Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: go5NYApi1G0OSh7qOf1tqpg89mv6RdrlDto/0OqLASY=
Subject key identifier: 67:D3:DE:2F:2A:3C:AD:25:D0:69:15:00:C0:BB:D2:BC:C3:78:E0:4C
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019CE3A3484876D9F3B9E806A5AFEF009772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0FA8
Signing time: Thu 12 Mar 2026 20:00:54 +0000
Manifest this update: Thu 12 Mar 2026 20:00:54 +0000
Manifest next update: Fri 13 Mar 2026 20:00:54 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 5qduJvVDTuxvjl7UnPvdPunHjOoe7PgJXM95HVVUIms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a3:48:48:76:d9:f3:b9:e8:06:a5:af:ef:00:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Mar 12 20:00:54 2026 GMT
Not After : Mar 13 20:00:54 2026 GMT
Subject: CN=67d3de2f2a3cad25d0691500c0bbd2bcc378e04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:fa:bb:09:28:6c:0a:1c:22:4f:6f:95:0c:
d5:2c:cd:21:09:db:7f:1b:b0:95:d9:cc:75:10:9b:
ca:93:ef:78:ab:b1:93:0d:98:8b:c1:09:90:de:06:
ff:a8:d5:82:79:88:c5:5d:9c:86:4d:d5:66:02:6a:
d3:a0:b0:42:61:34:3f:23:32:c5:32:ff:8f:97:f5:
2d:42:10:76:53:8f:ab:ae:e7:46:2b:aa:b1:0f:6a:
63:84:0a:da:5d:ca:89:e0:fd:90:2e:a6:07:dc:b9:
c8:8f:73:51:33:43:b9:58:c8:3e:08:fb:c8:5f:40:
36:41:5a:6a:45:c3:fc:76:79:02:7b:44:bd:59:6f:
05:82:9e:41:84:35:fd:ea:21:bb:34:a9:4b:88:e4:
af:cf:98:74:54:b5:da:0e:77:f4:94:22:da:77:67:
39:9c:69:93:99:33:bc:a8:62:b5:7b:a2:3b:41:6c:
4f:a9:63:53:31:a5:91:02:f2:38:b6:2c:b8:00:73:
a4:54:ca:4f:74:ef:49:a9:4d:52:b5:43:c3:bd:cc:
54:df:01:a3:67:dd:47:f3:03:07:8f:a5:1e:b1:2b:
93:b2:b8:e4:cb:ef:92:e9:43:6a:4a:79:9d:93:ad:
73:2d:ed:4b:2e:d4:26:bf:3c:c1:ad:2f:56:44:a4:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:DE:2F:2A:3C:AD:25:D0:69:15:00:C0:BB:D2:BC:C3:78:E0:4C
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:80:d3:63:56:ef:7a:f0:fa:c5:2c:e8:ab:65:54:d9:e6:
32:81:19:0b:22:f1:d3:e2:87:86:29:20:82:e2:ea:99:fd:30:
59:ea:55:1a:92:f5:00:89:05:20:5a:9c:14:71:bc:ab:6f:08:
51:65:a8:d8:a7:66:7f:98:31:de:0d:20:e5:b1:83:01:0b:b2:
47:c5:f6:f4:0c:c7:bd:37:05:ed:15:81:da:6e:d1:4c:27:90:
6b:23:73:9a:ce:46:1a:ac:69:01:25:ed:99:6f:34:f9:e7:2f:
2f:cf:87:67:6e:54:94:a0:9b:df:06:3d:cb:8a:ba:95:b5:45:
c2:2a:6c:0a:3b:f3:a8:e5:d7:c1:31:f4:4e:26:1e:02:f1:cd:
4e:8c:6d:15:f2:72:ff:cd:8e:9f:f9:60:da:ad:b8:8e:98:6e:
24:e6:91:ca:79:b2:85:63:aa:d4:0b:f0:fd:37:36:9f:ac:55:
1c:98:88:f2:82:2f:34:c4:ac:ea:27:9f:91:4d:65:77:f5:44:
4e:66:d6:d1:1b:21:aa:09:3f:64:55:60:ce:05:44:1e:1f:c9:
1e:09:57:39:33:b7:c6:d3:31:4e:9e:6f:e1:ab:b6:21:ca:16:
96:61:1e:ed:b7:e4:c5:f8:be:8d:fd:05:dd:0a:ed:eb:07:37:
0c:d5:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:14:54 2026 by rpki-client