Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier: v2UwjZ79ijEO9wxlqLYGxLnDcFnaHmvabgFA9PFqB4Q=
Subject key identifier: 3F:18:82:3D:F7:5A:64:80:3B:F6:12:AF:12:69:E3:46:40:8A:86:BE
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 019CA9B3B2A98A5AB9751062A5FF49C4E41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number: 1628
Signing time: Sun 01 Mar 2026 14:00:51 +0000
Manifest this update: Sun 01 Mar 2026 14:00:51 +0000
Manifest next update: Mon 02 Mar 2026 14:00:51 +0000
Files and hashes: 1: N3jaze7YJRe2qAy_Yl4PgjOPV78.roa (hash: J9hAHBk9hnYVFJwAFN6kZ7iaHqqOjhd7Ue4bGVAtGs4=)
2: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: 5Gi8V5mcl7mycqpE1zHtU3xwrc6L9HttnR80BQcPvcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:b2:a9:8a:5a:b9:75:10:62:a5:ff:49:c4:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Mar 1 14:00:51 2026 GMT
Not After : Mar 2 14:00:51 2026 GMT
Subject: CN=3f18823df75a64803bf612af1269e346408a86be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:20:8e:12:a5:e4:3e:a6:20:8e:ea:7f:c7:
39:10:90:a5:f5:61:1b:a4:8b:49:18:e5:43:8a:d0:
f6:96:76:d3:64:ec:55:bd:17:91:af:50:20:63:b2:
a1:f7:5c:c8:3b:02:91:37:e8:3d:24:2a:5e:07:08:
dc:be:d9:b2:fe:63:22:8f:dc:a6:51:16:f2:ac:4b:
fe:af:b2:9a:f3:2f:60:72:44:76:44:34:93:d4:13:
b1:d6:ac:58:74:b0:04:63:6b:f0:f2:77:f2:b4:32:
da:a8:2b:95:dc:88:60:59:ab:e9:16:ff:34:5d:4d:
13:5b:0f:b3:5f:1c:04:8f:e5:f7:a3:a8:b3:f4:9b:
f6:f7:31:0f:a4:83:08:8d:fb:f3:8d:1d:6d:dc:78:
43:57:f0:00:c8:7a:3a:0d:5b:c5:ee:c8:50:ee:42:
9e:83:23:6d:20:87:bf:84:c6:a1:0b:eb:86:58:01:
3a:28:01:a5:af:69:ba:1d:f2:15:e7:94:49:df:b2:
1d:e5:af:98:42:9f:9e:64:63:4a:ac:23:16:64:8b:
90:de:f5:6e:3d:94:e7:79:9e:21:6d:bd:86:b5:8d:
3e:8c:37:b7:c1:40:f6:03:d2:7a:65:29:4d:3e:7b:
ae:d0:cc:4c:f0:66:41:bc:d9:86:e3:74:a3:ac:5f:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:82:3D:F7:5A:64:80:3B:F6:12:AF:12:69:E3:46:40:8A:86:BE
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:51:56:b5:7c:d7:32:b0:66:d3:5c:aa:91:1b:2d:c2:b5:
cc:99:cb:a0:f0:4f:c7:4b:e8:1c:a1:a5:0d:5c:b8:b3:39:9c:
23:2a:43:70:a8:c2:53:6b:70:63:f6:cd:e3:02:dd:4c:b4:d0:
99:71:25:cb:f7:ab:09:8b:20:56:12:d7:1e:b4:b4:a6:46:1e:
dc:64:ed:94:2b:cb:35:de:50:02:53:55:f7:a1:8c:48:77:e1:
ab:6c:44:18:98:f3:12:9f:f7:94:88:83:7a:18:d3:af:f9:06:
db:0d:dc:7d:c2:94:9b:f4:50:89:a2:90:96:0d:1e:8d:27:56:
ec:8a:91:f9:d1:0f:fc:d3:5d:78:12:80:37:21:e0:bc:9b:6c:
eb:cc:de:62:c6:32:82:7f:39:58:fc:a1:aa:5b:84:5e:25:b2:
30:23:82:0b:78:2c:f5:a6:70:20:d2:55:25:63:58:b3:77:a7:
73:d9:1c:60:e3:cd:e9:a5:d2:80:09:f2:03:ff:02:24:6c:c7:
27:ba:d0:34:a5:bf:eb:6a:01:82:2c:a3:4e:6d:5f:16:90:a4:
85:02:bb:41:04:f8:7a:d4:43:d8:a4:08:d1:4a:ef:f8:bd:8d:
b8:19:df:ed:7c:41:6d:c5:d0:3f:a1:22:60:06:0f:45:bd:e7:
2d:b3:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:33 2026 by rpki-client