Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: a5QmxkzQSyDnPmwHIIa2sah4d71Kne8pDYkJJcnKSZs=
Subject key identifier: 83:59:E9:7A:81:08:0F:8F:3F:CF:FD:37:D9:95:BD:8E:1D:B2:48:B2
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019CAA21461A82C304AAF9DFD1CAD840D295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 07D8
Signing time: Sun 01 Mar 2026 16:00:33 +0000
Manifest this update: Sun 01 Mar 2026 16:00:33 +0000
Manifest next update: Mon 02 Mar 2026 16:00:33 +0000
Files and hashes: 1: fi4yA0xzPM7GYQgxbxmYjezn86E.roa (hash: G/nw7pbKmX3E/jluA4P6MIqyVk+aVk5yMtozD6WiDB4=)
2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: dzS1B91PNIfS1Ng4+wkjH21wo7uePfEeOnbYe0OZSmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:46:1a:82:c3:04:aa:f9:df:d1:ca:d8:40:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Mar 1 16:00:33 2026 GMT
Not After : Mar 2 16:00:33 2026 GMT
Subject: CN=8359e97a81080f8f3fcffd37d995bd8e1db248b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:80:e9:68:87:fb:53:af:3c:6e:63:ed:8a:
54:59:5b:d4:83:09:36:94:1c:d2:e2:34:5e:ef:6d:
ca:a2:e3:9c:88:8f:fb:c4:c3:fb:0c:be:e9:e3:48:
b2:cb:7f:28:38:6f:37:1e:2d:76:00:dd:6e:e3:79:
ef:48:79:63:57:8b:9e:d5:38:b2:38:e3:bc:88:05:
d7:07:27:f3:dd:67:c9:73:25:c9:2c:15:16:95:51:
26:1b:7c:27:74:05:6d:c3:19:51:c2:58:bb:ca:c3:
44:d2:52:40:51:a5:b3:44:32:8e:a8:9a:75:10:bf:
3b:0f:b7:d1:22:09:0d:40:a0:54:6b:ef:91:fd:19:
65:e3:ee:35:8c:1f:6e:9f:c7:a3:be:de:4a:90:30:
9f:5b:db:3e:ee:e9:32:6f:94:87:30:37:ae:8e:2f:
aa:2f:bc:f4:a1:43:df:ae:89:fc:fb:df:7d:17:a9:
19:b0:0c:4a:89:22:05:71:88:02:6e:7f:40:86:20:
65:80:cf:14:a9:b3:b8:b0:a2:48:06:fd:20:25:9f:
9b:f5:7e:c2:21:35:08:4a:b0:c7:24:d9:92:35:23:
a7:ba:08:33:7f:5a:66:b3:79:5a:01:6d:56:16:7a:
23:f3:09:b2:d9:89:04:45:52:f4:2e:bb:cd:1e:20:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:E9:7A:81:08:0F:8F:3F:CF:FD:37:D9:95:BD:8E:1D:B2:48:B2
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:a7:d3:02:1e:1d:3d:e4:9f:ae:e8:48:b4:87:18:f6:be:
ae:8f:51:68:de:41:23:a1:c3:c6:2b:6c:5b:f4:4b:c6:75:6b:
bf:e6:08:4e:bd:7f:db:0f:6f:9c:25:d6:97:e9:6a:9e:86:e0:
20:5f:01:a6:47:8d:23:b4:93:8a:34:96:d4:d4:4f:0b:b6:61:
ea:64:48:7e:98:31:82:bd:9c:2c:a1:a3:9e:67:cf:79:62:98:
30:d7:32:a5:30:32:17:d6:9c:f9:e4:32:ad:5d:60:fd:18:bf:
ce:4c:2b:2e:32:19:90:3b:0c:6b:77:62:e1:d0:6e:1d:e6:35:
8c:f7:54:be:cd:01:35:c8:c4:5a:18:b3:e6:30:49:45:6f:d2:
8a:26:18:30:83:1e:f3:9d:7f:f5:92:0a:bd:f8:ce:a0:fa:34:
f9:98:37:73:0f:15:e2:ad:fd:e1:bc:be:fc:b3:ab:35:eb:4b:
22:20:30:50:2c:0a:b0:f8:fe:93:7b:51:0f:7c:7a:a5:b9:ff:
c4:de:cd:19:83:f6:08:67:89:20:78:6a:7f:18:79:51:be:61:
c8:50:22:a9:b9:cb:42:4a:36:db:a7:70:53:b6:b4:0f:ce:0a:
16:b4:8b:46:2a:92:67:cf:07:8c:09:c0:d6:42:39:1c:df:58:
44:1d:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:52 2026 by rpki-client