Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: bxQD89puhn0WH8fuWPloBVeTRwtIpgFT2UnpJbT1I5M=
Subject key identifier: 73:68:00:04:68:53:A0:58:C9:1B:9F:88:18:D8:5A:1E:46:EE:9E:89
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 019CB05AA99D4DE14C532CFA88FA50BC4CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 03F1
Signing time: Mon 02 Mar 2026 21:00:57 +0000
Manifest this update: Mon 02 Mar 2026 21:00:57 +0000
Manifest next update: Tue 03 Mar 2026 21:00:57 +0000
Files and hashes: 1: jjZi6uzHmPDA5sRPcyRihz0sVdA.roa (hash: LBEeu+9aJvCSWGFd1osnMlApP4nQxT6laZRWkBYIfjo=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: 4ynjpBp4l+97BeUUhG/0oUQmFd5Glp+hL3MSelYlSu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:a9:9d:4d:e1:4c:53:2c:fa:88:fa:50:bc:4c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Mar 2 21:00:57 2026 GMT
Not After : Mar 3 21:00:57 2026 GMT
Subject: CN=736800046853a058c91b9f8818d85a1e46ee9e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:a6:bb:2a:b2:c3:fd:3c:44:c6:4d:d6:68:
74:fe:60:f2:44:02:aa:a6:c5:3c:41:8a:ce:f4:49:
7d:32:ff:b3:12:30:6c:8e:23:7b:6a:90:3c:23:b4:
de:5a:a4:fd:ab:c5:63:a3:48:cb:41:2b:f8:e0:a4:
53:9e:ea:07:b0:06:80:cc:fd:a4:9c:a6:dd:ed:d2:
52:36:53:b5:09:e7:49:be:ba:a1:33:43:f3:be:60:
54:51:eb:9c:e1:d7:da:4f:3e:f4:49:62:f9:ba:20:
70:3a:c7:2c:35:f7:c4:23:04:94:da:c1:8a:d5:f2:
b4:a6:f2:44:11:33:9f:44:00:a5:c6:01:20:db:4f:
c3:a4:37:7c:87:ab:4c:e6:45:81:9f:97:52:e0:06:
10:80:fc:b7:87:3b:86:06:6f:0f:02:54:c0:b4:73:
ca:b6:10:ea:cb:6c:dc:0e:42:1a:13:22:24:11:69:
18:bf:c9:21:2f:02:04:a6:23:3d:a6:0b:03:10:2c:
16:4e:1e:3c:d5:8c:f0:cc:58:ae:43:71:6a:32:2c:
c9:c7:cd:e7:a4:ab:95:92:c1:27:ef:20:f5:43:0a:
75:f9:1f:a9:f5:77:2a:d7:8b:46:60:2f:3d:98:c7:
80:64:0f:84:f3:f3:21:cc:57:4b:60:65:f9:bf:a9:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:00:04:68:53:A0:58:C9:1B:9F:88:18:D8:5A:1E:46:EE:9E:89
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:61:fb:8c:2b:7c:af:3a:7a:dc:38:64:ab:98:fa:c4:56:3e:
fe:a1:76:57:ff:e0:6b:7c:a2:54:c7:cf:37:64:d4:7a:ba:c3:
75:65:54:c5:fc:42:f3:c3:2f:6c:91:3c:0c:dd:d0:f5:2f:e4:
dc:4a:b4:f7:44:61:33:d8:b4:3f:29:e4:2c:05:84:cd:13:d2:
f2:48:ad:fb:9c:31:4e:7c:7f:38:e6:f0:da:98:9a:06:d2:2a:
68:fe:8e:ab:8a:76:85:c5:52:8e:08:11:ab:b1:2e:dc:66:04:
f7:5b:fd:42:85:1f:4f:c5:7c:0a:23:b7:d0:f2:bc:8a:7f:7f:
48:f1:42:a6:32:a9:bf:ca:fc:f6:e1:af:20:2c:53:5d:1e:6f:
8b:37:9c:52:96:bf:a7:d1:bd:da:e4:8f:91:3b:8a:e6:b1:0c:
7c:6b:4f:99:05:76:0c:90:13:69:3b:57:4c:89:4c:f9:12:4e:
0d:be:b1:a3:b1:60:26:7c:0d:e2:7d:4a:5a:2e:0f:45:de:00:
03:e8:fd:f5:9c:38:bf:f3:e0:a1:50:5c:c3:ef:9f:a6:87:a9:
f3:52:45:a9:64:ca:4e:ac:58:32:20:d6:e2:4e:f6:7c:5d:2c:
6c:08:24:3c:4c:ef:0a:e9:3c:33:4e:53:7c:e5:71:cb:ed:ef:
bc:4c:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:31:21 2026 by rpki-client