Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: IeFCVub4xYS1NxPs4++4y+QVQj0+EnHdtuxh8lxA4uQ=
Subject key identifier: 5B:8F:37:5E:43:80:99:A9:AB:F4:2B:8F:F2:77:11:08:2C:C8:EF:CC
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 019CAC0FA092E4B2B66B41F6AD0BA061F773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 133A
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: JGRc8gWxsOVbOpLY1p0YvVJjb3A.roa (hash: Wj8ZnZcpmyQBFn1WIawrKmviMNPdyAHSA5qDhEVw6AY=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: 7fTtPP2TlytX5uiTgeMt3Hr/Ig6DucEC/TLPcYJYKQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a0:92:e4:b2:b6:6b:41:f6:ad:0b:a0:61:f7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=5b8f375e438099a9abf42b8ff27711082cc8efcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:a2:88:26:2f:78:19:b7:8d:6c:2b:6c:4e:
a6:2b:5f:5c:89:95:d6:71:da:bc:b3:10:79:9e:4f:
7e:d2:78:13:bc:b5:65:e5:e8:17:6d:31:da:23:f1:
c1:74:9f:1e:8f:41:51:b2:3c:4a:c2:da:33:ff:f7:
d1:f8:fa:88:fe:eb:ca:d5:c5:3f:a3:a8:1d:fc:87:
89:a8:09:6e:ad:22:b8:f1:c4:01:dc:54:be:7a:94:
08:6d:1a:52:4a:20:ee:4d:76:e8:55:19:a0:be:19:
38:db:1a:76:d6:83:1c:cf:df:77:f2:48:e9:bc:fa:
fe:24:be:98:ae:a3:5d:f7:a3:9b:7f:1c:10:b1:e2:
6a:9f:f4:e5:65:24:94:ab:13:5a:14:4a:f2:aa:68:
d8:86:c4:1e:7f:3e:81:97:d1:61:e9:56:98:9d:32:
17:e1:65:5d:af:5b:9c:bd:c3:91:bf:1f:d6:77:93:
e1:7b:e3:07:44:0f:59:7f:56:5d:ab:53:c9:11:9a:
6f:e5:ec:05:9a:3d:c0:25:ce:38:c9:f7:28:3e:32:
b0:a2:62:6d:ac:e9:99:8e:ee:a8:80:2b:aa:15:82:
af:02:0c:d9:48:f1:73:90:01:ca:fe:76:ef:0d:91:
30:3c:09:df:01:48:9d:14:94:d5:d5:62:53:e8:d3:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:37:5E:43:80:99:A9:AB:F4:2B:8F:F2:77:11:08:2C:C8:EF:CC
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:14:4e:fc:ae:89:a3:dc:12:21:36:ea:fb:48:2f:40:f4:
c0:ee:50:4d:75:f8:8f:3a:bc:9d:b0:5e:3a:a5:22:ff:90:82:
a7:59:57:04:66:3d:81:de:e0:03:84:ac:b5:6b:1b:6e:cd:59:
10:e9:95:66:12:01:e5:4b:f5:f8:9e:5e:29:76:48:a6:e3:86:
c3:e7:41:c9:f0:5f:a5:6e:69:1f:c4:7a:65:9c:86:e1:9f:d3:
b1:31:4f:f8:7d:ee:9c:49:95:ef:47:62:d4:2b:e1:70:b6:a6:
48:7e:c2:bc:44:12:1c:69:d5:b8:60:3d:df:bb:68:d4:08:46:
61:34:3d:33:a3:df:1d:c1:ee:79:fc:26:cb:0a:b2:f1:a9:ec:
6f:39:51:88:31:4c:e0:c4:c1:98:04:83:4a:62:90:cc:a2:b1:
41:7c:46:0e:5d:7a:7e:ff:12:95:56:d5:6d:cd:59:f5:b1:b1:
9b:ca:80:d1:f1:2e:63:b7:5a:ba:47:8e:0d:46:73:a7:1c:f4:
06:d7:43:05:2c:6f:bf:d9:e3:e6:e7:17:48:81:d9:24:fb:d3:
75:a5:22:3d:dc:fa:aa:89:d2:e5:11:75:7a:aa:e6:55:4a:e0:
8c:7b:7a:38:35:e0:53:96:87:0e:42:4a:ac:cf:93:fd:52:43:
1b:41:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:03 2026 by rpki-client