Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File: uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier: iscVzHcLrRslM4OeZEmi7++QXxjpaglIB14ADOl/9xI=
Subject key identifier: 6A:E2:2B:22:41:01:E7:12:2C:2D:5E:6D:EE:5B:D8:F2:4A:EA:70:FA
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 019D39E5E66914329E633A851DED28802919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number: 1348
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: kr8gE2DfthaTiCQ1Bm1Xa-ZiHAM.roa (hash: PGCsHT38bMBMpPa/lXRavJzxwVglEXK+5xignQWX00o=)
2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: oLHD1rd5BgyUvkCZlw7KPJTvg569j2JVxmu4+A9LmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e6:69:14:32:9e:63:3a:85:1d:ed:28:80:29:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=6ae22b224101e7122c2d5e6dee5bd8f24aea70fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:b1:20:4b:4e:31:44:eb:77:df:74:cb:a2:
21:39:18:b9:0a:29:ed:04:76:f0:0e:83:d7:d7:0f:
0b:ec:c0:eb:06:48:ad:ab:ff:1b:83:03:5d:09:9e:
a4:7d:7c:96:6e:ce:73:3c:6f:c2:e8:62:86:4f:0d:
81:02:08:98:95:cf:21:d7:6f:bd:56:b5:d6:9b:c1:
2e:58:bb:fb:e4:1e:f0:4e:ff:72:e4:2e:3a:5b:8e:
fd:e4:83:66:1b:99:86:87:eb:24:97:f6:b3:7b:59:
5d:a1:9b:c2:b4:cf:12:8f:27:05:10:27:27:a5:46:
29:cb:21:34:39:41:24:35:94:65:64:0d:2e:24:2c:
95:3c:b6:a0:6a:4a:87:0e:6a:64:90:66:8b:20:24:
fe:15:4a:ea:55:f7:d4:ee:df:fc:20:a7:90:47:38:
87:6a:95:6e:49:52:81:6d:75:84:3b:ab:f2:89:8a:
b9:ae:b4:44:c1:c1:6a:76:a4:90:29:79:26:c9:0e:
a9:90:82:7e:10:ad:40:de:8a:e8:4f:07:f0:f1:fd:
f8:0d:4c:9c:ad:b3:79:da:c2:86:8a:53:b0:d0:c0:
f4:31:76:ac:a8:fb:c7:dc:e2:02:f4:19:38:e6:99:
6f:33:76:3a:47:33:a2:be:f9:94:d3:08:45:af:02:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:2B:22:41:01:E7:12:2C:2D:5E:6D:EE:5B:D8:F2:4A:EA:70:FA
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:62:c3:28:f4:e1:08:2d:fe:17:51:bd:92:44:e3:2d:72:02:
7f:32:90:b2:9f:68:c2:62:9e:fd:64:5c:6d:46:82:79:06:82:
1a:b9:6f:27:95:58:c6:b2:44:ac:2a:ab:8a:14:d9:ff:f5:a8:
ab:22:f1:ff:7f:fb:4c:a9:cc:6a:c3:9b:3c:0d:d1:5d:f0:d6:
24:70:87:9d:61:f3:c0:d3:3c:eb:fe:3f:04:ad:6e:57:bd:0a:
c5:e9:29:3c:d6:38:d0:39:eb:a7:b4:0a:c7:81:dc:77:48:bd:
1d:7d:0e:be:69:fa:41:25:a2:5e:b8:dd:c4:c7:8d:a6:b4:f9:
1e:e2:63:24:e7:ab:13:b8:c2:c5:a9:f9:ca:de:e1:f4:f8:69:
34:50:49:dc:aa:f6:06:82:e4:57:77:2c:ac:df:56:4a:14:6f:
7e:30:63:21:2a:d5:0d:7d:57:e3:9e:2d:74:c8:9a:be:9a:7d:
33:58:0f:4b:02:8e:49:86:77:2a:ac:20:e7:7a:91:97:ef:b3:
50:58:e1:1c:9c:11:20:c7:5f:0e:81:2d:a3:9e:d8:be:90:bb:
99:32:de:9a:e3:67:c9:43:6f:d2:b4:9b:98:e8:83:1e:da:3d:
3c:6b:19:26:d4:5e:26:7c:25:6a:be:cd:de:28:52:9c:55:a6:
e9:81:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:30 2026 by rpki-client