Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: JkY+PXe21KU99uq3yna1jLe6Wjs1rjR7KuZ9Xpz9Vb4=
Subject key identifier: 7E:5A:BA:91:0F:B8:F2:3A:79:7E:BD:BA:7C:8D:B9:B5:2E:88:6F:9A
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019D38D2A9F5AE7B8D23B984C54A6440A6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 0681
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: s28CR1gLazBENQfv0iRlHI-K3WE.roa (hash: Tp9gbqVHSFtjO/KmeIi7tCsMEDD0ASIghsoQ31CGOes=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: E4EXLSHoXbbqSFwW3hgngXh7lVDwhTdeDO3pNfg9O74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a9:f5:ae:7b:8d:23:b9:84:c5:4a:64:40:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=7e5aba910fb8f23a797ebdba7c8db9b52e886f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:f8:66:af:b8:e2:03:f7:c6:b4:da:03:05:
a6:25:37:4f:e6:39:86:d4:c2:81:5c:43:1d:cd:a4:
e7:a4:7c:40:d5:8d:81:d4:d3:5d:2d:ac:72:e3:7a:
bd:71:62:95:6e:8d:e3:9a:70:27:94:d3:f1:79:bf:
99:73:71:ca:3d:08:6e:53:be:dc:91:43:b0:23:f6:
69:36:cc:55:d7:2c:aa:8f:a5:81:22:45:b1:0c:f2:
17:7b:12:2e:ff:84:eb:8e:05:6f:2a:0d:96:db:51:
31:68:75:9b:d7:f7:60:02:b8:2c:a4:48:a6:a0:5a:
42:f3:81:0c:86:a9:b0:50:02:53:61:97:f5:e6:cb:
36:8a:85:ca:f7:b1:58:1c:7b:20:e0:9f:1f:53:d4:
2b:81:2a:51:e3:c6:3c:41:8c:5a:e2:5b:de:5c:aa:
f7:a0:45:de:61:1e:d7:00:fe:86:f1:7a:3b:65:9b:
98:0c:04:98:30:b1:19:1b:62:26:58:18:68:e5:58:
86:2c:5b:c1:8b:d4:95:40:c3:0a:9b:8b:e3:88:81:
74:96:2e:fc:dd:59:5c:53:2b:22:ed:d0:05:73:9e:
72:83:43:37:9d:9f:4e:e9:c3:8f:1a:e7:d6:30:36:
01:a4:0e:b3:1c:f4:99:cd:90:63:46:3b:93:8b:da:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:BA:91:0F:B8:F2:3A:79:7E:BD:BA:7C:8D:B9:B5:2E:88:6F:9A
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:83:9c:ac:57:76:45:65:4b:c5:a8:a1:db:a7:db:88:2d:d2:
d5:94:35:c4:e4:dd:3a:69:68:10:93:74:00:24:96:6e:41:ac:
c6:b0:e4:b7:0a:84:39:43:4e:5e:7c:ad:04:00:f7:6e:2f:14:
7d:be:00:97:ae:b5:bd:a2:82:b1:2a:62:1c:8f:c5:ea:13:22:
a8:58:b9:a6:63:01:4a:83:24:96:78:bb:ac:d3:20:90:74:ee:
bb:00:14:1a:6b:d4:f9:f9:8e:b6:cc:97:1b:4d:1e:6c:a5:a5:
01:46:7c:92:23:ce:8e:36:33:c3:3f:54:05:45:b6:44:81:86:
b0:e3:0f:8c:82:0e:71:cc:de:5c:10:d1:22:bc:e7:fe:5a:52:
9e:98:12:18:c7:8b:93:04:5e:57:6e:3a:71:b5:97:b9:e9:69:
95:50:29:c2:71:66:eb:28:45:49:8f:64:15:bd:97:97:91:96:
cf:e1:33:b2:dc:77:83:0a:ec:49:48:a7:e0:d6:79:45:05:b6:
90:2e:0c:1d:c6:03:68:e4:4e:76:2e:d6:45:59:9f:c4:9c:31:
da:a3:90:a3:57:f3:a0:46:6f:56:4c:e0:bf:4d:53:4e:2b:1a:
e0:18:cd:54:b1:13:a4:bf:2e:c3:08:8f:64:cb:22:b2:e2:ed:
a7:76:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:38 2026 by rpki-client