Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: lccToo/0Hx6FhvQGStoAPuJZbbW+OwyuLpjSet/Aon0=
Subject key identifier: 69:7B:15:4D:88:AA:10:3A:84:01:C9:40:78:13:5E:3B:80:FD:1B:E6
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 019CAB6B709AA999D98FC8D247AD0135CB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:10 +0000
Manifest this update: Sun 01 Mar 2026 22:01:10 +0000
Manifest next update: Mon 02 Mar 2026 22:01:10 +0000
Files and hashes: 1: gnUBlLxOjDH4Z1f5fn-4AChySoE.roa (hash: sfLmAWTXK6E2qypaAtchDrq6czQBGZESEbOVmGAo4Qo=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: buxSuVglyBXScscykVhPrMy5bau51zDLsAOJcbzpttQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:70:9a:a9:99:d9:8f:c8:d2:47:ad:01:35:cb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Mar 1 22:01:10 2026 GMT
Not After : Mar 2 22:01:10 2026 GMT
Subject: CN=697b154d88aa103a8401c94078135e3b80fd1be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:da:06:57:d3:61:45:0e:70:68:a9:d5:4b:
5f:43:97:53:00:32:d0:b2:34:e2:8c:6e:7c:c4:29:
8b:d6:00:ba:c2:3b:ac:4f:61:97:8b:f6:91:26:9a:
32:37:8a:2f:22:e6:2f:d4:a8:5b:54:af:18:45:70:
2f:50:91:b3:3e:08:33:e4:3a:d0:aa:d1:d2:3f:8f:
98:21:5b:6e:61:54:bb:5a:5f:cb:d1:04:76:17:db:
b2:68:13:2b:27:e3:6c:d5:bf:6b:b9:63:eb:69:5e:
d0:92:3b:b2:33:cc:cc:0d:0a:1f:a5:ca:91:b0:b3:
e6:60:c9:94:39:97:3e:2f:58:f3:7c:90:16:2a:ee:
22:d8:cd:28:25:02:91:57:0e:c6:06:60:a7:10:27:
2c:7e:c6:18:61:e2:60:4f:03:5d:89:40:d6:26:1c:
b1:8a:48:65:49:c5:a1:29:b6:b2:16:40:52:f6:eb:
a0:45:07:00:7d:b5:c6:31:04:0e:c2:04:aa:81:3e:
b4:5c:88:54:99:f4:95:a5:ae:8a:58:ce:45:e8:75:
ba:99:66:a9:d1:3b:0a:02:36:f7:d3:ef:cb:82:a8:
6a:04:89:d8:79:82:4c:43:73:f1:a6:6c:6c:c6:27:
da:45:cb:b3:14:71:30:d2:95:2c:e0:c0:b9:4a:38:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:15:4D:88:AA:10:3A:84:01:C9:40:78:13:5E:3B:80:FD:1B:E6
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:86:ab:5e:08:01:33:48:12:8a:2c:0a:d7:cf:01:79:af:
0e:3b:b9:89:4d:8a:cc:7a:dc:f9:5d:37:de:20:aa:b8:0c:3d:
8c:ae:51:a6:3e:aa:9b:64:df:83:8c:89:47:c5:b5:ae:4f:97:
1b:e0:fd:0b:6e:3e:40:c5:a4:56:98:83:7c:f7:01:df:cb:25:
f7:94:65:e1:b0:17:d8:69:7c:ff:d3:a1:d1:27:35:b5:09:6b:
f9:36:4e:e0:27:17:46:f1:8f:34:62:2b:60:aa:b9:32:93:fa:
81:89:36:ba:db:6f:fd:aa:a6:ce:95:a6:c0:a9:18:ea:19:c8:
4f:a2:df:6e:6e:f0:9a:44:61:a4:2b:a6:c2:e0:b3:f0:13:08:
d6:07:9d:52:00:41:8d:88:a9:ad:22:1f:4a:de:5f:e2:a0:ef:
cf:b6:1c:40:d6:85:1b:7d:20:72:cc:2f:cc:cf:a9:0e:ce:48:
19:a1:a1:31:00:ed:d7:c8:da:77:95:9a:f9:bd:5a:83:a4:50:
76:53:24:b6:32:b3:7d:6e:88:b7:72:aa:29:38:d4:62:66:c9:
15:b6:9c:ac:f3:fa:5f:22:d1:74:43:22:a7:44:a6:6d:98:dc:
27:f4:16:01:99:e9:e7:1e:51:40:86:3c:4e:fd:5e:2e:9e:b9:
91:81:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:46 2026 by rpki-client