Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: 2hkHPV7z2K46C5BD4NIYclb8DRGMGPc60EkcAyFGjHU=
Subject key identifier: 3B:F2:0C:D9:0B:09:3F:FE:2A:DE:AE:D2:7F:61:35:E2:1A:17:F4:8D
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019D382EAC34B67D900EDDC92D2EC9D1772A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0A9B
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: nopZPw0aTFxaPlog/HkSu2aGnkTK1rfdvUy5fL6hOS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ac:34:b6:7d:90:0e:dd:c9:2d:2e:c9:d1:77:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=3bf20cd90b093ffe2adeaed27f6135e21a17f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:3a:a5:a9:93:b8:17:3a:1c:a8:e4:22:68:
f6:3e:bc:25:9d:b5:2d:25:24:8e:81:12:0e:13:47:
13:e5:4a:af:83:7e:e8:fe:1a:44:4b:46:62:7e:38:
90:67:40:50:2b:2d:7e:2e:78:4f:ec:57:d8:19:56:
18:6c:df:c7:1a:fa:8b:10:f4:4f:b4:53:42:52:43:
e2:6e:37:8d:b5:3c:01:bc:75:6e:80:67:8f:50:e0:
8a:e6:de:7d:b4:60:d5:e0:79:5d:1f:c8:1b:c9:e5:
bd:8d:65:3c:b6:e2:f4:18:be:58:d8:3d:58:ce:be:
ae:7e:13:a2:25:1e:0d:a5:01:ad:20:09:d5:9d:04:
31:f3:d5:1d:e2:4f:6a:7c:d8:f5:a2:c3:10:27:49:
f4:42:14:cd:66:a9:a5:92:1a:49:73:4c:50:c8:d3:
8c:ef:f3:10:f6:ed:00:22:ae:19:58:77:3c:7b:85:
f0:7c:4e:42:2c:f2:9b:e1:51:9e:f4:7e:72:40:7e:
16:5c:fd:cb:7f:62:19:54:7b:cd:bf:d0:50:2c:12:
34:ad:26:c1:e9:55:9c:be:1c:97:db:42:58:d3:b3:
1e:53:2a:e8:52:63:c4:11:bc:1f:bd:04:24:25:a5:
ad:c8:cc:bb:b6:cc:06:7d:df:d4:88:b2:10:8f:59:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:0C:D9:0B:09:3F:FE:2A:DE:AE:D2:7F:61:35:E2:1A:17:F4:8D
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:96:bb:f7:ac:e2:7d:40:de:50:d8:b1:34:20:5d:86:95:c2:
0d:ae:fb:ac:38:01:e9:c7:d6:b1:63:4b:c3:a7:f0:b2:fd:c3:
9e:fb:5c:bc:e1:44:18:cd:00:15:aa:a6:cf:64:54:ed:8e:6b:
e0:84:c1:df:b2:ca:65:26:1c:83:a0:a4:8f:c4:b1:61:04:96:
46:39:ee:0d:38:1e:a8:75:2e:ba:66:b3:ad:27:8e:85:0b:0a:
61:cd:0f:52:5f:1b:30:9c:01:b0:d8:01:7f:72:81:8d:c2:15:
dc:19:f4:61:6b:c5:8a:0e:3e:e9:4a:4e:7b:b9:13:f6:ed:8c:
aa:9f:19:33:7f:70:ca:08:b4:b5:53:b3:23:65:87:9f:20:f9:
16:ec:8a:b4:11:6d:9a:c8:db:58:c7:51:96:2d:58:34:a2:5a:
30:5a:97:fb:15:26:d3:da:01:e2:39:74:93:e2:01:6f:87:c1:
02:88:a1:dc:bf:a3:46:c1:c5:6b:48:22:ca:06:54:c3:8e:c1:
86:80:48:70:15:ef:88:cc:45:97:40:e1:2f:e7:1c:7a:f8:8a:
a0:94:ec:ba:ae:78:db:38:17:cc:60:2f:ac:a6:fe:0d:38:90:
17:93:d7:90:00:5f:ae:18:b2:70:c6:a8:aa:0c:8a:ea:aa:a2:
36:af:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:58 2026 by rpki-client