Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File: uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier: QbY5vGjpOUb+dc1f9r35iDt4BJcDXPaz4UBBvZy5dg0=
Subject key identifier: C0:04:CA:8B:BC:4F:A9:FF:72:C9:FD:3E:A0:17:68:FB:EB:B9:52:23
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 019CABD9CF761E64265187BF8E68E69F1A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 1S7wmC7UNi7YklqSCZbK-q4l2aw.roa (hash: grflm2PbIIqM2mq6/myyrNwOE3qgPal6r2qF/DPaHSs=)
2: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
3: kaJAlUNXuvgIldw8HKxblZiQ1xY.roa (hash: sktya3OX64f09BO6r6lg+c9q03KXeV5TYfpw1RTIwcY=)
4: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: NPbjvXJamys63hbDHIgznKVvHkd7ISLyFOKxRIVuacs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cf:76:1e:64:26:51:87:bf:8e:68:e6:9f:1a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=c004ca8bbc4fa9ff72c9fd3ea01768fbebb95223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:16:cc:54:59:0a:99:03:27:03:f3:6d:22:
16:f0:2e:48:5f:cc:0c:24:fd:d5:dc:ec:3b:4c:99:
1f:c1:e8:2f:fd:0d:15:39:43:67:71:0e:1b:40:4b:
d0:0a:d2:2a:1a:2f:f6:5b:3a:ea:0b:fc:03:ef:32:
77:74:0c:3d:3b:68:48:5d:dd:4a:98:13:16:48:08:
e4:d2:04:96:d3:cc:7c:e2:69:e4:8d:35:e9:e5:db:
5d:8d:77:68:be:72:83:05:f7:11:ac:d3:b4:d2:65:
4b:25:27:e4:4e:d4:47:89:7f:1f:1e:4c:64:77:9d:
69:78:cf:35:5c:b0:9b:15:7b:dc:90:7b:ce:84:18:
6d:94:93:9a:fd:9e:b8:6b:e9:aa:1e:46:30:81:43:
b8:3e:2f:cb:41:87:e0:df:39:54:39:57:da:a1:f6:
c9:3e:10:19:5c:af:1f:1f:ac:e5:03:5f:74:f2:b4:
6d:7f:c5:27:c9:2a:a5:bb:59:e8:54:08:f3:a2:54:
28:d8:3c:b7:e3:cf:77:6d:fb:8d:29:e6:f6:47:b1:
ff:0a:85:e1:f8:a1:8e:6d:02:ed:d5:02:42:2c:3a:
84:ec:b7:65:b3:66:fa:79:f6:9a:27:52:08:19:ec:
8b:0b:c9:e0:b9:93:e7:2b:9d:a2:77:8b:2e:da:51:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:CA:8B:BC:4F:A9:FF:72:C9:FD:3E:A0:17:68:FB:EB:B9:52:23
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d9:98:76:3f:2a:00:44:42:8d:a0:d9:02:dd:ec:ba:22:09:
d4:3a:e7:b9:fd:e8:35:54:c7:37:27:fb:38:dc:47:37:27:fb:
a2:cd:03:66:60:50:12:cc:81:23:97:cc:29:98:6f:60:e7:3c:
24:82:f0:5f:79:3b:7b:ba:fb:b6:ba:d5:e7:36:12:d3:47:e1:
db:c0:2d:b1:22:0c:1c:15:7f:7c:59:e4:c4:56:22:c3:06:2a:
c3:88:5e:0d:31:07:a9:74:d3:1a:19:57:c1:f4:04:13:ab:d6:
3f:c5:ea:60:dc:1e:68:7a:39:06:1c:ba:35:9d:57:3c:b1:87:
2d:06:32:ba:f7:25:a9:59:5b:2d:00:6f:17:98:b7:ec:1a:b9:
47:48:5a:38:a6:49:5f:3b:60:14:f4:f5:e9:73:8e:94:7f:b5:
78:e0:e1:f0:e0:30:f0:0e:81:68:33:08:6c:d1:db:d1:90:c6:
08:8f:c9:c4:e8:e8:f6:73:b1:c2:df:0d:37:9e:03:2f:67:a6:
2c:86:79:e5:f1:a3:36:d6:76:c9:a4:33:65:db:fb:14:1c:f0:
bc:31:19:c5:17:ee:71:c1:fa:01:94:fb:7d:c7:43:95:b7:62:
17:a9:49:ab:bf:d4:f4:d2:e9:49:5b:51:48:6d:1b:d9:d4:06:
b8:d5:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:04 2026 by rpki-client