Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: /oGXdbfPa7K2+N0HCPaFj5vl8hBdY1Rh+nGyETq/kCc=
Subject key identifier: 13:72:6B:F4:60:E1:24:F4:72:79:5A:90:78:FB:B5:20:75:C6:A7:7D
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019CAA8FDF0DB1488FC842EA37D6DD78D7F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0AA7
Signing time: Sun 01 Mar 2026 18:01:21 +0000
Manifest this update: Sun 01 Mar 2026 18:01:21 +0000
Manifest next update: Mon 02 Mar 2026 18:01:21 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: hpXdojo7dPruejMRsQXSCFDCAog3s+BrA2Cp17Q4d/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:df:0d:b1:48:8f:c8:42:ea:37:d6:dd:78:d7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Mar 1 18:01:21 2026 GMT
Not After : Mar 2 18:01:21 2026 GMT
Subject: CN=13726bf460e124f472795a9078fbb52075c6a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:58:e1:1e:96:e8:98:17:a5:0d:ee:fb:4e:
65:7e:3e:95:4f:43:66:47:18:dc:f6:cf:e2:87:05:
38:79:2c:1d:bf:5a:b2:16:8e:ec:51:9d:2e:7c:08:
19:43:07:71:1c:a0:a8:29:72:b7:eb:fe:8f:fa:6f:
0d:80:cc:e0:51:ee:56:42:08:f1:43:31:ff:60:43:
29:3d:f6:a1:90:b1:02:40:0e:e9:fb:0b:fe:e5:4b:
6d:34:a2:6f:b9:af:2c:4d:f4:2c:a2:0c:55:97:a6:
6f:9b:ea:46:b8:d3:7d:0c:ee:7f:53:1d:8b:0c:3f:
be:e7:cd:c4:92:e2:6d:ff:9a:18:75:68:3e:5f:04:
5f:bc:8a:27:4b:1b:c9:f7:19:ac:a3:7d:57:09:ad:
12:4f:f5:ab:5a:36:a9:44:eb:39:dd:94:9d:16:75:
41:96:54:f8:00:7c:f7:04:cd:79:d2:ca:5c:5b:b5:
68:c9:2a:53:7d:00:68:66:a9:7a:61:d8:8f:3f:7c:
62:44:1c:aa:12:38:bb:42:3c:04:49:28:cf:65:ca:
ec:d5:00:ab:d0:9d:14:8b:93:16:ba:de:7e:41:e6:
03:96:18:29:88:84:e0:c0:cc:e5:bc:a5:18:52:92:
0c:9c:95:02:08:e2:31:50:ab:b0:15:f4:dd:06:3a:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:6B:F4:60:E1:24:F4:72:79:5A:90:78:FB:B5:20:75:C6:A7:7D
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:16:1c:cc:7a:b4:48:02:a7:44:e9:09:72:41:e1:7f:25:a1:
8f:99:54:7a:e6:30:16:5d:1b:d6:45:3e:f4:06:89:99:b9:5f:
34:e8:b1:14:ef:86:56:74:59:48:2f:0c:90:c5:0e:8e:03:9b:
d3:dd:1f:2a:a0:c6:e6:bc:4c:79:45:5d:dd:e9:13:08:24:de:
73:49:df:60:52:e0:88:2f:3e:c4:fa:1e:da:1f:d1:02:12:ee:
bf:7f:9a:99:84:8c:e9:03:4d:af:ac:cc:7b:8b:77:ca:89:26:
ae:d5:1f:dd:1c:b1:58:70:45:b4:a1:ae:3e:37:48:92:92:74:
25:e9:f6:de:56:7d:32:aa:50:cb:86:c2:90:6a:16:3c:a1:bc:
66:cf:c0:10:86:ef:8b:46:3c:20:ad:ce:cb:43:97:bb:7a:5d:
26:d1:ef:47:1e:a1:49:b2:75:24:ec:81:8a:21:ab:ec:d4:6d:
50:6e:23:ce:a6:de:e2:9e:9b:70:f0:43:fc:c9:61:21:c1:bd:
cc:b9:58:b0:56:db:98:fe:4e:4d:13:d7:14:45:a5:5d:b2:2b:
d5:10:eb:6d:b1:d4:3d:c0:7a:87:88:b4:0e:ee:b4:36:a1:e5:
2d:09:7f:59:f0:19:d2:45:99:f7:f5:ad:6c:b6:b2:6d:15:98:
6b:2a:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:17 2026 by rpki-client