Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 0m1Hu8Kr7wgPJEaALaDI8SGJALww3uMl5voWc1x5Cjw=
Subject key identifier: 18:53:E2:0E:97:AC:88:F8:6E:30:F9:D6:CE:92:7F:8E:A5:B6:15:1F
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019D265EF316A5F5F0230D89533A086718E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 0553
Signing time: Wed 25 Mar 2026 19:00:49 +0000
Manifest this update: Wed 25 Mar 2026 19:00:49 +0000
Manifest next update: Thu 26 Mar 2026 19:00:49 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: fBuHrEQIbn593p8KbppMtWWMprhbWaqhzWdgZhtUaes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f3:16:a5:f5:f0:23:0d:89:53:3a:08:67:18:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Mar 25 19:00:49 2026 GMT
Not After : Mar 26 19:00:49 2026 GMT
Subject: CN=1853e20e97ac88f86e30f9d6ce927f8ea5b6151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:bf:c1:70:55:ca:28:75:c4:a4:07:65:65:
96:21:4f:18:55:8c:b4:7c:50:9e:c2:63:5b:de:95:
48:c8:d5:19:95:5b:97:6a:e5:a8:bf:13:22:78:eb:
0f:a2:d9:10:5e:f0:0f:75:d2:a7:d7:91:ce:6b:97:
2c:c2:20:83:62:7a:91:ae:b3:b2:64:c0:92:67:6d:
4a:ce:32:5a:b4:d2:89:75:fe:d6:a3:a8:08:fe:87:
1d:30:a5:60:da:78:25:77:93:e6:2c:18:75:4d:5a:
aa:da:ba:fb:56:79:0a:70:5f:20:b4:83:e6:c7:fa:
73:07:fa:99:e8:4a:f5:66:f3:80:20:48:1a:ab:5b:
1f:31:5f:31:01:d7:70:50:07:63:40:8a:3e:2d:92:
0f:37:30:75:58:cc:f8:08:14:51:44:33:1a:e8:31:
63:ad:de:12:9a:72:d6:71:5e:09:6d:e7:29:1e:a5:
e8:ae:73:b5:d5:a9:60:56:f0:79:cf:f8:82:f6:bd:
b2:c2:7d:22:c2:c5:d7:a2:05:d9:15:d5:67:77:d6:
6a:f4:fb:c8:2c:ab:72:fd:c7:8a:4d:10:b7:ef:50:
92:0d:f4:06:2e:d8:47:df:9f:ca:a4:16:28:af:d7:
8e:64:45:e1:15:29:b9:5e:0f:f9:17:cd:10:cb:ea:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:E2:0E:97:AC:88:F8:6E:30:F9:D6:CE:92:7F:8E:A5:B6:15:1F
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:77:18:f1:c2:e6:4f:f5:5b:b2:0b:9e:8c:d4:23:3b:af:
4c:71:72:3b:f1:9f:8c:10:a7:35:40:ee:4c:94:e9:7c:8a:c7:
a5:fc:ec:e6:3d:cb:92:6f:cb:7b:16:49:e7:1d:46:5f:f7:16:
70:e3:8d:be:b6:00:1c:c9:9b:59:6f:4c:31:73:d7:c6:54:20:
fd:33:68:22:60:c3:19:e9:e3:1d:cd:98:e5:eb:96:5a:9e:7c:
cf:f7:11:fc:40:a1:91:d1:c6:00:56:6f:55:eb:88:8f:8f:a6:
d7:5c:c7:63:5b:c1:64:79:13:86:7c:b9:57:0e:56:4f:b8:1c:
3e:ce:90:18:f1:99:70:94:78:d4:69:cc:11:db:c8:81:b6:24:
4d:7e:f1:51:47:a1:9c:1a:27:15:93:c8:a7:39:4e:0f:a2:d7:
bf:65:94:d4:b7:b8:44:1a:3f:42:84:ac:c8:89:38:6c:53:25:
4d:9a:27:39:21:16:c5:98:4f:51:3c:a7:e8:ef:9a:55:7c:3d:
fb:f4:dd:62:93:3a:77:0d:76:f4:2c:27:36:25:6b:e2:7c:55:
e9:7d:aa:4f:f0:f7:d0:aa:30:a6:48:1d:bf:cf:11:0c:a8:51:
4e:66:ec:92:10:f2:fd:69:8d:da:12:c6:05:1a:28:66:af:5b:
16:04:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:06 2026 by rpki-client