Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft (raw, json)
Hash identifier: tTB+1Xib4MCQX1y6wA2o6nhAqp20JQaIV+JcAN0p40Y=
Subject key identifier: 13:0A:85:5F:C9:BE:BD:62:E8:D2:92:59:6F:2A:EC:72:8D:E9:6D:0C
Authority key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
Certificate issuer: /CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Certificate serial: 019CAC4697FD16B72E6712ACEF47D0EE1826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
Manifest number: 0AC0
Signing time: Mon 02 Mar 2026 02:00:33 +0000
Manifest this update: Mon 02 Mar 2026 02:00:33 +0000
Manifest next update: Tue 03 Mar 2026 02:00:33 +0000
Files and hashes: 1: DkZq0zpUFhASpEE4ImZTT8jsmXs.roa (hash: DqNcDnHcsyHeYm9qtIpPz2EwaV9dY65pLLq3MnQC1Qk=)
2: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl (hash: p6pfQMV4blbOUcUn7Uh5PCQLoPxDPsocgej3jxebd9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:97:fd:16:b7:2e:67:12:ac:ef:47:d0:ee:18:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb
Validity
Not Before: Mar 2 02:00:33 2026 GMT
Not After : Mar 3 02:00:33 2026 GMT
Subject: CN=130a855fc9bebd62e8d292596f2aec728de96d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:f9:14:d3:3d:74:7f:a3:2f:2d:35:09:f3:
8e:20:72:11:cd:6d:89:f8:38:44:22:03:0a:b5:d4:
22:ae:f2:1a:2b:f8:ec:36:24:e9:b2:5b:f8:7e:fd:
e2:43:1e:f4:40:c2:0f:5c:bf:a8:2a:64:36:c1:a5:
a8:b7:69:5a:d8:83:13:d8:f6:d7:d9:44:ca:59:0d:
d0:63:66:e5:c0:c9:dd:f1:90:fa:c4:fd:2b:cf:21:
a5:85:c2:be:60:58:3a:5d:21:54:95:e4:8c:f4:35:
a8:e9:9a:70:b9:82:df:6f:b0:b4:2b:83:d5:2a:c4:
b0:c3:0b:f4:45:f2:cb:c8:78:bf:f9:d0:c4:b5:b6:
17:79:45:84:ae:bc:ca:2f:69:1a:54:fc:5f:ab:12:
0c:81:b7:4d:11:83:10:40:9f:aa:dd:32:33:7f:09:
f2:1a:46:ea:c0:a7:9f:63:10:a1:62:d8:df:b6:6b:
02:81:42:cf:48:aa:30:95:fa:0f:46:94:55:34:5c:
a7:f5:8a:c5:c3:6d:ab:2d:44:33:ff:16:68:3c:1a:
6f:12:62:a3:66:57:d2:a1:52:14:fd:4e:67:86:95:
d8:58:cc:b5:ee:29:5a:ae:14:d1:33:24:af:d4:55:
1f:25:cd:5c:68:54:48:0c:b3:6d:89:c3:7b:b4:25:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0A:85:5F:C9:BE:BD:62:E8:D2:92:59:6F:2A:EC:72:8D:E9:6D:0C
X509v3 Authority Key Identifier:
keyid:B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:7c:99:ea:a9:7a:8a:b6:31:39:47:69:0b:a3:02:34:a2:
46:b6:2a:d3:91:6b:cd:fc:52:bf:bd:9b:cf:e9:36:d8:08:39:
04:21:a2:6e:68:d6:4a:72:4c:37:c9:d3:89:a4:10:b9:6c:cf:
e6:ca:b8:06:92:60:01:86:19:5b:97:56:77:8d:d3:3c:00:e3:
1d:1f:eb:b8:15:ee:9c:54:9a:9f:89:b1:68:17:4c:80:46:f9:
3b:de:ab:d4:83:46:b4:73:d4:e8:ee:f2:85:f2:7e:df:93:07:
5c:aa:f0:e2:2b:08:68:ce:89:1d:52:28:f7:de:ac:39:5c:73:
9f:81:dd:77:db:4c:de:5b:0d:17:1a:db:f8:21:ac:45:26:9e:
9b:18:50:81:94:de:91:3e:6e:cd:ed:c4:2d:1b:87:1c:63:e4:
8e:cd:63:12:21:89:76:85:e5:42:f2:2b:bd:5b:e8:27:29:7b:
8e:bd:21:f3:5d:cd:ea:f0:06:e1:d2:c8:e8:1a:8c:de:48:76:
dc:51:9f:5c:36:73:98:e6:51:4d:4e:18:19:c0:36:cb:3a:d4:
04:54:ff:a7:36:1b:b8:49:02:1d:01:89:d3:d5:01:a7:dd:50:
2f:10:8b:10:1c:3b:32:7b:d6:2f:90:a4:8b:ba:ee:de:05:9f:
28:65:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:46 2026 by rpki-client