Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: ZMLJ9psSKBUgDDt2LR96U4Ug9ScfIMiUJlRsEVPLzVI=
Subject key identifier: 5C:B6:87:E4:E3:21:5A:77:2A:C7:F0:B6:3D:B8:04:14:6A:30:A6:28
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019CAC4769FFAC07A9C5923DDB20E30E0E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 02:01:27 +0000
Manifest this update: Mon 02 Mar 2026 02:01:27 +0000
Manifest next update: Tue 03 Mar 2026 02:01:27 +0000
Files and hashes: 1: ELl-IrEPcLADQrckbaizcrV9pro.roa (hash: dX1w5CK8c5BwI0rUjgeAtIMuwEFW5kTJU8HWC5OU5oY=)
2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: G6UZqJlU1+ZQVac+BX9Id8KR4DLVpHaT/UfnfpoXa80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:69:ff:ac:07:a9:c5:92:3d:db:20:e3:0e:0e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Mar 2 02:01:27 2026 GMT
Not After : Mar 3 02:01:27 2026 GMT
Subject: CN=5cb687e4e3215a772ac7f0b63db804146a30a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:6b:0a:a8:84:aa:26:2c:72:27:c5:be:4c:
93:8c:79:3c:2d:b2:c3:51:79:57:d6:2e:d4:2f:dd:
dc:34:01:b9:35:15:21:be:ef:10:53:1a:45:0d:cc:
4c:f6:1c:61:fc:54:65:3c:b5:94:77:58:26:f3:32:
b0:4f:e8:d8:b4:a7:92:6f:c2:e1:a8:83:ff:e4:47:
2a:73:f5:ba:d7:43:e1:2c:4e:0d:74:49:d3:29:20:
8a:19:0f:9d:8c:66:5a:d9:4b:41:d8:7d:f6:e8:1f:
d4:aa:0e:e6:a4:3c:af:58:fb:8a:03:bf:d5:30:89:
65:24:5e:49:cb:77:35:c8:63:6a:f8:03:73:ed:94:
a4:07:b4:44:ca:65:41:76:b3:e6:e7:fd:a7:f9:cb:
00:a3:e5:2c:20:0d:4c:8a:4b:73:77:63:2c:d9:0f:
cc:a6:60:fd:aa:0f:20:84:47:0a:3e:ea:22:7d:67:
7c:10:b5:ce:0d:77:99:a5:4f:7d:7f:4c:78:9e:a6:
1b:48:10:36:34:49:7a:bb:8d:4a:c5:91:38:71:9e:
d1:94:0a:5a:44:6b:26:66:e6:96:e1:5a:9f:5d:a4:
46:0e:18:c2:bf:b8:ff:b4:4e:0c:2d:6b:7a:9f:be:
7d:75:d6:a6:c3:63:b1:f0:65:7c:04:ac:5f:07:fd:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B6:87:E4:E3:21:5A:77:2A:C7:F0:B6:3D:B8:04:14:6A:30:A6:28
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f0:b8:26:1e:e5:56:0a:1c:ef:ee:8b:7d:2b:a5:6d:ac:7d:
67:d0:1f:d0:0d:9d:70:21:3d:4d:70:03:a2:5a:86:03:9c:1e:
bb:b2:12:62:7a:f3:1e:37:aa:f3:e6:1c:9a:76:7f:6f:bf:27:
38:10:73:2e:cf:65:15:85:b2:4c:f5:1d:08:4f:ae:9c:e5:c4:
7b:ea:cc:a6:a4:57:55:e0:67:ef:b4:3c:15:c7:2f:ef:fa:61:
b0:81:7c:bc:2f:77:10:cc:56:cc:84:c8:42:59:20:22:55:36:
af:f3:b3:0c:db:06:43:01:5f:c2:bd:88:dd:03:87:ef:4c:72:
b9:77:af:b5:1f:48:f7:5e:a6:2f:86:54:1f:00:11:bc:95:8e:
29:0d:0f:a0:83:08:89:eb:bc:fd:15:5c:a2:bf:93:1f:d1:13:
eb:96:8a:9d:7e:07:2d:e4:45:36:1f:24:50:d7:e4:67:50:44:
93:12:ce:70:93:56:04:bc:7f:ab:c0:1a:87:5d:30:b6:e7:62:
f6:84:cc:6b:b6:8d:8f:76:42:b0:cd:db:6a:16:44:4b:f6:42:
eb:48:2f:3a:be:9e:36:80:1e:b6:cd:9b:bb:09:71:8b:c9:a1:
99:f7:72:a2:5d:94:09:e1:3c:37:bb:c8:04:7a:af:cb:99:78:
ec:82:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:51 2026 by rpki-client