:15:8a:3c:
f4:73:b8:6b:53:71:c6:82:d1:2a:f8:45:58:91:bb:
94:78:01:74:18:aa:71:aa:22:c2:85:25:dd:07:37:
39:1c:46:59:1e:d9:1d:59:7b:0b:93:5d:0c:5c:ed:
2a:d3:46:e6:2a:ed:c3:74:e8:36:0d:29:ee:dd:19:
d8:75:3b:3b:ee:56:91:31:37:7c:e2:54:79:3e:bf:
0e:bd:01:02:fe:e7:35:98:00:60:9b:93:17:0f:15:
1f:a3:a4:1a:e5:fb:b3:dd:96:8e:f7:1c:57:16:42:
d1:78:7b:18:75:a4:81:d0:c0:4c:a0:80:18:54:9a:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:BB:89:E6:71:B8:36:12:F4:F1:AD:96:B5:77:93:1E:84:85:8A
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:c3:81:99:c0:09:9a:41:9e:8a:bb:10:a6:58:f2:b2:a1:
ab:46:2b:9f:5b:a0:62:4d:56:4b:b3:ff:00:21:c8:3f:56:e0:
79:19:fd:7f:28:53:9d:d2:17:44:e8:64:33:e3:40:69:fe:6b:
1a:f1:97:2f:1f:ac:06:2e:60:43:2d:3c:a0:6a:61:6c:36:04:
38:ca:3e:ed:fd:99:55:ea:09:05:45:34:46:d9:b4:65:95:2c:
d2:2e:04:70:67:96:1e:28:1a:d4:90:50:31:8a:03:cd:d6:0f:
05:18:4c:67:74:56:1c:c7:d0:bb:e5:af:12:38:33:c0:be:b4:
89:e2:5d:1d:67:95:f3:fe:f3:70:47:ac:20:bd:dc:56:7e:0c:
89:9f:2e:c8:94:75:55:ca:3d:0e:f9:40:96:e2:18:2e:09:a5:
db:5b:e1:26:23:7b:41:71:19:77:85:9f:0a:7b:32:96:99:b8:
c2:d4:c9:94:69:11:11:52:bf:be:31:c6:8b:b8:4d:fc:ee:a6:
2c:01:36:bb:95:0f:3b:f5:3a:9a:cf:b9:e8:8a:28:2b:67:77:
8e:7c:32:51:47:a4:f5:fb:c7:ad:c2:c6:8e:b0:d2:b3:84:f8:
d9:d2:d8:f8:9f:07:05:d7:ac:f5:e4:83:df:0d:90:f5:7e:e7:
e0:93:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:07 2026 by rpki-client