Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
File: uFMBDF5uyIn4FaqqYX36hQzvGBI.mft (raw, json)
Hash identifier: kSopQ8RfuMZu2xk8ODETVzhVU0q1u5Z5ySjvkE1iOrE=
Subject key identifier: 26:BE:6F:A2:E9:6B:A4:97:D7:E3:43:24:36:35:04:0A:EF:B4:F5:7D
Authority key identifier: B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
Certificate issuer: /CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Certificate serial: 019D32631FB52490CF82E6779F7258EFF817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
Manifest number: 2A
Signing time: Sat 28 Mar 2026 03:00:49 +0000
Manifest this update: Sat 28 Mar 2026 03:00:49 +0000
Manifest next update: Sun 29 Mar 2026 03:00:49 +0000
Files and hashes: 1: DMy4O9te3FGDOiHfmdnAD5qTobI.roa (hash: 6GA6MuFe9G8co+k7t6siAugdUllbUXR6POYCJOYkv+8=)
2: uFMBDF5uyIn4FaqqYX36hQzvGBI.crl (hash: gNAk7aWvQa3PAaAp3Sjrop6jErRvFwNAEnbcNtdzk1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:1f:b5:24:90:cf:82:e6:77:9f:72:58:ef:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b853010c5e6ec889f815aaaa617dfa850cef1812
Validity
Not Before: Mar 28 03:00:49 2026 GMT
Not After : Mar 29 03:00:49 2026 GMT
Subject: CN=26be6fa2e96ba497d7e343243635040aefb4f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:e1:82:4f:e3:80:ac:f8:b6:7c:8f:ce:60:
ad:f6:f6:10:43:b6:9e:a5:9a:70:42:dc:31:9b:01:
3c:ae:78:c3:39:c6:cb:c1:13:c5:a8:21:dd:c0:74:
eb:fc:75:35:1d:0d:7c:3e:91:53:a8:15:da:b4:a9:
58:a8:93:ea:1b:db:41:74:1d:a0:9e:8d:a4:40:4b:
da:c0:f7:a7:23:8c:01:a9:81:91:c1:c6:23:a2:23:
e6:06:f3:1b:f2:ac:60:05:88:31:d8:89:32:54:41:
c1:0a:ff:66:2c:76:06:26:90:b7:58:3e:d1:1c:17:
9e:8a:9f:e7:1e:3d:7f:cb:20:85:ef:94:65:74:f4:
ac:02:5f:ad:93:83:8a:9e:61:6a:5e:83:db:03:e8:
53:74:2c:c0:9b:fb:3e:6d:f9:0f:a7:52:61:bf:ef:
f6:e9:34:b5:6a:5a:2d:ae:13:74:ba:d0:27:ee:f7:
f8:d5:d2:be:dc:5b:cb:35:09:e1:01:96:98:7d:e0:
7b:be:4c:75:9a:ce:92:49:80:6a:59:17:b4:a8:5e:
28:fc:46:98:2e:3f:97:e3:2d:59:fe:a5:1d:25:c6:
0b:64:f4:a6:bd:a3:89:49:54:26:61:6d:cb:3e:fe:
e8:a2:8f:0b:b1:f9:1d:bf:96:17:3b:e0:4e:05:6b:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BE:6F:A2:E9:6B:A4:97:D7:E3:43:24:36:35:04:0A:EF:B4:F5:7D
X509v3 Authority Key Identifier:
keyid:B8:53:01:0C:5E:6E:C8:89:F8:15:AA:AA:61:7D:FA:85:0C:EF:18:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFMBDF5uyIn4FaqqYX36hQzvGBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8ffadc-5d54-4598-bd52-a7e55e5efdcf/1/uFMBDF5uyIn4FaqqYX36hQzvGBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3d:c8:7f:93:2b:33:6b:4a:94:49:bd:7c:e6:40:8f:43:9e:
26:9c:5a:ed:0c:79:f9:0e:7e:f6:0b:91:7f:7d:df:48:13:a1:
e0:1a:4a:40:fe:b5:17:a2:82:c5:9a:79:04:08:60:36:85:22:
a6:4e:7b:8e:b3:c7:86:99:50:c0:eb:93:7a:4e:e1:0a:7b:ea:
5e:09:b7:4b:3e:4b:88:93:87:d1:c5:25:93:b7:ec:92:d3:11:
4c:48:70:c2:92:90:73:5d:50:ca:18:24:48:5f:67:36:53:df:
53:8d:fd:5d:5c:99:96:e4:26:3f:e8:9f:d9:2e:37:fc:bd:d3:
3c:8f:01:3d:59:d4:f1:54:a0:49:86:90:33:bd:53:59:5e:fe:
b6:bd:b5:fc:8a:96:85:68:ab:7a:78:c1:20:54:f8:33:a2:c3:
1d:69:6a:e6:ac:f0:42:27:08:fa:17:bb:e4:8f:ac:d8:42:c7:
ff:03:86:41:67:bf:94:f0:2c:7d:c7:29:7b:6d:42:52:6b:bd:
94:4f:6f:25:6c:ff:d4:f6:87:61:c0:69:25:91:09:d6:b7:20:
38:7c:32:1c:a0:cd:fb:b8:80:fa:58:30:da:20:02:b8:2e:fb:
51:3d:9c:65:a5:7d:71:50:37:0c:74:e9:84:80:4e:2b:e0:89:
e7:8e:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:37:04 2026 by rpki-client