Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: OzIiCys0QfLj/gAAmosXHq3YLwm4mQGKmljiOC92ECk=
Subject key identifier: 8C:DD:35:92:A1:12:45:C4:67:9C:17:6C:5F:8E:DE:59:20:CD:25:DB
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 019D32D0F381DCF8EA56EFC89EA4AB8E0AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 188A
Signing time: Sat 28 Mar 2026 05:00:47 +0000
Manifest this update: Sat 28 Mar 2026 05:00:47 +0000
Manifest next update: Sun 29 Mar 2026 05:00:47 +0000
Files and hashes: 1: k8cdudOxt-UXEB9vti7Ssvsk5vU.roa (hash: Is0dEg8TeiJuTJaXHNZDTXw2F+T/OPQFA/UKJWJv0ys=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: F0yjcgbu7yZCrCPb+RYQfPJDV1zGtnJdDlqcxb/ohNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:f3:81:dc:f8:ea:56:ef:c8:9e:a4:ab:8e:0a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Mar 28 05:00:47 2026 GMT
Not After : Mar 29 05:00:47 2026 GMT
Subject: CN=8cdd3592a11245c4679c176c5f8ede5920cd25db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:8d:8a:1d:04:a0:f9:a9:5c:20:7d:d0:24:
90:fc:23:bb:2d:ce:bf:83:43:91:3f:3c:db:2f:78:
7c:e2:2c:3b:31:cb:31:72:58:70:b7:a1:0a:c8:fc:
91:14:f8:13:a4:f2:d2:86:a3:99:b5:ae:60:73:9a:
33:79:8e:cd:e8:59:69:aa:c6:bc:7b:c7:1a:9b:72:
ab:ed:22:c3:bd:0e:f6:f2:c2:d5:d7:5b:b9:99:cf:
c9:25:53:24:9a:57:d0:c1:cc:2e:2f:af:7c:ef:fd:
ec:5c:79:0c:f8:cd:e3:b3:52:b5:59:47:4e:11:80:
8b:ff:92:ef:da:80:2c:f3:9b:2b:cc:f4:6e:fb:b1:
cc:cf:fd:d8:9d:74:61:a6:0c:9d:aa:b8:2a:11:69:
d7:22:39:9f:aa:1b:22:28:0a:e6:b8:bd:0f:0d:ad:
12:2a:2d:f0:b1:7f:f4:1f:ca:99:23:d9:68:7e:31:
9e:8c:7d:8f:d2:24:2c:01:4f:db:d4:35:4c:bf:ba:
87:90:f0:db:e5:52:15:aa:8b:d8:ba:be:ac:c0:bf:
c1:c1:28:7f:11:a8:cf:9c:1a:05:b5:cf:da:fa:28:
7c:2b:5d:73:92:85:ba:b7:bd:35:6b:49:30:d8:f9:
b5:6b:1a:89:e2:3d:15:74:a1:02:48:b8:81:e8:4c:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:35:92:A1:12:45:C4:67:9C:17:6C:5F:8E:DE:59:20:CD:25:DB
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4b:b4:b5:ab:d2:86:9f:4e:a2:79:72:80:28:ec:73:c5:22:
f2:84:52:0c:ca:39:7e:5f:e2:cd:1c:dc:1d:d2:ae:17:87:a8:
6c:cd:2f:9d:06:f9:dc:d8:49:81:e3:c8:e8:8f:de:5e:97:12:
d3:72:d4:b5:d4:06:4b:a6:66:dc:e8:dd:88:70:0a:84:9b:72:
8f:73:ab:fb:e4:96:16:43:4a:df:bd:ed:eb:48:ec:e1:13:35:
3b:70:f8:da:e5:f9:4a:db:12:03:a2:86:51:fa:e9:3e:82:49:
58:50:23:c6:bd:b1:88:37:92:27:30:c6:1e:d1:59:0d:8f:2e:
4f:c1:09:c1:b7:5b:ca:6f:3a:72:a7:9b:6d:83:43:5a:4f:fc:
1a:eb:a8:c5:9b:e6:78:39:d0:69:e6:5b:c7:95:b3:f2:86:ea:
ff:c0:e5:24:e5:17:fb:c7:d3:26:dc:b3:63:d5:4e:f5:ec:39:
c3:70:a1:e3:a3:f6:ec:aa:ff:da:32:b0:2d:d4:8d:e5:8d:bd:
c7:79:f0:bf:2c:87:72:8c:05:22:cf:1b:5d:1e:23:76:b1:08:
c5:34:ab:03:d8:8c:c5:98:2a:34:67:cf:49:f6:b3:8f:be:5e:
70:ec:66:45:84:bf:44:67:30:99:66:6a:7c:45:1e:6a:ea:fa:
53:ce:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:16:33 2026 by rpki-client