Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: WhduBsWyYii/6mrJfZ6t/dSRMYzYMShIS+EZuDdKGeQ=
Subject key identifier: A0:70:90:13:F6:AB:DA:68:57:0B:C9:67:E5:2E:2E:C8:F1:77:47:16
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 019D3977C91669BFB3905ADB823663ED501D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 0438
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: jjZi6uzHmPDA5sRPcyRihz0sVdA.roa (hash: LBEeu+9aJvCSWGFd1osnMlApP4nQxT6laZRWkBYIfjo=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: cFjscdWgw6QwJ11kGwAMBbadwew8EtfK26FLwewrVRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c9:16:69:bf:b3:90:5a:db:82:36:63:ed:50:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=a0709013f6abda68570bc967e52e2ec8f1774716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:5e:f1:79:67:45:e4:22:e2:d6:ae:e0:3c:
c1:cf:1d:3d:cf:0d:de:6c:18:a9:b5:13:cd:b1:b7:
af:65:59:48:6b:77:75:f4:5b:0b:5c:b6:c6:0d:1d:
b3:83:29:ed:fc:c7:04:67:85:4f:ae:05:d7:a3:41:
f3:2a:9a:e0:01:ee:fb:16:37:48:25:78:09:74:ea:
93:1a:9a:a5:91:21:1d:e2:d8:a7:48:78:b3:5f:07:
c2:98:77:7f:1c:c2:2d:bc:6f:9a:f0:6a:f2:98:30:
78:c2:14:1a:d8:ad:b0:fa:c4:4f:a8:e7:42:eb:68:
ab:f2:5b:ca:ae:c5:84:23:cc:e2:77:4f:3b:4f:73:
39:7a:8f:4e:52:af:20:db:35:41:ab:fd:f7:17:49:
90:08:35:51:dd:9a:c6:6c:91:6b:1a:5b:4b:a6:0e:
a4:59:b7:b5:df:f0:4b:e0:4e:ad:7e:ef:ac:32:bc:
96:04:0d:6c:f6:e8:bb:81:25:b7:bd:71:71:a1:5d:
db:67:e2:e7:09:0e:89:0e:34:a6:1d:17:14:81:e9:
ac:03:d6:bb:24:44:f2:40:5c:aa:7f:35:39:e2:27:
0d:50:50:db:b9:14:a9:a2:39:56:72:a9:8c:d2:46:
71:b4:e2:d2:59:fd:5e:80:d8:0e:4e:37:4b:3f:c6:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:90:13:F6:AB:DA:68:57:0B:C9:67:E5:2E:2E:C8:F1:77:47:16
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1d:2d:81:fd:b6:b3:54:1c:86:dc:69:ec:42:c4:1f:cb:a9:
67:17:ac:4b:9a:fa:ae:b1:1c:56:6b:62:79:ad:e6:76:00:21:
ef:b5:66:10:39:b7:d2:3f:6a:4d:d4:18:45:ac:5b:aa:14:cd:
7a:ef:ad:c7:47:c3:07:7a:8e:a1:d4:8a:30:56:8e:af:a6:f0:
80:bf:bd:f1:31:1e:f1:20:42:a1:d1:1e:a3:f7:ec:c4:ac:aa:
c6:9f:6b:c9:09:94:f0:4b:76:ff:ea:a4:ec:87:3a:25:2e:03:
74:b0:50:c4:ba:4a:22:38:81:56:5d:43:c9:80:26:3d:d5:c6:
80:ab:ff:39:91:1a:80:7c:76:18:8c:64:07:3b:39:ae:cf:ce:
c0:e4:2e:51:a2:be:f5:28:29:d7:d8:fe:21:74:57:c0:32:67:
1c:81:8c:b1:48:65:08:b7:29:0c:13:27:0b:5e:56:a1:7a:27:
36:ac:8c:43:89:0a:68:f8:0c:79:e7:fa:cf:bc:18:c7:23:6c:
57:74:4c:5c:dc:bd:5f:01:e3:36:f2:9b:87:d9:c8:bf:6c:d5:
1a:3c:f4:ab:4f:0b:ce:60:9c:69:1a:10:73:07:e6:f9:80:a8:
ca:ce:59:01:e2:e6:79:c7:82:cd:ce:7e:74:c0:b3:55:90:b3:
4a:cc:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:51 2026 by rpki-client