Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: NKsCKzPGHOjyjt/3iqOzjnqlxNz3/CytAcl7JJflpXw=
Subject key identifier: 44:38:FB:91:79:3C:E8:D4:6C:6E:5A:88:70:39:20:75:35:7B:7E:98
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019EB68E88391C9CFBE2BE685BECA2503B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 12:00:54 +0000
Manifest this update: Thu 11 Jun 2026 12:00:54 +0000
Manifest next update: Fri 12 Jun 2026 12:00:54 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: TH9bPTSb8UexiQigkNUaboXNXNzN/+UwTi8wlkfskes=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:88:39:1c:9c:fb:e2:be:68:5b:ec:a2:50:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jun 11 12:00:54 2026 GMT
Not After : Jun 12 12:00:54 2026 GMT
Subject: CN=4438fb91793ce8d46c6e5a8870392075357b7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:cd:22:95:a8:75:63:09:37:ef:dd:d1:f1:
b9:93:6b:01:68:27:46:39:37:83:99:d8:ca:21:d8:
56:db:a7:09:0a:fd:ab:96:f3:c5:c7:f7:7c:9b:03:
5f:96:0b:bc:dd:55:4b:8d:a7:13:62:ed:8d:d4:18:
c9:fb:01:a6:93:68:70:48:32:8e:14:55:14:79:14:
f5:42:eb:8d:35:69:8f:7a:ba:32:6c:8d:e7:f5:e9:
8b:19:4d:9c:34:20:a9:ac:06:55:f4:dc:61:9f:a5:
36:43:ee:03:c2:48:74:6f:37:c7:11:52:b6:34:87:
24:6f:96:70:32:3d:12:e9:a7:6b:9b:08:10:f0:6f:
6e:f5:e4:24:9f:7c:ec:d3:e1:96:0d:90:93:ff:1a:
de:ae:99:13:28:4e:0a:22:82:b4:28:da:5f:69:4b:
4b:6a:ec:bf:45:93:97:0e:1c:27:78:4c:c8:04:c6:
bd:7c:30:c6:d6:87:0e:fc:48:e5:9a:95:83:aa:eb:
a8:9f:96:45:64:73:ce:4e:55:7f:15:9e:fe:4a:57:
8c:87:c8:52:de:5d:5e:21:88:b8:2f:a4:c8:24:ef:
0f:51:0b:f6:0b:09:5b:fd:ff:b0:33:6d:12:de:ba:
65:35:85:29:c2:bc:31:44:21:1f:95:9b:7d:9d:2a:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:FB:91:79:3C:E8:D4:6C:6E:5A:88:70:39:20:75:35:7B:7E:98
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:99:38:82:4b:cd:4f:df:dc:d0:71:3d:b7:99:5d:86:af:86:
64:ed:ae:47:88:d6:6b:19:a7:34:29:63:f3:aa:b7:c4:75:76:
ba:ee:85:2a:a6:f0:c8:2a:fa:b2:02:e8:06:88:2b:6e:23:39:
a9:6f:b0:08:ed:64:6d:16:0f:f3:e8:d4:64:59:cd:24:f4:a3:
16:e7:1b:d9:89:c9:5e:42:01:c0:16:3d:92:ed:88:44:31:56:
82:2f:aa:3c:d5:cf:e0:73:76:dd:8a:9c:11:71:68:2e:6d:6e:
66:76:d9:db:f7:43:d0:8a:e8:ac:cf:14:84:6a:de:55:61:17:
5d:a9:f7:41:30:7e:0b:c3:49:bc:75:44:d5:eb:a5:de:73:62:
51:11:52:95:97:a6:17:84:f6:8a:03:96:0d:f5:6d:39:8f:a8:
ee:36:16:0a:a3:4a:f1:df:74:34:e9:28:fc:c3:09:5d:63:c4:
eb:d3:97:b9:7e:26:f5:33:26:d0:98:1b:d4:76:c7:fa:be:be:
e6:13:b8:a3:75:a1:85:58:71:cd:35:e3:24:6d:e2:ef:13:8b:
80:4a:be:12:88:7f:cf:0a:a0:fc:8b:89:00:e1:01:d2:a7:7f:
fa:a9:2d:b9:10:18:e3:77:db:5b:99:4c:6a:1f:4c:07:30:2f:
a5:d5:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 15:52:41 2026 by rpki-client