Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: 1JAHa17h5+Jr0awHNWZSNmIgIwxwWjvYRgQvhDS+sVY=
Subject key identifier: 4F:47:64:06:31:F1:C9:C6:C8:22:08:D0:B1:34:E3:BC:3E:85:7D:F3
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 019CAC7E4A7BE24885F91B3CA7B5F8186784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 1816
Signing time: Mon 02 Mar 2026 03:01:23 +0000
Manifest this update: Mon 02 Mar 2026 03:01:23 +0000
Manifest next update: Tue 03 Mar 2026 03:01:23 +0000
Files and hashes: 1: sxw94R-8dpDBFwr_QuU2x8m1Z70.roa (hash: nGqPu9eVja8tiL5hL0aJIPFGTLc3iJ+u/5CYg63lyAY=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: KzyNTdQqKyr00qZo/7iYCzEYIiF110e6U/25dSecqOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:4a:7b:e2:48:85:f9:1b:3c:a7:b5:f8:18:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Mar 2 03:01:23 2026 GMT
Not After : Mar 3 03:01:23 2026 GMT
Subject: CN=4f47640631f1c9c6c82208d0b134e3bc3e857df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:fc:72:99:8b:fb:ef:a9:0e:91:1d:2c:b5:
c5:60:98:cb:f7:f5:a1:93:8f:89:3e:fc:e8:85:0c:
43:b4:72:2d:86:bc:3b:f1:64:22:26:19:d0:8e:80:
03:e4:b9:a8:6f:79:12:9b:4c:73:72:ff:6b:1a:fe:
d4:42:03:0e:38:6f:1a:73:94:bb:33:41:07:01:e0:
e9:5e:b3:16:40:c1:df:04:5d:b8:37:65:73:57:fb:
fb:56:1f:e3:fc:5c:c9:6b:d6:62:2a:60:e1:c8:c7:
0c:1d:27:8e:d5:c0:96:4f:6d:c1:2c:18:9d:76:30:
39:67:48:22:a7:eb:b4:fe:59:0c:fb:dc:59:1b:4b:
fb:ca:71:f0:e7:03:da:db:36:1d:44:45:66:22:ce:
a9:bd:ea:fc:af:83:8e:8b:38:50:17:8c:07:60:cd:
9f:da:e0:4c:e6:2c:1e:56:52:52:47:56:00:c0:c4:
1d:3b:78:30:ef:18:8b:57:7e:6f:ec:3c:74:71:2c:
ae:8f:0c:f3:a8:73:ae:0b:e6:ac:fe:3f:f8:b0:f6:
75:67:85:6f:c7:c4:53:f2:ac:4a:10:c0:b2:af:c7:
1c:52:01:5d:d4:cc:7e:08:3e:85:a6:91:80:60:94:
5d:16:b9:aa:7d:f8:9b:e7:3a:42:03:a4:ac:10:00:
98:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:64:06:31:F1:C9:C6:C8:22:08:D0:B1:34:E3:BC:3E:85:7D:F3
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b6:a8:c1:47:3f:cf:0d:9d:e7:12:5a:2f:bd:1c:f9:8f:dc:
c0:6c:ae:20:72:ba:dc:88:77:25:a5:7f:9f:4a:7b:82:9f:02:
ae:f5:6e:8c:06:c4:96:8f:88:bf:43:da:e6:23:d1:85:ab:71:
9e:df:ab:b9:50:d1:24:34:4e:f2:1d:6e:c4:0f:0b:d8:16:3b:
6b:65:51:1b:54:f1:55:d7:a2:4d:fa:9f:10:8b:57:d3:35:39:
26:7f:c0:12:79:7c:3c:9b:3d:9f:1f:d8:23:a5:01:dd:11:26:
09:3e:48:bb:b9:75:72:db:9a:bd:9b:0b:c9:8e:0e:16:9b:ba:
d2:a5:b7:32:5c:cc:13:fb:30:e4:88:d5:b6:9e:f3:a1:99:77:
ef:a6:35:e2:95:1a:01:a9:5d:03:14:4a:99:63:cf:59:77:a4:
b0:48:dc:67:1b:ef:c0:02:ce:5c:2e:2f:0b:67:44:a2:88:37:
42:e8:99:ef:9a:8b:ce:a4:6e:09:ab:8a:7e:44:c5:3f:33:00:
36:bb:88:84:73:8c:b8:d3:34:45:3b:41:d6:06:34:b7:0e:87:
6f:01:46:57:9f:de:57:b3:82:68:55:d5:60:0f:35:a2:aa:28:
58:bd:f1:68:c0:6d:14:9c:21:50:ce:ea:79:44:8b:56:20:0a:
a7:44:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:02 2026 by rpki-client