Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: +IOBAzg+4TQeZX8t8BlHeFDnR/AnPv+EjL0Y9Gye36A=
Subject key identifier: 76:FA:5E:89:78:29:BB:54:6B:E5:5B:81:56:1A:49:53:79:06:98:EC
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019CB8EF7EFECCA4C6D58F72515528C7CFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 07E6
Signing time: Wed 04 Mar 2026 13:00:28 +0000
Manifest this update: Wed 04 Mar 2026 13:00:28 +0000
Manifest next update: Thu 05 Mar 2026 13:00:28 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: cjJKlcukz1l/DmPv/JA2lTt0G0DQOim6mQAKJj09czc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:ef:7e:fe:cc:a4:c6:d5:8f:72:51:55:28:c7:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Mar 4 13:00:28 2026 GMT
Not After : Mar 5 13:00:28 2026 GMT
Subject: CN=76fa5e897829bb546be55b81561a4953790698ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:b1:0f:2c:e5:6d:c2:e8:c2:8d:85:9e:a9:
c1:bb:4d:22:13:22:72:e5:92:91:d4:dd:33:d7:7d:
29:2a:1c:0e:43:d1:34:ab:dd:5f:98:52:62:db:de:
b2:df:e8:26:d9:89:f7:48:29:76:97:78:b5:0c:6a:
03:5e:ab:b1:a3:d8:ca:43:3c:bc:f2:c0:ff:a2:5d:
ff:5d:f4:dd:1c:64:41:6d:78:0a:b4:6c:22:30:69:
ae:50:9d:cf:3c:9b:6d:f8:52:6a:73:50:46:c4:b7:
1f:90:39:9d:4f:93:a5:ff:27:a6:d7:5b:8c:ff:59:
ab:61:64:3d:fa:db:88:3a:ab:7c:3a:8c:7f:b9:70:
0e:39:e7:53:bb:b5:48:1a:16:28:b3:77:55:7f:52:
8e:80:37:42:0d:f4:23:da:98:7f:6f:be:99:d7:9b:
90:86:17:97:34:b1:27:18:08:1e:b5:37:21:6b:ee:
6c:a8:3d:8d:84:ae:d5:67:1d:e6:ee:2b:ba:40:ec:
e5:18:8b:52:dd:e7:3c:83:43:6f:b0:a2:e6:4c:a7:
d1:39:bd:56:9e:ad:4c:53:44:5b:13:a8:1a:aa:e9:
4a:b7:70:16:d1:61:e2:cd:47:41:df:1d:92:cd:8b:
4e:a4:41:68:16:bc:ee:d9:8c:40:33:ac:68:20:d8:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:5E:89:78:29:BB:54:6B:E5:5B:81:56:1A:49:53:79:06:98:EC
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:4f:09:93:7f:e4:8a:85:c5:01:c0:de:0f:7f:cc:e7:e6:
e6:6e:a8:17:0a:e0:c6:bf:be:70:fa:b2:14:86:c7:3e:f1:3f:
d8:40:f8:2c:c0:54:41:80:20:b2:03:f9:69:18:5c:ae:7f:81:
cf:f4:25:d9:aa:01:c9:3f:19:4b:63:a8:3b:c4:47:16:8e:5b:
78:a5:b2:af:90:3f:cb:6b:02:e4:24:1b:9b:db:85:2c:66:e3:
91:67:ac:f3:3c:c7:e9:09:78:6c:91:97:62:cb:f7:ea:f1:9f:
3c:ce:d3:5c:62:e0:ab:24:94:ba:9f:93:3b:c4:9f:13:3c:ee:
62:5b:aa:fd:4f:38:f9:a9:07:7f:4b:0f:a7:a7:20:cc:04:a3:
20:db:1c:50:6f:5b:df:07:64:2e:88:02:33:4d:41:ae:3a:b8:
b1:11:f0:a5:78:cd:21:48:ea:24:2b:05:ed:74:3b:75:46:2b:
02:8a:8f:9b:07:23:f4:df:fa:31:fe:07:50:e5:68:9a:84:ee:
c8:3c:24:c8:4e:57:d8:ba:a8:ae:53:87:27:b0:3c:cf:16:6e:
ef:ac:d6:4b:02:f9:5f:7a:7a:ed:cd:41:4f:fe:1e:64:93:d2:
22:e2:30:22:61:2a:0b:00:73:28:34:56:41:b0:c4:b7:0d:d8:
90:32:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:55:50 2026 by rpki-client