Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: dhJdLiYAjO1T9P1jZFMH4cSUAs4/nJwc6dC8sj4kov0=
Subject key identifier: BF:C7:78:88:69:73:29:F4:A1:1D:C3:0C:9A:ED:C9:EF:B8:F5:D3:D1
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019CAA58BF96995DF8B7FF5EDE953EB1AC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0C0F
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: Sryvn+cX6WmKwrD3pjqle3rwHv6/wqzwM7nPOU4agNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bf:96:99:5d:f8:b7:ff:5e:de:95:3e:b1:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=bfc77888697329f4a11dc30c9aedc9efb8f5d3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:59:97:8d:fc:93:ab:16:74:45:cd:1c:6e:
6a:6f:4a:17:98:49:ca:c0:bf:bd:9b:5a:4e:42:36:
10:19:ef:ba:46:df:e0:99:75:b5:bf:4b:f4:3b:8e:
c9:02:3e:e1:25:a0:7a:3e:68:3d:54:6b:59:21:d0:
97:91:93:c0:cd:7e:0f:ab:ed:35:11:e0:dd:9b:a2:
9c:80:65:ba:0c:dd:ad:7d:50:a7:33:aa:40:6a:3a:
31:eb:fd:01:86:ee:a7:8f:fd:28:1a:f5:74:da:09:
97:81:5f:46:3d:74:aa:d9:45:cf:6b:be:59:85:2b:
c0:f1:cf:ff:d6:2b:31:84:1f:91:38:ff:b6:92:30:
b5:90:72:fb:63:0b:46:de:fa:7b:cf:9c:82:b0:d7:
37:d9:fd:c7:e6:5f:95:a0:96:b6:d7:1e:4a:7e:e0:
1d:d0:b6:cc:b4:18:d0:93:41:7d:e7:c2:7e:87:1e:
77:0c:7d:9e:c7:62:dc:b3:48:4c:1a:10:8d:f1:54:
8b:3d:d7:17:a8:fb:0a:41:81:4b:63:4e:a9:73:51:
de:7b:ad:68:ed:5a:85:f3:47:c0:6e:9a:8a:e5:e1:
d2:2f:c6:d0:0f:48:03:c4:4c:fc:19:d6:d8:75:d6:
71:46:d4:fd:32:df:48:5c:b3:ec:43:9b:c8:24:64:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:78:88:69:73:29:F4:A1:1D:C3:0C:9A:ED:C9:EF:B8:F5:D3:D1
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:87:83:12:2c:e0:dd:65:58:27:cd:c5:83:32:74:dc:0f:8a:
dc:65:a1:61:ad:87:7e:8b:da:b1:4d:fa:5d:93:34:a7:07:00:
c1:aa:a3:cc:b4:e0:3b:c4:46:b5:8a:8f:22:71:36:9e:62:06:
50:bb:27:0a:de:c0:cb:6d:a1:81:a1:f7:ac:60:a5:97:09:9e:
2a:c4:bf:1e:c4:a9:30:bd:e7:32:0d:78:47:cd:50:8f:26:b7:
a7:d3:a1:b9:6e:f6:6e:cc:4f:85:b0:95:43:05:8b:a0:b5:c1:
99:c6:32:bd:36:e6:53:e4:68:11:f7:9d:45:cd:f4:0f:39:10:
64:21:3f:12:b6:a7:54:56:9b:68:21:46:20:0b:1e:4a:fd:c8:
6b:95:95:6b:61:3f:bf:39:56:05:72:15:d0:d3:48:c6:3e:55:
91:cc:a6:e3:63:a1:d2:1d:7c:9b:96:80:45:08:fe:cc:26:b1:
b2:3f:c2:da:5f:22:1c:00:90:17:53:f0:39:00:30:49:61:2e:
a7:15:e3:7d:58:29:19:ff:3c:f1:ca:85:0b:27:37:0c:93:94:
7b:63:10:b6:42:4b:88:6d:fa:b6:ca:b6:b8:db:6c:05:90:81:
5f:f3:35:a3:56:11:1a:ce:21:b4:e8:3a:14:bf:c3:79:ea:d4:
d1:8e:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:51 2026 by rpki-client