Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json)
Hash identifier: f9L+jm7JHPKMuJ/DMu64va5NCRPlB0Ht2HKtaswrAlE=
Subject key identifier: 02:44:DE:91:A9:EF:D7:6D:43:62:EA:9B:A6:5C:F4:0D:23:FA:F3:1E
Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c
Certificate serial: 019D38661913DD40D063E7E7CCA3552F89FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: 8z2MsUIxn5nw1nALL7LRWOPfhD8.roa (hash: 9llBO7otknupIcgUJiQCvbsRcVO2MsJYLXN6HgTAZ1I=)
2: KHEZbMvYE8xTVowmo6UQmw6DqDg.roa (hash: cvAQSN4DUv0yDrAvqweWU+LLGRpqR/gzJ2hNAerTPDI=)
3: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: CV/bk0bCfZxg6/vmAkI94+jG1N5LEQOWySwMBcHRpck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:19:13:dd:40:d0:63:e7:e7:cc:a3:55:2f:89:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=0244de91a9efd76d4362ea9ba65cf40d23faf31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:bc:39:9c:62:53:82:0c:35:e2:9b:20:28:
38:59:6c:af:6f:6d:ef:8a:2a:6b:a0:bf:25:37:4d:
cf:d9:ce:b9:db:38:e5:ec:f5:bf:90:b0:10:61:7a:
3e:c0:25:ac:06:ec:32:6a:5a:8b:59:db:ab:9f:77:
28:4c:9c:1c:83:45:56:eb:65:9f:c7:cb:76:db:b4:
31:a6:4b:5f:da:df:1d:2b:33:a3:f7:d6:cc:93:3b:
56:2c:d7:f3:a6:b1:82:96:b2:4f:da:1d:c1:07:23:
7f:b9:46:bc:3c:74:cf:f3:38:3b:81:2b:ab:91:26:
25:83:fb:b8:62:44:c9:f9:53:21:63:fb:de:4a:1c:
57:e0:58:58:8d:85:f2:28:11:b7:ad:f2:71:08:c5:
cd:4a:1b:d6:42:75:b4:2b:31:5f:ba:dd:5b:e5:51:
5b:1f:5f:95:c1:06:c7:0c:59:e1:de:03:5a:33:cc:
30:3f:d6:16:ca:f1:ce:2a:c6:0c:2a:8d:39:10:bb:
52:4f:60:77:8b:76:d9:a8:33:38:1c:33:80:7b:c6:
ed:bb:17:b3:23:f3:20:3d:58:e8:03:33:0c:5a:22:
e5:f5:63:05:e3:b6:2f:f0:b8:25:37:0f:c6:b3:ac:
5c:6d:1e:5c:c2:ea:e5:3c:35:a0:80:8f:70:02:20:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:DE:91:A9:EF:D7:6D:43:62:EA:9B:A6:5C:F4:0D:23:FA:F3:1E
X509v3 Authority Key Identifier:
keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:ae:32:49:b4:18:39:70:94:ec:70:64:fb:57:ca:e4:1d:
4a:76:1f:fa:88:32:da:8b:88:31:d4:98:ad:b2:d4:ef:22:77:
17:dc:79:36:be:82:35:32:cb:62:26:2c:14:0a:93:24:b2:f7:
86:ee:a1:a4:69:f1:ea:ae:8c:e9:d4:21:10:e8:f9:c7:4b:4e:
f0:f9:d3:f3:6a:55:f4:a4:ea:22:f6:7e:98:68:9d:de:12:a2:
ee:61:4c:a0:b0:1b:6d:79:39:8e:d9:b4:b0:a6:b9:28:79:50:
ec:9c:36:36:30:f2:91:b9:46:b9:7f:86:ea:28:7f:91:5a:2a:
7b:be:1d:23:23:ac:65:9b:2f:d8:f4:5e:ff:0b:9a:e5:c4:43:
1a:bf:5c:7a:03:6d:07:51:a7:eb:3a:2e:5e:ac:b7:b9:89:d1:
73:84:77:e4:7c:65:9c:fc:3f:8c:d9:d6:fa:b0:37:09:d1:e8:
8f:4b:60:1b:70:83:1b:54:26:4f:7e:40:16:51:e5:34:69:a0:
ff:0d:e1:21:16:ed:ad:16:86:45:37:82:ad:a5:d5:71:2d:6b:
c8:00:10:b7:16:aa:d2:6f:42:5e:48:d5:19:ef:95:93:00:8d:
1f:17:94:1b:21:4b:f3:c8:9a:37:70:b7:d2:04:59:f3:6b:b3:
c4:86:cd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:40 2026 by rpki-client