Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: ExY2RJtzRnVeCZIc0LMzZ21EMwQDVOAf6MSB6Sp3cxg=
Subject key identifier: B8:53:02:A9:B7:C7:52:58:09:FC:4A:C4:F7:52:6A:37:2A:7D:69:10
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 019D382EA6BD06BA60830BEBE3537189F2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 10EB
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: Ntq657VT6l4Y2gPWI-QPcLNDXIM.roa (hash: Pt8tZkYbxo4DV40Mb0Y1qZZ49X4ObdKzZapAV4hW5og=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: /z6OzkiApssrjxokmIF/MOi2hgck4TK3DusMF6qa1c4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a6:bd:06:ba:60:83:0b:eb:e3:53:71:89:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=b85302a9b7c7525809fc4ac4f7526a372a7d6910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:09:3b:37:04:5e:b5:c6:69:95:c1:81:49:
7a:cd:23:ac:ba:7f:af:f5:47:32:fa:73:ae:1b:98:
89:f1:7f:1b:19:5a:9e:a0:34:f8:ee:7b:e2:5a:46:
e1:07:0a:62:15:60:30:79:f2:50:b2:fc:a9:9b:a1:
15:da:b0:ff:36:44:9f:b1:f9:0e:73:5b:c2:7e:cc:
90:71:76:a6:78:9b:d2:24:d4:bc:b5:4f:4d:5b:7f:
9b:a0:16:23:65:a5:32:89:77:eb:09:8a:40:15:ac:
47:36:c3:0b:3f:83:93:05:a1:07:57:47:9c:2e:f0:
a1:91:19:4b:15:1b:66:75:2c:6c:04:d7:b5:7f:07:
ee:26:f8:6b:58:7c:fd:ba:06:3b:d2:49:c0:31:9e:
f0:50:3c:95:69:23:4e:b2:b5:26:41:5e:5e:7e:70:
e8:b6:6d:29:7e:fa:da:a0:16:b0:5e:7c:d3:4d:8c:
59:b4:5b:dc:e7:a5:dd:45:39:6a:ae:d8:7e:d7:00:
45:dd:50:70:d3:0e:2c:13:7e:82:2d:20:ba:ec:9d:
cf:a7:b7:e8:4a:23:27:2b:82:33:25:10:08:da:cf:
04:e3:6e:c0:85:cb:f2:20:9f:21:05:bb:c2:7b:5f:
73:56:cb:60:4f:16:27:03:cb:15:b9:e7:01:7e:1f:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:02:A9:B7:C7:52:58:09:FC:4A:C4:F7:52:6A:37:2A:7D:69:10
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d5:f0:55:99:ba:27:1f:d8:8f:58:8a:dc:0f:11:39:31:7b:
84:a2:2d:2f:32:df:98:8b:9f:1a:97:2b:10:96:79:8e:20:26:
6e:dd:4c:0a:e9:2a:37:bb:01:df:93:d7:bb:b0:22:11:14:a9:
c8:f4:28:b0:9c:2e:67:26:e6:69:52:e7:35:a4:7e:0a:4f:45:
05:a5:58:bd:7f:28:25:c6:2e:19:31:07:6c:b4:ec:bd:73:56:
37:16:d9:91:11:fe:5a:9b:0a:60:27:36:c6:0c:7f:8b:bc:75:
76:8d:7f:b4:76:1b:d8:3b:7f:7b:c2:59:d6:71:7c:64:57:c4:
a6:5b:66:b3:10:06:f8:ef:7b:81:36:30:f5:fc:59:ce:06:64:
29:5d:bd:8b:28:bc:4d:e4:26:fa:97:e8:71:b1:33:60:02:03:
e7:2d:ca:3b:fc:2a:64:e1:54:34:92:53:86:fd:ac:9b:cc:74:
23:2b:3a:10:b2:29:68:b2:36:51:48:29:ac:fb:3a:3e:24:d3:
63:8f:5f:78:41:64:ea:0b:34:d9:30:6d:86:60:4c:b2:f3:20:
34:fb:14:61:88:48:1a:95:63:bd:df:2f:e0:1a:59:32:6e:d8:
3e:78:68:5d:0f:65:5a:e8:01:e0:f1:57:10:d6:89:c5:e1:59:
ed:2c:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:10 2026 by rpki-client