Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: JJHN5Tr8AgnWNomLTyil91mflADOgr2mlUy0svkgjvM=
Subject key identifier: 2C:26:26:67:AB:65:D6:32:16:EE:CF:C2:BE:27:44:BC:54:A6:B0:B0
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019D296190C5B5A073081576984844FEF5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: UybLyc41wyq1EFImSu8EZ8F9ePY.roa (hash: uoRuUCd9kxaIGLIP2zdwMd/9Cx50ab0dt0v8YUxq+5M=)
2: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: Z8WaGGwdhN1zYqwL9fInYRpRO4vLZCuO2ErErKP0Taw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:90:c5:b5:a0:73:08:15:76:98:48:44:fe:f5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=2c262667ab65d63216eecfc2be2744bc54a6b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:c7:02:ce:98:84:f6:cd:96:33:0a:82:2d:
bd:8e:cc:7b:1c:70:ff:6c:2b:14:85:f3:e1:7d:3f:
3f:e4:c3:ff:c0:2e:06:64:f9:8e:15:11:a0:c9:1d:
44:57:da:1d:74:7a:1e:89:cc:8e:85:fc:94:01:73:
70:70:7a:a9:99:ec:87:96:56:6c:35:40:12:bb:fc:
05:40:2b:cd:af:c0:5f:b8:4e:02:aa:f3:86:c0:80:
9a:d8:f0:3d:0b:df:32:69:7e:c6:fb:a8:16:bf:58:
f6:8a:3f:3a:9b:a0:62:03:18:0e:8f:8a:15:38:9a:
0c:76:15:d4:f5:ed:ee:9d:f7:55:ea:8b:2a:76:50:
6c:90:87:7c:d9:a3:52:c2:35:47:0a:34:a6:b5:11:
9a:fe:34:b4:14:2f:86:39:69:00:e0:b6:b6:be:ee:
06:1b:48:78:32:8f:df:1f:ef:91:1c:45:9d:ca:cf:
47:ca:48:93:9e:8d:a7:11:e2:39:1f:75:85:c0:9d:
d9:bd:1a:c3:e7:e2:60:24:b6:fa:bb:d6:f6:9d:15:
be:ab:66:d7:78:ae:f6:96:af:e4:21:8c:f2:1c:3a:
bb:25:41:9c:45:a1:b0:f2:60:34:5e:53:fe:1c:07:
15:ef:ba:a4:41:2a:03:d4:63:18:50:7e:43:63:00:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:26:67:AB:65:D6:32:16:EE:CF:C2:BE:27:44:BC:54:A6:B0:B0
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2e:4b:c2:5f:5b:eb:ac:7a:39:78:af:b9:ba:7f:8f:47:c4:
e6:9c:b8:26:4b:d1:e6:2e:dc:96:46:b1:90:2a:71:a0:1a:e2:
23:24:43:64:7e:23:cc:19:ac:56:5d:98:37:c3:0e:a2:f0:9b:
87:74:ed:54:47:59:69:c2:97:3c:7c:4d:8f:bb:14:ca:62:04:
2d:6d:5b:b7:52:82:3a:12:d1:92:0e:57:26:27:e4:d5:1d:7f:
74:a7:4c:c8:30:65:40:f7:f9:45:57:7c:0b:1b:51:ce:d0:1c:
01:87:1b:bc:84:95:b3:70:93:ab:8f:20:0a:29:79:85:f2:9f:
c4:56:02:56:fa:5d:80:2c:ca:40:a2:ff:0b:47:1e:66:1c:d2:
1d:7b:d3:6a:68:28:92:63:3e:78:0d:7c:94:a1:7e:47:27:a6:
10:3f:3b:1e:85:12:3e:e0:13:93:fa:68:19:02:42:36:0e:12:
75:a5:3d:e8:81:7e:bf:3c:8a:63:81:56:b4:36:77:e2:13:7b:
75:fa:e8:12:ce:a7:16:b5:44:b4:0a:26:bb:f6:f7:29:d9:a3:
ae:7d:6e:7b:c2:fe:ce:fd:a4:fd:e7:4e:90:02:4c:86:6d:a7:
ad:b4:76:0a:67:ca:e8:1d:1e:12:15:27:27:76:28:a6:da:d9:
9a:cf:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:51 2026 by rpki-client