Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier: j5qZp2JOwr2pE3H7qR5yqF2bYi9NiOqcQkvCzbPW5yc=
Subject key identifier: D3:D0:77:3F:37:7B:40:A3:F5:F2:8F:67:13:4F:7F:E0:DB:A7:BA:7C
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 019CA97CA79FD036E82F0C6FF738E69C4045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number: 0688
Signing time: Sun 01 Mar 2026 13:00:44 +0000
Manifest this update: Sun 01 Mar 2026 13:00:44 +0000
Manifest next update: Mon 02 Mar 2026 13:00:44 +0000
Files and hashes: 1: FmIK1Qc2QaDRNlz8gildmkToH9A.roa (hash: fo6Q7kFWvThKvMfrJRB3ZlJagYVX1dK3daLVzThP1u8=)
2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: mXT/tYnwBfZRwl5F0o4wKiXj+QywmIBxMhlZVUDu0oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:a7:9f:d0:36:e8:2f:0c:6f:f7:38:e6:9c:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: Mar 1 13:00:44 2026 GMT
Not After : Mar 2 13:00:44 2026 GMT
Subject: CN=d3d0773f377b40a3f5f28f67134f7fe0dba7ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:91:d3:3b:51:6f:d4:63:f0:62:86:08:7d:
42:3d:4e:c6:e8:74:e6:a6:5b:f3:c8:41:e7:97:a0:
9f:d5:37:1b:11:0f:cd:5c:94:eb:8e:53:25:00:33:
19:85:55:ec:26:43:6f:93:26:c0:2f:2b:1c:56:71:
5c:f0:bb:47:e1:fd:f7:16:58:05:5c:80:7f:de:67:
5e:bf:97:f4:19:e8:df:93:a4:23:9b:80:ae:3a:02:
95:2b:0e:dd:53:95:e1:b5:b5:fa:20:3d:1a:1c:78:
3a:07:9d:42:ef:b4:41:dc:dd:82:cf:3c:5b:ed:6f:
ac:8d:60:a3:f3:4f:1f:2c:4a:0f:bb:29:06:71:20:
83:fe:14:e8:03:be:f0:68:50:de:d5:34:a9:e1:47:
a8:b4:ea:e7:3f:6e:37:ee:3f:40:d6:73:b5:60:c6:
2d:24:65:0c:96:41:42:36:af:a7:19:84:c2:2e:e0:
be:a3:f9:c4:fa:c4:46:92:e1:91:0f:d6:fa:39:77:
02:7e:ff:5b:a6:b1:67:c1:37:fb:c2:8d:64:35:c6:
d7:db:23:2f:23:c9:fa:51:ad:0a:01:0a:80:b7:6f:
dc:64:2b:90:1f:b1:ee:bd:3c:2f:06:bb:6f:ab:2c:
46:65:4a:9b:be:f4:95:84:5c:a9:19:14:8d:75:4c:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:77:3F:37:7B:40:A3:F5:F2:8F:67:13:4F:7F:E0:DB:A7:BA:7C
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f2:c6:75:ff:c9:38:c7:b0:c0:a9:fa:67:fc:3b:6d:48:12:
d6:45:71:8f:88:00:94:93:83:92:31:ef:9a:5d:fc:b9:76:f8:
9f:f1:50:a5:43:3d:c4:10:05:9d:05:7e:e8:8c:92:32:67:9c:
86:3b:96:99:17:c2:ac:40:c5:8d:2b:c5:33:f7:d2:2b:10:09:
70:0c:a3:7d:d1:f2:e8:37:2b:8d:0b:89:e9:bc:76:4d:fa:23:
02:31:1e:0e:b9:57:a9:01:89:f5:f8:8c:3e:b8:b9:e8:a3:d7:
56:1a:46:84:e5:87:07:9d:dc:fd:20:77:c4:ab:f0:04:9d:cc:
a6:99:48:9f:8a:7a:7e:46:1b:71:c7:cd:af:55:86:d1:7a:12:
fc:34:0a:bd:15:ee:01:2f:4c:f2:28:68:23:ea:bb:65:36:48:
fb:b2:f8:fd:28:5e:aa:5a:ff:d8:c8:6d:d3:c0:6b:ad:cb:8d:
98:cc:52:dc:a9:d1:1a:ee:1b:c4:82:6b:85:1e:d7:b8:4d:b4:
c4:9a:bd:b4:d2:c4:27:7c:3e:7b:09:f1:bb:f5:54:a9:b4:44:
3b:e7:f5:23:fd:8c:77:b4:44:fc:70:4d:bf:5e:ca:2d:8e:56:
27:c5:fd:03:26:00:a9:1a:24:91:a8:c9:d7:ed:4f:36:3e:72:
1d:c3:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:14 2026 by rpki-client