Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: Rlof0UmjlOffdSDlPurkOCLg9Qj7FdQlk10ePMLNR+s=
Subject key identifier: 1F:3D:86:82:88:F9:DC:AE:86:26:D5:8D:C8:C6:60:B2:DC:AD:DE:FD
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019D2695E506CA10C5DF7BF66A0A37A64BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0D30
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 3Dpwv4L785vUFNLyPSBED+QlQnIeafHbQb+erEx18PI=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e5:06:ca:10:c5:df:7b:f6:6a:0a:37:a6:4b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=1f3d868288f9dcae8626d58dc8c660b2dcaddefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:77:92:18:37:76:5c:8e:89:23:a6:d5:73:
0b:2b:c4:f2:e8:1e:85:04:5b:b4:1a:63:c5:09:28:
de:0e:33:0c:d2:d6:f6:fe:14:5f:a4:54:11:3f:6f:
c8:49:7e:8a:e3:27:3c:f6:a6:fa:ce:af:ba:df:7f:
a6:60:17:57:09:4f:34:82:78:18:14:5d:81:f4:2c:
56:c7:2b:97:09:7b:09:f3:4b:79:52:9f:15:cb:47:
a2:61:e8:50:c8:11:bb:b4:c8:27:0a:04:f9:18:47:
e8:51:32:50:fe:8c:8e:cf:30:a2:a5:af:a0:02:53:
13:b1:f6:5d:8b:8e:d5:e9:36:a6:9b:5e:a8:af:d7:
dc:98:dc:b6:8d:ef:77:f6:3a:7f:3c:17:bb:48:6b:
99:92:11:f5:a1:48:4a:3f:aa:c9:7d:4e:82:e5:f5:
2b:7f:cb:a3:4f:dc:b0:71:de:c4:24:5d:71:68:90:
5b:08:6a:b5:cd:45:87:63:f2:74:48:7c:2e:8e:6b:
ab:3b:82:7e:b2:8d:98:2a:36:44:f7:ca:9c:b5:03:
b7:0d:11:cc:85:df:ca:1a:74:72:c2:31:74:ff:2a:
ff:36:3f:16:53:b2:32:73:ba:d7:34:20:d4:0c:f0:
5f:87:9f:6c:42:28:db:9c:c6:a7:74:70:3d:45:5c:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:86:82:88:F9:DC:AE:86:26:D5:8D:C8:C6:60:B2:DC:AD:DE:FD
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9c:18:d4:4d:ee:46:d1:91:e1:fd:70:a9:fc:37:59:12:69:
6c:1b:92:74:a4:bb:02:48:30:20:95:63:0e:8f:ab:94:52:fd:
6d:e9:97:ac:d1:8c:59:fe:b4:2d:07:f6:f9:0b:3b:14:5c:4f:
fd:25:a6:ba:08:68:f6:78:c8:b2:6c:03:80:1c:77:10:35:3d:
4e:be:09:95:55:17:ba:01:e0:31:7a:fb:56:80:0c:a5:77:17:
98:84:a1:0c:c3:74:f9:10:0c:52:01:32:56:db:e1:55:60:e9:
c3:5c:73:c2:36:06:e4:7c:85:9a:60:cd:42:d8:d5:19:e1:36:
ab:7c:50:18:1a:33:dc:c3:c0:6b:c2:f4:bc:1f:f3:d5:9d:bc:
8a:b6:9a:a8:37:5a:ce:d9:31:e6:7b:80:5c:60:bc:4e:fe:d7:
f1:0b:d4:e3:f9:8c:53:07:8a:19:f9:b5:1a:ab:39:2a:47:0c:
52:0b:48:6b:36:b5:61:bf:ff:76:51:d6:3f:03:2d:ed:83:fe:
b1:a2:fb:1c:e6:b7:27:e7:90:16:14:c9:97:c9:88:dd:e8:bf:
92:b6:1c:2c:04:36:3b:10:1f:a7:ca:53:46:1f:af:d2:2f:05:
7d:ff:32:68:37:bf:9c:48:f2:43:10:35:f1:7b:d4:66:79:41:
84:60:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:25 2026 by rpki-client