Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: TgeJr/X/3QjqkSfusIz2XDMPLy5I6tYg9rPlwTzau70=
Subject key identifier: B2:DF:6D:CA:61:7C:AC:C3:72:05:02:2F:D3:44:1B:D2:72:33:BC:59
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019CAD5A0A206814300A339CAA587D1DC0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 185A
Signing time: Mon 02 Mar 2026 07:01:25 +0000
Manifest this update: Mon 02 Mar 2026 07:01:25 +0000
Manifest next update: Tue 03 Mar 2026 07:01:25 +0000
Files and hashes: 1: NM07OftKQkCH2joVcvMTn-HHTmY.roa (hash: rU/LdGSeAxe5BfVN3XEqDaj1sPRpRHFtD8l5ShzGTNQ=)
2: kLGeIFwIepUgbnOKoqHRUYefBPQ.roa (hash: F4tTQgdXduDuBtHDnLeKsOpcxeDgSOzzu6aJ7AclprY=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: 5LgWo7MYBpcDKmlUxTcFwdKV7+iASlO/vCsSFCdY1rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0a:20:68:14:30:0a:33:9c:aa:58:7d:1d:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Mar 2 07:01:25 2026 GMT
Not After : Mar 3 07:01:25 2026 GMT
Subject: CN=b2df6dca617cacc37205022fd3441bd27233bc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:75:64:74:c7:19:2b:2d:db:e3:ec:1c:24:
74:a8:1b:b2:39:5f:12:03:f1:f6:a9:b1:44:91:e7:
7c:9a:f2:c6:af:3b:bb:c4:e0:38:ca:74:17:c5:66:
a2:d6:ed:96:af:53:96:42:08:88:1b:a9:91:8e:18:
66:f2:86:59:f8:8e:4e:73:cf:b2:5d:e3:d2:9b:90:
59:99:ed:4d:f1:35:9c:de:94:7f:d9:f0:9d:91:9f:
c0:10:19:33:de:38:ca:56:36:11:75:94:d7:a2:e0:
8b:d8:92:15:0c:fe:da:68:6e:ef:fb:9a:75:c2:6d:
30:94:b9:29:3d:cb:8a:e5:c7:93:b0:4f:b8:15:02:
aa:b9:9a:d8:2e:82:2a:03:48:6a:cc:e8:2d:5c:bf:
9c:de:eb:78:60:1d:8d:40:89:ac:68:34:32:7f:05:
a2:9a:14:78:4b:c5:20:2b:4d:68:bb:df:21:6e:25:
e0:5a:e0:b6:66:94:fc:69:72:05:e8:cf:30:2b:bf:
0b:bf:9a:3c:77:b8:43:23:ce:fb:33:bc:8e:53:8e:
00:15:d6:70:6d:8c:18:7f:1a:71:49:20:2a:24:46:
42:1d:86:82:c0:ac:4c:9f:cf:48:67:f7:a8:0d:ff:
3a:d4:c7:e2:ce:fd:42:21:98:4d:ab:30:4f:30:a6:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:6D:CA:61:7C:AC:C3:72:05:02:2F:D3:44:1B:D2:72:33:BC:59
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:c9:0f:16:de:de:c6:f5:91:f0:3c:93:2e:77:24:d0:f2:
b4:48:79:16:34:fa:77:f3:04:15:e1:2f:21:2b:9c:76:49:16:
ca:1e:d9:f8:d1:7b:bd:59:9c:89:bd:3c:67:cd:b2:5b:20:5c:
96:80:ce:e9:21:2d:61:5d:03:16:60:e6:6e:c9:ab:76:b2:c9:
32:95:1a:71:11:48:88:72:7d:d4:03:13:f4:6b:08:0a:a7:fa:
3a:0e:f2:89:6c:55:ee:e6:17:b1:7d:7e:62:86:48:f3:ee:c3:
46:99:59:f7:94:bd:26:c5:b2:ca:7f:6c:89:bf:60:8d:01:b0:
87:86:00:49:42:ce:b9:56:71:78:13:7c:5f:3f:d1:52:a1:c6:
37:13:ec:48:70:6e:d3:f2:d1:6f:57:7d:9f:ac:c3:8e:6e:1d:
b4:31:3e:f4:a0:03:23:07:85:cc:4f:38:6d:9d:66:a3:f2:cf:
dc:61:76:4d:69:f9:a6:bb:69:54:c0:c6:b6:b6:09:b7:aa:4e:
0b:47:14:4d:78:89:0a:35:0f:3f:da:03:14:f2:76:51:e3:12:
b7:b5:22:16:3a:7a:7e:5c:fb:c5:e5:ac:e2:58:74:06:d7:2a:
b3:c8:51:b3:1e:ea:18:8c:13:ea:55:fa:53:44:e8:ca:59:41:
cd:e6:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:53 2026 by rpki-client