Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: ZotU6DBNAtTqHHteZ167Fbd9KPdpI7komw5ZheQZk0Q=
Subject key identifier: 2B:B4:56:FE:74:86:BB:2B:56:B5:8E:59:0D:42:86:33:7C:07:43:5C
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019D26283BDF307F06FD6CBA6D061E52A86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0FAE
Signing time: Wed 25 Mar 2026 18:01:04 +0000
Manifest this update: Wed 25 Mar 2026 18:01:04 +0000
Manifest next update: Thu 26 Mar 2026 18:01:04 +0000
Files and hashes: 1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: ieeEFFkKlqkuivKC7qhc2QUntfGS6XtuJLcv4e46YoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3b:df:30:7f:06:fd:6c:ba:6d:06:1e:52:a8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Mar 25 18:01:04 2026 GMT
Not After : Mar 26 18:01:04 2026 GMT
Subject: CN=2bb456fe7486bb2b56b58e590d4286337c07435c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:6c:c8:34:96:7f:07:d3:b6:1c:58:39:e2:
06:71:01:39:f8:55:18:d3:be:30:f4:e3:fc:4f:8c:
bd:47:80:86:61:da:96:12:fc:10:5a:3e:f9:ef:93:
24:91:b6:61:42:e4:10:3d:40:5b:2c:5f:41:a0:f2:
e1:63:bc:76:22:9f:b5:62:c0:64:f1:96:43:15:11:
90:b9:87:4f:bc:5b:89:23:fa:db:d8:57:b7:79:72:
2d:b9:27:c8:f3:90:4e:8a:c6:6d:00:63:df:42:d4:
a6:cf:43:3f:24:76:e5:aa:e8:ab:71:66:ff:cc:4e:
0c:1c:15:6b:82:fa:9e:4c:9b:92:0a:52:d9:21:49:
62:ed:82:e2:b5:8a:c4:0c:9d:87:1d:c8:3a:14:a2:
1b:eb:f6:88:fb:44:36:17:72:5d:87:ae:09:0c:ab:
ba:3c:bc:db:0a:72:a4:d2:04:d8:79:dc:f2:a1:1e:
a2:84:88:72:93:90:fa:e4:90:da:2f:1d:83:d4:4c:
cf:41:03:c2:5e:aa:13:5d:97:9f:36:ff:8b:f0:05:
2c:ff:5d:83:35:56:96:74:23:48:f3:5d:80:b6:19:
78:87:3b:5e:57:d3:10:4d:89:6e:11:d9:f9:48:07:
74:e2:68:56:c1:24:7b:1c:e1:bc:6b:8c:f0:76:19:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:56:FE:74:86:BB:2B:56:B5:8E:59:0D:42:86:33:7C:07:43:5C
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9e:9b:a8:f3:7d:4a:4a:59:62:58:5e:36:ca:7d:11:d8:1b:
75:57:84:42:19:9b:1e:fb:54:3b:9b:a4:a0:87:d3:e8:8a:23:
61:44:53:da:35:71:d9:e6:00:84:f1:ca:bb:53:a7:78:37:24:
5d:84:4d:84:b1:87:75:bf:13:2b:e5:28:d4:cf:e2:97:e0:7e:
b4:b3:e2:56:ca:fa:78:60:b5:7f:32:f7:ef:e6:7e:f9:99:74:
70:43:d9:06:ff:66:28:d3:01:7f:a5:35:75:0e:39:ef:eb:3d:
6c:e1:0a:66:d2:0f:11:cd:23:2f:5a:87:b2:62:ef:4a:41:35:
04:08:0d:58:ba:21:5a:3f:12:4e:26:90:8e:df:98:49:0c:df:
eb:a0:fe:0a:ac:8f:cb:1f:4b:e8:2b:7f:40:bf:b1:01:81:db:
26:19:d5:a8:e4:2b:ea:1e:d9:78:08:79:f2:f7:67:af:d1:16:
ad:6b:d4:e2:5b:bb:03:be:19:cd:74:bf:c3:52:32:c3:04:43:
93:ef:42:2d:c4:32:d5:d2:51:b6:03:bb:4a:d1:fc:e7:d0:ed:
1e:fd:66:36:de:cf:ef:1c:10:89:26:0c:91:0c:5d:c4:7b:b0:
9f:41:c0:99:9b:1e:31:80:74:f4:43:6a:04:01:cf:16:7e:e8:
a1:c3:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:46 2026 by rpki-client