Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: XFO02JUOcbVtBEQyX6sHNu/lhDSgW8TY0AaCoYSqX0s=
Subject key identifier: B6:3A:F6:F4:0B:00:06:80:02:02:0D:17:67:47:4D:1C:E1:D9:C9:1C
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019D2996EFABDF6BBAA367D4ED76A9A64483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 07D3
Signing time: Thu 26 Mar 2026 10:00:50 +0000
Manifest this update: Thu 26 Mar 2026 10:00:50 +0000
Manifest next update: Fri 27 Mar 2026 10:00:50 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: DMws9GP6yKNrIFrqhllkCmCfSRB4138Q/R7WqQqNTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ef:ab:df:6b:ba:a3:67:d4:ed:76:a9:a6:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Mar 26 10:00:50 2026 GMT
Not After : Mar 27 10:00:50 2026 GMT
Subject: CN=b63af6f40b00068002020d1767474d1ce1d9c91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:12:02:7e:97:6a:52:c8:cf:16:e2:1e:f3:
ed:8f:86:1a:bd:5d:a9:b9:00:3a:d4:ee:6c:12:37:
c4:8e:88:70:b9:b7:e5:4f:e5:59:e4:ed:09:0e:8d:
08:45:c1:20:58:57:8a:91:d4:94:d5:92:15:9c:03:
a5:a3:db:0e:1a:ed:dc:b3:ba:79:24:93:f7:f3:78:
50:c0:61:21:64:72:ba:c8:b0:88:5a:8f:d2:b6:5e:
72:48:40:cc:32:7a:08:e3:6a:5e:fd:44:0f:13:9f:
37:59:2a:7d:15:30:a1:9c:9b:24:4a:f3:17:7e:69:
79:14:b4:e2:3f:ba:e9:74:94:3b:81:bb:46:f4:02:
75:15:0c:b3:1c:b8:25:60:e9:d2:3d:47:78:68:aa:
27:7a:0d:fe:24:cb:9c:ed:55:d4:7c:54:1a:44:a6:
c3:f8:0b:7e:7a:15:80:92:b5:9f:92:e3:6a:38:34:
67:a0:ec:16:8c:a7:09:54:f3:29:f3:da:f1:71:26:
f8:ea:c2:8a:54:bf:a4:b6:71:0a:34:16:38:a4:78:
4a:53:f0:42:ce:44:8a:c4:9d:f6:5c:30:03:c6:66:
ef:d4:80:6b:ce:bd:72:5e:5a:c7:1f:d7:4e:bc:b9:
1f:d2:f9:fc:af:ce:a1:d1:a0:99:93:d8:4e:47:0d:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:F6:F4:0B:00:06:80:02:02:0D:17:67:47:4D:1C:E1:D9:C9:1C
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:6c:45:e1:25:03:69:60:cb:84:59:f0:17:ec:bf:96:f9:
4d:ca:1d:17:4e:bd:8b:d0:4b:ba:92:81:a9:88:e9:2b:bf:51:
23:fe:a0:11:98:a6:7f:16:63:7c:d7:d4:62:b8:0a:93:57:2b:
2b:24:5c:87:a3:c0:4a:a2:8d:37:ac:77:13:2f:9f:6c:1a:90:
5d:d8:2c:e9:d9:0b:f3:a2:e8:b5:5a:c7:cf:41:5d:4c:64:20:
34:23:b8:ed:c2:b8:f4:80:af:4c:eb:16:ed:24:37:5b:3e:c5:
27:91:a1:92:de:3d:d1:c0:d6:bd:22:ff:a2:1b:96:79:03:0e:
14:11:f4:b9:ab:42:f1:0a:3b:c0:2b:9a:c5:af:1a:31:28:bf:
b0:0b:d5:d9:49:0d:77:94:37:4f:a8:2f:15:54:6f:9c:99:4a:
b9:7e:e3:a4:c0:ca:ad:b5:5c:dc:71:59:d2:af:0e:61:28:91:
68:85:af:9b:d9:7c:0e:78:c5:f7:2b:04:78:9e:aa:aa:62:da:
3f:7e:7c:c5:b1:01:db:d1:48:b0:c9:23:09:4b:73:fb:b4:01:
a7:03:16:3f:98:df:43:36:b5:e4:29:5a:fb:47:78:d8:34:3d:
54:25:ca:c2:d6:35:10:0a:c9:94:ed:91:cc:16:34:4a:dd:fb:
70:51:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:42 2026 by rpki-client