Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: wd4VJ1twLO9WigId6HnXQ4O5mERd4Yve36TiXGO5K54=
Subject key identifier: 19:56:1B:C3:BC:30:38:67:3B:90:32:30:85:04:D6:31:EA:01:B7:47
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019D3865B488B6C51FB5F8E437B662554E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 1855
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: 295EXHRxY+TEUW7XSrnByiGEk5J2dbK8yqS8311i4LU=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b4:88:b6:c5:1f:b5:f8:e4:37:b6:62:55:4e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=19561bc3bc3038673b9032308504d631ea01b747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:78:5f:d8:cc:30:1b:6e:8e:49:eb:4e:a3:
72:4e:93:96:6a:6a:69:77:6a:2d:d8:f2:92:8c:82:
0b:78:36:49:6a:46:9f:fc:e1:4a:9a:b6:4a:04:5a:
04:ea:ee:06:f4:81:c3:45:42:c1:b2:eb:4e:2a:7f:
bb:70:9c:7c:0d:af:fb:45:3d:36:55:f9:f0:fc:e9:
dc:88:8a:36:81:f6:49:3c:e4:a1:c7:0b:21:bb:44:
cd:9d:64:6c:e1:f1:12:62:f9:72:1b:52:13:93:6b:
ad:fe:fc:19:64:c7:b6:cf:81:a0:2b:31:93:60:ac:
78:d3:76:8e:ef:8f:80:1c:45:15:62:cc:bd:bb:be:
5c:59:4b:b4:3f:2b:5a:e4:de:c0:cf:91:e5:33:83:
cb:e2:e1:fc:dc:7a:6e:5e:2c:f6:5f:e2:a4:de:2f:
14:97:fa:0a:60:e3:75:4c:7e:7a:47:f4:d2:8a:d7:
4f:e4:fd:17:94:ed:8a:0f:bd:99:97:5c:3c:ff:ac:
f0:98:5f:51:1e:46:ac:44:c8:3c:c8:6e:ec:63:49:
4a:a9:79:95:30:95:c1:a3:5e:cf:d2:be:34:5e:49:
61:1a:74:74:08:72:4d:2b:2b:21:29:bb:3e:77:3c:
3d:47:b6:53:db:b9:2d:82:7c:c3:54:51:83:31:4f:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:1B:C3:BC:30:38:67:3B:90:32:30:85:04:D6:31:EA:01:B7:47
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:08:76:3f:a8:6d:86:e2:77:66:0a:16:7c:fd:92:ce:0d:2f:
91:3f:3a:3e:fb:6d:29:ae:2c:f2:f1:54:33:65:ca:f1:22:9f:
86:9d:c9:80:90:f8:75:00:cf:93:69:31:1e:ab:dc:0b:13:f9:
c4:8b:9a:d7:10:69:b9:e6:e5:02:46:8f:49:a7:39:e2:ee:e7:
81:a4:32:76:bf:90:2d:93:11:e2:d9:7a:3b:68:bb:3c:cd:bf:
e5:12:25:ff:92:e8:32:5a:28:f1:41:17:2b:a2:1f:bf:10:20:
d6:b3:6e:e8:6a:77:d4:56:bf:a1:a6:cf:63:09:6f:ea:4a:ea:
9d:9c:51:fe:27:1f:65:21:f4:d1:2b:ed:be:c9:a0:4f:a1:76:
9b:52:4b:ea:9c:40:b4:b9:d4:91:a0:10:28:2a:34:a9:be:14:
03:eb:75:c0:2f:ad:b3:43:b0:72:42:48:b7:f6:0e:0e:b1:96:
04:75:7c:cd:70:3b:1f:5c:be:25:57:e7:23:f7:52:9d:b5:7d:
b3:cb:1a:eb:7a:f7:52:14:ea:16:bf:2a:af:c3:70:5a:49:6e:
e5:ac:57:30:8b:89:aa:17:ad:27:2c:6b:74:99:44:89:d9:93:
90:ea:e7:97:d7:89:f5:0a:f4:8f:b6:a1:66:4f:21:14:41:81:
05:f4:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:22 2026 by rpki-client