Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: Qs06KzEGA3vG+3QKg1riDIKBbF23ZpyYCs3OcMxi7zM=
Subject key identifier: 5C:26:82:73:FE:7B:56:CC:EE:0F:11:65:70:63:21:41:3E:6A:A0:81
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 019D386592D239B5044424D731CC8C677A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: gnUBlLxOjDH4Z1f5fn-4AChySoE.roa (hash: sfLmAWTXK6E2qypaAtchDrq6czQBGZESEbOVmGAo4Qo=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: rSTr/NyqJLSNZOFnvIaElIsGms9jf2QPR2vghvgPE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:92:d2:39:b5:04:44:24:d7:31:cc:8c:67:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=5c268273fe7b56ccee0f1165706321413e6aa081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:7d:96:5f:19:ea:91:21:02:a2:8b:7a:41:
95:47:7f:d3:13:81:14:04:d4:99:e9:0b:22:4d:ad:
41:35:de:e0:65:72:0e:55:df:93:03:9b:07:e0:3d:
6e:96:b9:b9:76:4b:e1:9b:3b:48:9c:a1:24:cd:e7:
c8:d2:36:81:4f:14:bc:aa:e7:63:c6:f4:82:91:12:
85:52:8f:75:7c:f9:7e:05:a3:d9:17:01:a7:bb:9c:
7e:6e:3a:b7:f3:13:2e:eb:52:9a:ce:7a:25:41:22:
6a:44:70:49:f4:79:32:21:2a:aa:2c:59:d9:5b:1c:
43:61:69:b1:04:4d:9a:f2:73:00:dd:a0:ea:21:90:
db:32:cc:69:be:04:bb:d0:f1:11:d1:52:8b:42:16:
cd:6d:58:ac:c8:62:25:bb:72:76:48:5d:6d:65:ca:
7d:d2:71:f1:00:6f:9c:2e:74:7a:ef:e9:84:7d:d9:
31:4d:77:19:65:26:ad:7f:bc:93:b5:4c:e4:db:39:
d9:b1:c3:73:4d:11:d1:ea:7e:91:ba:4b:50:8f:93:
88:19:74:5b:4f:97:93:0f:95:fd:4d:ce:2e:d3:f5:
0f:ce:a7:8c:59:07:c4:e2:47:63:3e:1a:9d:1d:c2:
5e:da:61:e8:27:ed:92:b7:6e:92:60:96:3f:e5:cc:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:82:73:FE:7B:56:CC:EE:0F:11:65:70:63:21:41:3E:6A:A0:81
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fa:ab:fb:ee:4c:6b:80:38:92:a7:a4:53:b5:28:80:92:f5:
7a:ef:c8:93:88:f6:c9:b1:17:3a:12:62:d8:d4:97:9e:31:a5:
63:ab:38:5d:2c:31:4c:3c:1c:f7:09:72:ff:fa:c5:fe:7e:4a:
53:41:65:2f:9f:99:4d:02:db:65:9d:ea:ce:af:1f:0b:43:b0:
af:48:7d:59:c5:70:6f:03:8f:2c:76:e1:4b:17:a3:4d:48:7a:
61:85:de:17:0d:e7:59:a1:47:22:46:c4:db:9e:06:e1:11:49:
53:59:37:68:cb:2e:ec:92:a2:d0:c6:b8:58:3d:49:f7:5d:ab:
27:f3:d7:ff:31:28:fd:07:a8:d3:08:86:b9:e7:3a:b7:63:e7:
f3:06:5e:d9:1c:f5:dc:80:79:4b:ba:cb:14:2d:37:a1:d7:e3:
7e:8e:0d:14:50:0b:a3:08:d3:f3:5c:34:45:d2:1e:78:d7:45:
12:98:30:8a:51:44:8b:64:a8:f5:b1:1c:18:77:5e:2f:40:e7:
39:d6:9a:6b:32:50:b7:18:fe:25:0c:a7:15:49:62:8b:45:91:
a6:a6:4b:ed:af:d4:dc:70:57:56:19:2a:3d:2a:37:79:ef:58:
ac:27:f8:aa:42:0f:08:d8:d1:66:e1:bd:78:24:71:5f:15:a2:
4d:3f:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:12 2026 by rpki-client