Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: eR/jM598oiw0dEkPGon/VNCyHFwWnzKZDHyxA7j0PVU=
Subject key identifier: FB:30:57:7F:CC:9C:5F:3D:A6:10:EF:49:95:59:26:99:4D:3E:81:89
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019D38D3C6358D95E5EAB3D83E5BCB175BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 06D5
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: TSjfj-QisRfZKTbvFvagtYYtljU.roa (hash: aXZ9GQHn0MfhoPq/DrK3cj/6rgXogLzvprkNtDCtBy0=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: BeOOv3BixfrMs71S1owvXnUflfca6/0zZF+sb5v0ZoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:35:8d:95:e5:ea:b3:d8:3e:5b:cb:17:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=fb30577fcc9c5f3da610ef49955926994d3e8189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:05:80:1e:30:58:47:97:7b:2a:26:bb:1e:
02:ba:ea:7e:d2:a2:ba:39:e4:d0:58:6b:a5:55:81:
ff:2d:88:5e:ec:d8:02:49:42:93:8f:80:dd:97:2e:
df:b1:b8:1c:51:4f:7d:c9:c5:e7:05:12:ea:c6:cf:
9e:3a:da:24:32:85:5d:2c:ab:df:8f:e7:b9:77:3d:
78:f6:bb:fb:dd:8d:9c:a5:a5:dd:62:d5:92:8d:65:
e0:a9:c5:01:29:89:09:73:6c:f2:ba:ca:6d:e6:8f:
ca:9a:9c:06:bc:5f:66:d1:d0:ab:e2:ec:5b:13:45:
04:c9:35:11:21:6a:28:6a:fb:98:9f:6a:3c:11:ca:
1b:ea:29:20:10:81:e7:e2:ab:88:5f:ef:09:78:db:
ba:c3:84:99:39:b8:0e:7f:3d:2b:72:5e:12:cf:99:
ba:a2:c6:09:01:af:4b:03:f3:89:f6:f0:44:34:45:
4a:03:a5:f3:7e:ba:6d:49:27:22:ab:a0:67:29:c6:
dc:3b:eb:fd:00:e7:c9:89:3c:f8:a1:7c:af:73:32:
4f:25:09:2d:b2:6b:09:c3:7d:48:e0:3f:68:97:31:
29:34:e0:3d:14:94:e8:63:4f:22:a0:b7:f8:49:f4:
26:de:08:44:59:36:77:98:d3:15:92:64:f3:5f:53:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:57:7F:CC:9C:5F:3D:A6:10:EF:49:95:59:26:99:4D:3E:81:89
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:70:87:ae:6e:a7:4e:f7:96:8e:a8:01:1c:c2:63:ce:16:
f7:56:c7:77:11:d8:1d:93:17:82:ba:60:ce:48:47:51:4a:a7:
c4:04:b6:3d:fc:fa:8e:a6:f2:06:a0:91:eb:18:70:fd:53:c6:
09:7b:11:83:ff:a3:c8:ae:c8:b1:59:2d:4c:3a:7d:e7:51:44:
1c:7b:c8:07:f3:cf:92:1e:49:fe:11:5f:61:6d:0b:04:ae:19:
f8:96:4d:d3:30:be:04:b0:32:75:c2:bd:6e:b0:82:e0:49:2a:
55:48:cd:fd:8a:33:97:a8:e8:ec:22:d7:a6:3c:24:7e:37:21:
56:14:97:97:45:89:77:47:68:7c:c9:83:f0:46:59:6e:ce:e3:
e0:ca:dd:8f:a3:6d:bd:7b:82:ce:eb:65:a7:87:73:c1:9f:ba:
a4:bb:a0:b5:1e:85:1f:11:1e:9d:d0:6d:35:0a:80:15:23:ec:
c1:88:21:25:aa:05:f2:c7:64:ae:d1:c4:44:7c:2d:40:c5:13:
9e:17:92:1d:34:aa:46:f1:25:c7:0b:cf:a5:8a:d3:17:1f:be:
70:71:6d:fc:73:a4:05:4f:d7:6d:9d:0b:20:2d:05:62:af:1e:
b9:26:cb:c2:af:17:23:d2:0d:d1:00:e3:c1:cc:75:a4:95:b7:
cd:f2:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:42 2026 by rpki-client