Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: CnnvUKT13dwYP/U4oajxy54dvvYISh142h7+Gmxg33U=
Subject key identifier: 34:31:2A:7A:D2:C6:9B:7D:9B:FE:14:E3:54:66:F2:40:C8:7D:EF:75
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019CAA5850ECDF15289B9D9616A480FAB172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1720
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: 0ucWFZcFyD58o8zTdzJyfEAC5zk.roa (hash: lMcCuoQ+b6EBN3pFu3tzR6OUCs2zcvSlVr6M8lwbMuU=)
2: bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa (hash: it3vJQNoSAFPdXxbk0rvKR5rwALiR1gzaPHvmGFvmfg=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: FU61Rbajj/ke10uiEHgOU7XHijtyHRCSCuDBkwSOvS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:50:ec:df:15:28:9b:9d:96:16:a4:80:fa:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=34312a7ad2c69b7d9bfe14e35466f240c87def75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:0b:bb:42:68:24:2a:70:27:13:1b:34:bd:
cc:a4:c7:9e:ff:79:ae:01:f5:e9:8b:0f:aa:6a:87:
60:34:9c:05:23:52:12:0e:dd:47:9f:f2:b9:de:e2:
ad:f6:42:eb:52:f2:76:43:60:cb:ea:8c:98:c8:a1:
cf:23:d0:73:91:e9:13:48:bf:79:c7:a8:16:35:78:
c5:57:90:3a:4a:ca:79:0a:3e:19:49:34:94:16:07:
51:49:55:b2:1f:5d:d0:18:6c:5c:2c:29:d1:f1:f1:
32:10:a6:f1:44:b6:6a:bb:ff:4d:b0:1c:3c:d6:cf:
4b:83:bb:fb:2f:b1:bc:14:e8:d6:20:e7:a8:f3:24:
a7:d8:b2:72:e1:3c:de:63:03:c9:96:5d:1d:74:96:
a0:1b:c2:69:54:a5:ed:a2:17:3c:27:be:0f:d2:05:
9e:47:de:a1:e9:42:48:06:d5:ab:5c:1b:a8:af:18:
d1:8c:cf:84:e9:67:65:44:dc:56:bc:85:c8:09:8e:
8b:e6:5e:8a:1c:f4:7d:14:80:3e:65:fe:04:db:e2:
ac:2d:fa:db:9e:92:2a:a4:72:17:18:b9:5c:69:5a:
8d:ce:d0:07:29:2f:b2:b8:11:fe:07:11:0d:12:4e:
71:d9:7d:e8:0d:80:34:fd:0a:5b:50:76:70:e6:2a:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:2A:7A:D2:C6:9B:7D:9B:FE:14:E3:54:66:F2:40:C8:7D:EF:75
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:73:ad:8d:26:d5:af:df:c5:d3:e5:4d:2a:d5:c7:0f:88:ca:
f9:35:cf:bc:3e:61:e6:f6:25:17:f2:a4:89:3f:e5:7b:d0:8f:
92:54:da:a4:44:6d:cf:b1:d9:b2:f6:92:60:8b:44:eb:ea:a1:
34:0c:83:cf:13:50:b0:9c:8d:03:e0:72:c9:d1:45:d6:01:6d:
c0:62:e3:87:b9:c6:4b:96:e7:a0:41:89:4e:be:ae:e8:9b:37:
ce:66:07:20:86:df:7a:e2:81:ac:4d:9f:7c:dc:b9:e3:d5:4e:
41:80:db:54:07:45:83:4e:0d:26:ad:97:0c:0f:86:e0:47:fa:
9a:a6:a9:42:74:c6:a0:e4:27:b8:eb:4f:87:cc:b9:26:52:15:
16:27:1b:a8:88:53:73:c9:15:50:24:1d:6e:ea:8e:1b:6d:b2:
20:d7:f2:6a:52:ff:85:d6:d9:8d:ea:23:1a:c6:c9:ae:60:bc:
b8:de:89:6f:05:24:19:8e:37:c6:0d:51:93:00:68:e2:31:1d:
94:5a:a6:95:29:7d:12:eb:6c:a5:fe:f7:2f:06:de:bc:19:39:
95:c0:80:2c:93:ac:bd:71:52:66:4b:57:73:78:d2:16:ff:62:
c1:46:fe:17:2f:34:5d:d1:b7:bd:be:b7:67:c7:00:3c:e4:e8:
ca:f8:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:26 2026 by rpki-client