Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
File: fUOw7HmVHV1VgBM-UympDy_uHFs.mft (raw, json)
Hash identifier: 1B45vs1Lnua0j3WgDhwvo6vQgtwrFaK3xLOsz1CvRvI=
Subject key identifier: C0:4F:47:3E:3F:4F:7D:A3:21:49:23:B6:DB:6D:E3:B2:66:E5:81:16
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 019CAB33EBB7D94EE01268E7370BFFA3C9D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: WXvkspJfWrmUA5wk_nufiyVybfU.roa (hash: TwxJckdMeR7xh/tzcqKih737IS9Z8XzgiKeUJg0kv14=)
2: fUOw7HmVHV1VgBM-UympDy_uHFs.crl (hash: 4pYRrFgUcGl5gdnH3bRq5ndhRSaIOCr+EzcWH2jN6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:eb:b7:d9:4e:e0:12:68:e7:37:0b:ff:a3:c9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=c04f473e3f4f7da3214923b6db6de3b266e58116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:6c:34:e2:72:25:8b:8f:a9:ae:46:44:06:
fa:f6:28:1c:c0:4d:d8:2f:43:e4:72:c5:57:21:67:
47:30:69:ff:b3:31:5b:3f:2e:59:22:29:e4:9f:e0:
a0:c4:b9:4d:e8:81:2a:e9:f6:fa:32:11:36:73:87:
a4:b0:54:68:34:c0:d6:41:74:03:18:fe:d8:fc:99:
dd:59:11:93:d7:03:cd:86:e0:c4:fa:74:8e:49:be:
20:2b:a2:e2:c2:78:1d:ed:c5:39:25:bc:21:5c:b9:
b8:d9:ee:ea:d9:ac:29:44:79:31:04:f8:37:38:5b:
d2:01:83:65:43:e3:5d:32:48:2b:75:5b:88:9d:73:
cc:3e:d7:cf:de:42:d1:5a:c1:e6:c7:8c:25:51:a0:
8e:6f:b8:04:0a:13:e3:42:05:42:f2:49:82:62:46:
ca:d3:fd:7a:bb:76:52:3a:4f:4e:df:b1:ef:a9:40:
fb:66:98:8e:32:d5:f4:81:64:67:34:08:2d:8b:1f:
dc:56:4f:6a:ab:95:8f:e9:80:df:b5:3d:81:31:d0:
8f:76:df:f7:19:ab:88:a7:65:3f:44:af:82:7b:a3:
3b:f5:d8:d9:2b:cc:11:52:a3:b5:56:d2:2e:7a:7e:
2f:a1:0d:b3:d5:12:e0:7c:59:14:f8:6a:e3:ec:f2:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4F:47:3E:3F:4F:7D:A3:21:49:23:B6:DB:6D:E3:B2:66:E5:81:16
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:02:07:86:95:7d:71:b6:d6:62:75:90:fd:0d:d8:4d:ad:
a9:b8:a4:3a:a9:13:d0:2a:e3:d8:40:30:71:a5:69:7a:82:fe:
cf:35:f7:e2:bc:d6:e9:c5:88:11:18:0d:68:d3:4d:57:a8:f3:
ac:2b:2d:ef:b5:d5:e3:27:29:66:52:71:4e:07:ef:35:ed:63:
28:9b:ad:d5:12:08:b5:31:32:a1:59:72:68:39:c1:1c:93:89:
47:30:49:e3:ca:36:39:e3:d2:a7:2a:80:0c:11:83:39:cb:fd:
d1:5b:e1:14:c1:c1:e7:ce:67:ef:dd:02:53:85:a1:49:df:90:
0f:6f:9d:f3:72:5c:e2:f0:74:5c:e0:3f:d5:9a:a1:ae:59:7b:
14:ad:f1:9a:9f:bf:e7:c2:43:f8:5a:8c:c9:5b:3b:8e:5e:d0:
6c:a9:57:14:7a:f3:4f:cb:09:9d:46:b0:3a:36:7a:99:ad:4a:
9f:2b:9e:6a:c5:53:6f:1a:fd:3a:b0:38:37:8d:b7:db:38:54:
98:22:f6:2c:0a:71:0d:ac:9c:8c:bf:5a:b6:f0:95:1b:17:3c:
d6:62:53:2e:84:bf:21:7d:39:24:66:07:a0:5d:11:e7:20:88:
3e:f6:e8:c8:bc:3b:df:73:b3:03:97:c7:77:6f:13:7b:bb:a7:
bf:f4:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:22 2026 by rpki-client