Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: nZa/fN59TFDyU7TfSn2wuBSR1hL/LEpyRuSD62Fv5sQ=
Subject key identifier: 85:1C:95:F5:B5:B6:F6:7C:10:9A:E9:FD:F7:0B:4C:19:4A:ED:B8:96
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01A08BD6338B20E57B6DEE3E13A60390F691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:01:05 +0000
Manifest this update: Thu 10 Sep 2026 15:01:05 +0000
Manifest next update: Fri 11 Sep 2026 15:01:05 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: Wo61LiTzQBvin4YcL8V3bWlCiavbQArnF7xIxBc6lk8=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:33:8b:20:e5:7b:6d:ee:3e:13:a6:03:90:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Sep 10 15:01:05 2026 GMT
Not After : Sep 11 15:01:05 2026 GMT
Subject: CN=851c95f5b5b6f67c109ae9fdf70b4c194aedb896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:d8:d1:49:fa:93:4a:1b:67:07:22:b9:71:
b6:6c:b6:9c:00:07:24:fa:60:36:ec:37:dd:c0:5f:
ed:fe:9d:84:bf:46:be:5f:ad:c5:ed:f3:cc:7f:64:
61:11:ca:88:2c:c8:26:b2:40:cd:33:f3:88:1f:7f:
16:60:91:4d:e9:ee:c9:1c:56:39:3c:d1:5a:ba:83:
b5:9e:5b:02:1a:31:71:5d:18:fb:ad:aa:e4:19:dc:
22:2b:94:98:57:63:1c:5c:ea:8a:9e:b2:dd:ae:5f:
4f:6f:65:86:0c:ee:15:b0:1b:db:df:09:f6:b7:de:
f9:ab:84:b3:e7:70:34:35:a9:e5:cd:b1:05:6e:6b:
52:e9:41:a7:2a:ff:d7:9a:2e:cd:80:37:e4:9f:26:
9d:38:b2:8d:be:0f:44:dd:b2:f2:7d:a1:c4:fa:af:
4c:b5:bd:84:c2:4c:dc:f8:e9:15:e1:a9:d9:ed:78:
51:a1:e2:af:db:04:94:5a:6f:24:0b:73:84:ec:34:
8b:73:f2:b8:61:eb:fd:c2:51:15:fb:86:a3:df:aa:
84:6b:5c:ca:f7:b8:36:19:e5:92:eb:fa:ee:2d:12:
ba:c9:27:3a:c0:04:2c:26:9c:98:34:63:e4:2d:e9:
65:1b:86:e2:88:37:74:06:9c:5e:a2:48:5b:14:7f:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:95:F5:B5:B6:F6:7C:10:9A:E9:FD:F7:0B:4C:19:4A:ED:B8:96
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ef:11:5c:fe:71:ca:7b:9e:fd:a7:9f:2d:a9:6e:5f:ce:ed:
df:55:2f:ed:fb:92:73:27:b2:88:9d:24:d3:a8:81:a4:df:84:
b9:b4:fb:b9:90:6a:33:64:69:e3:36:05:ee:b7:a5:ca:2a:bb:
9b:4f:9c:52:03:c5:17:53:c7:06:43:e1:38:bd:8f:6f:24:53:
dc:7a:96:77:c7:a5:56:92:b5:70:24:c9:41:88:7d:d0:18:f3:
99:d3:ca:6d:94:5d:35:59:07:0d:36:c4:2c:a0:86:46:c0:1a:
13:2e:15:e5:48:1e:7a:c8:a5:5e:d6:e8:da:0c:e4:65:10:0e:
54:fc:36:ac:58:87:0c:92:02:0c:2c:b1:d4:b7:5e:48:c9:5a:
f4:e9:22:26:6f:dd:00:17:9c:06:75:39:77:6b:03:b9:f7:c5:
f0:75:74:76:f4:53:ec:f0:bf:32:ea:c0:61:ce:7b:84:ea:a6:
05:a6:fc:40:7e:c9:4d:2b:b8:c7:7d:87:6f:2e:fd:e1:5b:17:
75:c0:da:80:0c:5c:7a:cc:62:59:7c:52:8f:6a:20:cb:25:20:
03:47:d6:fe:60:e2:8f:bc:46:e6:17:ba:01:6a:6e:a2:94:d9:
f1:bd:d3:12:24:9d:10:c2:f2:9c:7c:fa:0b:6b:77:0f:6f:41:
12:4b:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:46 2026 by rpki-client