Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: m/37vleF16BerJG8ywoef5eheBM0gku/Xj6pYpsx/jw=
Subject key identifier: 7D:53:16:0C:F0:A4:CE:0B:BF:23:E9:B3:5B:8C:60:93:66:56:FD:78
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019CE4486F28DCF026299EDBFE2298405150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 186D
Signing time: Thu 12 Mar 2026 23:01:18 +0000
Manifest this update: Thu 12 Mar 2026 23:01:18 +0000
Manifest next update: Fri 13 Mar 2026 23:01:18 +0000
Files and hashes: 1: ELl-IrEPcLADQrckbaizcrV9pro.roa (hash: dX1w5CK8c5BwI0rUjgeAtIMuwEFW5kTJU8HWC5OU5oY=)
2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: urBBmhzjPinMKlbr0sdGTS+EfEEjp/cEk9BXlyoBIKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:6f:28:dc:f0:26:29:9e:db:fe:22:98:40:51:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Mar 12 23:01:18 2026 GMT
Not After : Mar 13 23:01:18 2026 GMT
Subject: CN=7d53160cf0a4ce0bbf23e9b35b8c60936656fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:38:c9:a9:9f:c6:03:a8:f0:0b:c0:06:16:
f6:62:41:a3:a2:be:51:08:21:aa:ed:8c:33:f5:85:
21:b0:29:43:30:0b:06:94:0e:15:80:be:2f:21:2e:
ca:f1:9b:16:a0:a6:9a:73:6f:99:4e:e8:76:fa:d8:
be:48:5f:e8:ce:28:78:d6:0e:fe:7e:46:69:9a:10:
46:24:be:63:69:4b:72:d3:0a:11:ed:9e:b5:3a:cf:
08:8f:5d:82:fd:50:d6:d9:6f:4d:df:37:85:19:96:
56:27:87:85:93:cc:6e:83:d8:dd:20:b7:f6:f4:b6:
56:4c:c3:53:72:6f:42:0e:6a:e6:69:6c:ae:2f:80:
a5:cc:6d:e8:99:af:e4:44:49:a8:a9:55:b8:f2:c4:
10:39:14:f2:ca:71:b6:43:54:2e:01:bb:a9:db:97:
42:c9:70:c5:7c:70:fb:b8:8b:45:cc:43:70:62:14:
0a:cf:ea:5c:f3:b1:49:e2:fe:b6:64:3f:fa:ef:b3:
22:26:c1:ac:6d:9e:84:e2:7c:8b:4d:c6:e6:c4:8a:
49:38:f8:e9:10:6b:eb:06:37:81:33:21:8d:52:f0:
2f:89:40:9c:85:61:51:a6:41:db:3c:69:1c:40:65:
3f:3e:a4:5e:16:5a:63:d2:c9:e4:21:94:97:71:49:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:16:0C:F0:A4:CE:0B:BF:23:E9:B3:5B:8C:60:93:66:56:FD:78
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:cc:35:82:b2:91:65:85:b8:1f:6d:22:2a:c0:83:85:42:
e5:7d:52:44:83:1f:a5:68:53:80:51:42:3f:42:49:f0:30:7b:
44:f3:ac:79:06:f6:92:3f:47:ad:91:e9:55:87:59:35:cc:97:
22:da:84:0b:42:11:4a:88:58:9e:2f:bd:cb:32:a6:fa:2e:7e:
2a:6e:6a:aa:9b:00:16:e1:c1:62:da:0b:03:73:53:d6:72:e2:
95:a3:63:93:01:77:46:41:7d:9f:e3:19:05:a9:29:5d:56:5b:
44:56:d6:37:35:d3:e4:9d:01:33:3d:45:5a:73:d2:3d:c9:0d:
78:e3:ac:0d:57:2b:fb:99:39:34:93:2d:f7:1f:c3:33:51:d1:
a9:c1:92:43:a3:b5:ff:9d:de:bb:71:03:ba:09:e8:4d:9e:94:
40:74:4c:3f:c2:58:9d:d3:9d:40:24:76:18:7c:45:71:15:9f:
e3:73:6c:cb:1e:4d:5b:f0:d5:54:f4:e4:be:f9:50:8c:ad:92:
fc:b8:7d:7a:2f:76:79:83:0b:8f:2c:df:65:f7:74:c4:f6:7f:
d9:85:f0:c0:80:05:07:fc:a3:69:ab:7b:64:a7:21:05:51:19:
b5:70:b4:83:94:44:35:39:5e:2e:55:85:bf:4f:a6:d5:a1:57:
c8:57:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:49 2026 by rpki-client