Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: LOP7SxQ+yK39I/3vr+DyjuYWQ6jUqK8QyDgtnyd7Y2k=
Subject key identifier: 6B:16:5B:03:B1:7D:F6:6C:64:73:5C:29:7F:AE:D2:D3:12:BB:FB:09
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019D386562DF289581472D193F9C5A466174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: f+G6NGutt0V+nFIkANVxxQPg3JgPcoiYgb9fTF5tbxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:62:df:28:95:81:47:2d:19:3f:9c:5a:46:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=6b165b03b17df66c64735c297faed2d312bbfb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:9b:f1:ce:2d:61:ba:76:ab:f8:02:e0:0f:
79:2f:67:3e:d4:37:af:20:a1:f2:74:bb:f5:d9:b1:
9e:d9:1b:80:36:4b:d3:53:94:68:f5:94:41:4c:f5:
1b:3a:39:c9:bd:1a:dc:4d:ad:48:64:f0:80:1d:f5:
43:4c:e2:9c:ef:56:2c:8e:15:86:90:0b:ad:27:bb:
c2:7f:a9:7f:5c:46:72:b5:fb:c7:eb:f5:fa:81:46:
94:4b:04:24:65:85:b9:b7:07:8c:b6:37:ba:2f:88:
19:52:52:24:28:50:a8:52:8b:e4:8c:36:7e:8b:ef:
e5:8a:72:06:a2:14:42:04:13:dc:eb:19:f7:ab:65:
0e:20:d5:83:02:f4:57:30:d7:a8:2d:64:fb:63:6b:
2f:07:29:7e:56:49:da:5b:59:84:7e:80:17:c7:24:
1f:cb:c9:8c:a3:75:d3:e1:d8:e4:d6:40:47:bf:ac:
72:f0:d0:80:fe:cb:d6:10:0d:7c:1c:28:59:9b:59:
44:2f:9f:86:4a:97:26:af:57:de:76:66:35:d3:66:
34:c4:a1:aa:0e:55:3c:72:f5:10:ee:47:3a:58:0c:
99:cb:15:fc:1f:82:40:e7:49:c9:a0:d9:d4:f8:55:
65:da:e8:49:b5:19:94:f1:bc:2b:3d:10:f7:86:3f:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:5B:03:B1:7D:F6:6C:64:73:5C:29:7F:AE:D2:D3:12:BB:FB:09
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:02:6d:9d:80:9f:90:52:9b:32:70:a4:e7:fa:df:51:50:87:
11:7d:54:cb:9b:d2:87:19:3f:81:3e:0f:a3:12:f0:12:e2:76:
ad:ae:ae:3e:5e:8d:89:9b:68:76:89:ee:0d:16:4d:31:85:e8:
79:57:9a:86:c2:70:0b:1d:59:7f:1c:2a:f4:63:ec:53:2c:67:
d6:68:59:a9:d0:64:0b:97:b6:f9:d8:aa:dd:21:cf:7f:01:ab:
e5:1d:1e:e1:7f:ed:41:de:17:33:54:17:ae:70:15:ed:a9:12:
6d:d4:ae:d8:49:3f:4f:9f:d4:18:9f:63:2a:a7:75:b4:dd:ce:
f2:44:50:83:cd:ce:c9:4c:a7:19:be:7f:25:68:ad:87:71:0d:
39:27:20:9d:51:23:13:77:5e:07:b1:0a:ed:0e:31:d2:75:ed:
10:e0:b5:50:40:c3:fe:15:9e:d4:85:c7:50:55:eb:40:79:1b:
69:35:58:8a:62:7d:7c:7f:38:15:31:70:57:bb:92:09:85:b6:
88:e0:d3:c3:07:94:21:a3:df:48:00:17:56:17:3e:1e:f5:5b:
1a:08:85:c6:28:89:27:a2:bd:d0:db:81:d5:2a:16:ec:2d:c1:
01:26:b6:4f:75:40:24:59:d7:c9:52:c9:86:0f:af:4f:22:dc:
ab:01:1b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client