Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: 0MOtQbvxp9yoKRYID7t7hzw17VCCpmAMpL5CbQhiRQM=
Subject key identifier: A9:24:58:7D:CC:BA:66:CC:7C:1E:33:3B:B5:F3:D1:70:AB:9B:5C:5E
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019D37C0D6FC5AB8BD02A12FD641DD4841C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: xuIgW7ksSWETIIqHHs7U7IfZOALW8pEZlQUCBlrjFuI=)
2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
6: ypRDxsb3_AxTrENYh76-1Wq0x3s.roa (hash: AXPwQ40+ytvDYVbgMoQ9hylazSVqs3q0IglBPe/qi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d6:fc:5a:b8:bd:02:a1:2f:d6:41:dd:48:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=a924587dccba66cc7c1e333bb5f3d170ab9b5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:98:04:6f:d8:32:b3:3e:db:2e:50:ac:90:
08:18:cc:8f:e9:ff:ba:d8:39:b3:9a:9d:e3:62:76:
82:35:21:f4:d5:b9:9f:e5:7f:1e:39:78:88:13:fb:
e6:c3:cd:4a:cf:c1:7b:10:04:2e:d8:ad:5d:92:6b:
42:69:c1:02:de:e4:20:5e:b2:17:59:56:0b:a7:09:
46:8f:4f:02:fd:92:4c:12:d2:5c:00:97:0d:41:d4:
b5:ea:c0:41:1b:91:88:79:49:33:35:07:1d:2d:4b:
ad:76:90:dc:c7:d1:f3:65:97:8d:fb:96:46:f6:a1:
3a:30:7b:9f:01:e7:e8:1f:d2:35:d0:5a:93:2c:e7:
9c:58:df:08:3e:3f:a0:67:ff:1f:44:8f:24:58:cf:
3e:f7:dd:3d:61:61:5b:3b:ba:cc:d3:47:fe:40:98:
49:be:bd:7a:cd:e9:b3:87:89:55:3c:ca:13:b5:2f:
c8:33:56:af:7e:41:c7:9c:89:66:9c:01:df:13:63:
fd:39:c0:84:a1:5a:83:e4:5d:b6:cd:7d:e9:65:26:
65:22:31:eb:44:ee:60:d7:a1:5c:2b:a3:11:cb:fc:
86:66:a4:dd:9e:e5:6c:9f:74:9e:80:4f:c8:e9:87:
c5:38:82:e6:df:5e:4a:38:93:62:29:c5:1f:fb:c4:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:58:7D:CC:BA:66:CC:7C:1E:33:3B:B5:F3:D1:70:AB:9B:5C:5E
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7f:3c:a3:c0:56:e1:f8:76:86:05:b5:24:dd:a2:ad:b3:d7:
d8:05:7e:8e:c1:b7:0e:f4:64:b4:ae:93:23:ce:44:3a:81:6b:
25:c1:c6:1e:1f:e8:fd:06:78:8d:bd:8d:50:61:b5:74:49:4c:
ec:ab:52:ce:82:22:ba:3e:26:68:42:19:14:21:72:e5:1b:ec:
8c:60:c3:5c:64:01:b4:f7:8f:82:4e:92:1a:a0:53:02:fd:0e:
e8:12:75:e4:a9:93:f5:4a:dc:6c:1b:f1:51:15:e7:27:bf:81:
7b:7c:b3:89:b6:ce:65:c7:4f:25:5d:1e:a8:8a:2c:20:b4:96:
56:85:af:05:8d:08:22:ca:6e:af:6b:e3:5e:db:d9:cc:8f:4d:
ba:ad:60:95:a9:f8:a4:be:8d:f1:33:bc:ac:5d:5e:a1:9c:01:
74:09:0f:97:7b:88:12:f1:ec:b1:28:54:85:5f:83:13:90:17:
99:cb:0d:75:4c:90:4a:30:99:4f:90:f6:9f:13:1f:02:26:a0:
77:50:61:8b:0c:e8:8f:fe:3c:0b:10:ad:ec:80:f5:8d:a5:b3:
e9:18:36:a3:3a:48:49:09:80:1c:b5:84:ce:23:e7:09:84:25:
64:8d:77:34:bc:f7:9f:81:6a:18:3f:0e:6c:ed:72:3d:b4:48:
2f:c0:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:29 2026 by rpki-client