Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: ysExxPWc92/vI/mj/duZUWeyLX8Kcfuq0o2+J0CAK3w=
Subject key identifier: 2B:8A:46:B7:1A:FD:83:C0:9B:E6:C5:1A:2F:69:4B:7E:AE:10:13:B7
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019CE4111CEDA9BA9D1634EACEC9DB10C855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1879
Signing time: Thu 12 Mar 2026 22:00:52 +0000
Manifest this update: Thu 12 Mar 2026 22:00:52 +0000
Manifest next update: Fri 13 Mar 2026 22:00:52 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: ROHfCQtITB0Olt5LOjMyVmmAvHhPwQ9rQ9ugfzoWhHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:1c:ed:a9:ba:9d:16:34:ea:ce:c9:db:10:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Mar 12 22:00:52 2026 GMT
Not After : Mar 13 22:00:52 2026 GMT
Subject: CN=2b8a46b71afd83c09be6c51a2f694b7eae1013b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:78:32:b2:56:b7:39:d2:d3:df:20:0d:2b:
89:62:37:6d:90:8f:28:02:b9:f8:4f:38:62:2a:50:
81:28:3b:48:4c:49:20:32:cf:dc:b4:0b:38:40:19:
e9:b0:33:3a:c2:22:94:06:40:39:36:63:1d:42:50:
09:fd:2b:18:3d:80:c6:b4:5a:9e:4e:56:cc:a4:97:
e4:88:87:c7:99:71:dd:bb:cd:36:e0:c0:6d:62:dd:
7f:4c:f5:f8:5b:46:50:49:49:6e:49:f3:61:54:07:
91:9b:15:b2:ba:01:c5:98:af:f2:fd:70:2a:ac:d7:
c6:e4:8e:4c:2c:8d:9a:bf:7a:03:3c:b8:ce:91:a4:
65:32:bd:f9:6e:a1:24:dc:32:2f:c6:87:2c:78:49:
76:2f:fa:6f:62:e3:18:23:06:aa:22:f0:99:48:20:
cf:95:8d:46:fb:b4:09:0f:03:d0:ea:4e:44:c1:db:
2f:9c:f0:c8:80:c7:5c:da:46:0e:f4:65:32:8e:5c:
c3:68:4d:4a:87:87:20:8b:13:e9:b2:e6:00:a7:27:
ff:34:75:74:ca:8e:f7:ea:62:36:df:c2:c2:ae:36:
3e:40:25:ed:76:b4:41:6c:70:9e:c4:6c:38:02:45:
fb:83:4e:56:cd:af:4b:0d:80:07:1e:89:5c:73:a0:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:46:B7:1A:FD:83:C0:9B:E6:C5:1A:2F:69:4B:7E:AE:10:13:B7
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:21:63:e8:2e:ba:14:44:d0:ad:15:c0:6b:39:bc:77:42:
dd:44:ff:ca:ec:36:19:47:80:fa:f9:b2:d0:b3:f2:19:0a:e5:
5c:c8:17:6e:94:1e:d4:18:88:00:7b:83:a5:6f:6b:45:22:a6:
16:ae:e9:b6:10:9b:1a:0b:78:cc:aa:8f:be:6d:09:47:12:c5:
92:ae:a9:79:94:71:6a:2c:60:13:bd:e9:44:c3:0a:8c:3d:fc:
f0:4b:66:c7:6e:96:04:a0:98:c7:a5:fb:20:2c:77:3d:e4:77:
2b:c4:c7:dc:40:cf:28:b1:11:bb:2d:5b:ea:ff:e6:99:49:05:
36:a4:89:a2:1c:9d:06:d0:d6:cc:c7:43:f2:5f:be:5e:39:60:
73:56:2c:0b:77:59:b9:b2:64:f4:d2:77:4e:99:88:7e:4e:53:
8a:01:7f:24:f8:a2:69:3c:d4:02:c5:5e:c5:9b:cc:ae:d6:b2:
21:8f:ce:6d:04:d5:8d:0f:d4:ab:3f:d9:02:1e:26:aa:f3:cc:
08:9e:14:9a:f7:a4:0b:00:11:82:86:64:4b:1c:7b:72:b8:20:
b4:ec:2d:37:66:a7:0c:20:06:79:bf:1c:fb:19:e6:8e:65:ec:
3e:3f:42:e6:09:a9:69:d0:26:58:68:3f:c6:2e:0d:d7:2b:ce:
fe:4a:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:48 2026 by rpki-client