Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: 3eXAMyIqyGb9W1rsF1R8dBgPWzDsh8V3+J4gMJZmtsk=
Subject key identifier: 43:D0:D8:21:B2:41:F0:0E:F6:EF:22:56:FE:E9:2F:3D:BB:A4:96:07
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019D277286C3D61EC5C7E0E9DE0A3C2A0ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: ExUmti4/x+9GLqtnVPVUEkx30svbLFqeSTZSbEV3xsY=)
2: pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa (hash: UleN7udW9nm6GoIks0+gA75pmdznZCROwYpJMoJdnLI=)
3: rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa (hash: IMvnqVI7Pxn9M/xoV7ucEgQIFBZmeqaGx6nvvxRV2JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:86:c3:d6:1e:c5:c7:e0:e9:de:0a:3c:2a:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=43d0d821b241f00ef6ef2256fee92f3dbba49607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:cc:71:17:d5:80:b7:fa:8b:40:36:82:09:
a9:a4:ce:b0:a2:da:98:3c:97:6b:78:d6:5d:c6:57:
a5:88:ac:8e:fd:c3:e5:f8:76:f9:6d:03:3e:c2:8d:
b1:29:10:40:72:1c:ea:9f:ba:f7:15:1e:22:2a:5c:
8d:71:aa:5e:a8:fa:d3:a7:bf:eb:c3:13:c1:87:ce:
6b:89:a2:e7:47:e8:80:80:34:75:e3:91:82:1f:5b:
62:9f:24:62:65:9e:e1:a0:e0:35:65:50:2a:80:83:
c1:67:2c:b6:88:15:75:34:8c:e2:a6:14:c3:ac:2c:
f8:86:0f:80:12:19:b7:34:c2:72:2b:6c:54:e9:2f:
5c:15:b6:93:93:2a:82:4a:63:3f:c5:b0:58:bb:b9:
d1:8a:60:02:03:f6:64:4e:f5:ac:9f:0c:ee:85:16:
bd:8b:cb:f4:90:48:05:ce:ea:39:46:b6:91:7e:af:
a0:ef:8e:29:aa:06:e8:c8:e0:25:eb:82:2d:59:0f:
c4:35:65:e8:89:5e:0c:6f:40:a8:9d:2c:a1:d5:7f:
e2:26:c4:15:23:2d:11:ad:36:84:02:79:e1:ee:2d:
06:0a:b3:d6:cc:ac:a2:bc:9f:c6:8e:ae:fd:23:d7:
5e:be:a0:02:55:b5:bf:ce:e6:67:35:ff:11:34:b1:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:D8:21:B2:41:F0:0E:F6:EF:22:56:FE:E9:2F:3D:BB:A4:96:07
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:6e:14:12:80:51:54:0c:58:cc:c0:89:87:60:25:71:2b:
00:a6:7c:6d:bd:78:81:a6:24:f7:07:6c:6f:93:26:e3:dc:8e:
40:bc:1c:e1:08:b7:86:58:77:bc:b9:78:cc:57:38:10:d7:0e:
d9:c5:5c:39:ee:5f:4c:d1:ab:71:59:cf:2a:8e:b8:17:cd:66:
ea:b0:eb:bf:fe:0d:8e:1e:60:1a:59:a1:dd:df:3b:84:4b:16:
a8:7e:c5:3c:31:56:02:9d:c8:f6:26:69:bd:04:33:41:9b:cb:
48:ad:a8:82:2f:6d:e0:f1:61:5a:2d:51:79:7b:e5:5f:c9:90:
53:bf:e3:63:1b:68:bd:d9:15:21:6b:26:88:e9:fb:d6:df:c1:
c4:e5:d0:b0:d3:02:bd:4d:e5:d4:e8:94:43:81:66:5e:70:2b:
1a:d9:51:6b:71:43:06:6f:17:8e:39:37:e9:bb:c9:10:d4:07:
6d:24:a3:68:69:f0:e1:47:a3:90:87:22:4d:b8:c5:8e:6d:6f:
75:86:93:5f:7b:4a:af:0d:68:fe:e9:27:fc:ab:05:ae:f0:f8:
36:74:7a:66:e9:4f:99:21:40:33:16:5c:ff:ba:04:42:cc:2d:
5c:f3:80:22:d2:0c:35:a2:f0:d6:ee:80:29:b9:ed:8c:92:ac:
e7:16:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:56 2026 by rpki-client