Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: FneMHjElM8vesrcOMSt/ZbVcHleO26zmZMuD5VoZ7Ig=
Subject key identifier: 3B:90:57:3B:E8:88:3A:B7:4F:5E:BE:D8:F7:34:C8:A7:A2:0E:54:29
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 019D33084A687C71553DBE7CBB9D9FAA2BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0FC3
Signing time: Sat 28 Mar 2026 06:01:14 +0000
Manifest this update: Sat 28 Mar 2026 06:01:14 +0000
Manifest next update: Sun 29 Mar 2026 06:01:14 +0000
Files and hashes: 1: l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa (hash: toz7u9OavVUGLaYysHXeqXBkXKxUrSmYpku7Siccj48=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: fcsg+kjB90EJwEjBns1+IejFYDOkZAjWXyhAdRIl7b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:4a:68:7c:71:55:3d:be:7c:bb:9d:9f:aa:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Mar 28 06:01:14 2026 GMT
Not After : Mar 29 06:01:14 2026 GMT
Subject: CN=3b90573be8883ab74f5ebed8f734c8a7a20e5429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:21:82:0d:64:58:42:3d:c8:8f:b6:48:65:
56:69:b2:1a:e6:7d:5b:2d:d7:5a:0c:3c:03:5c:a2:
62:bc:1e:66:96:28:59:37:cc:b4:29:1c:3a:db:3d:
b1:81:75:10:b6:23:57:ac:63:43:75:18:3f:dd:b6:
ca:e8:57:b1:37:10:33:2a:de:99:f3:40:89:70:3e:
28:cb:91:57:18:66:b7:78:ee:ed:7a:58:39:81:d5:
52:03:6b:ce:19:10:1b:16:08:fa:67:dd:2e:9f:a7:
0f:ae:b3:75:ec:d6:60:75:e5:fd:d4:a9:d2:bf:5f:
e7:71:42:27:52:57:ac:63:ce:ed:4e:18:87:51:c8:
48:e6:3f:b6:8a:92:a2:b1:a3:04:ec:bc:42:9e:e4:
d4:ed:e5:e1:dc:34:cb:94:17:1d:24:0c:66:1a:9b:
53:fa:e7:86:48:8c:fd:57:a9:73:7a:2c:0f:df:a5:
c7:e5:45:7a:34:04:9c:ac:54:87:fd:93:6a:0a:09:
dc:fd:e0:a5:cd:56:69:df:1b:bf:cc:c7:0b:86:5c:
74:48:4d:14:be:1c:4c:20:7f:4f:0a:cf:1b:9b:fe:
a1:f3:86:96:06:4c:2e:4b:33:3a:bb:1c:7b:d5:db:
7c:36:9b:9b:00:3c:cc:fb:08:b6:0e:00:fc:87:19:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:57:3B:E8:88:3A:B7:4F:5E:BE:D8:F7:34:C8:A7:A2:0E:54:29
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e8:7d:5d:56:3a:a6:ad:cf:cd:52:ca:92:ca:f5:15:92:8e:
b5:7b:7c:ac:f8:1a:d1:af:6b:0b:83:de:77:df:fc:14:04:61:
f4:b4:98:d0:84:4a:84:5b:ee:54:4b:a2:90:b0:e1:7a:dd:b2:
27:e9:48:eb:8e:0d:0e:50:21:7a:91:5d:65:3d:49:8a:68:f5:
da:e4:a5:6f:de:8b:e1:4b:dd:d2:16:fc:f7:5b:b6:27:f7:6d:
4c:13:84:d5:2e:90:e4:8d:91:4c:c5:c5:37:2a:59:63:71:b5:
3e:e3:17:0b:11:eb:06:f4:23:be:6f:82:30:ad:40:60:6d:38:
58:54:e7:bc:f0:3c:fe:16:e2:a7:b3:cd:ed:49:6b:5f:5c:99:
7d:79:27:1d:74:87:87:b0:48:1e:38:f5:2d:de:57:b0:c8:cc:
af:a7:17:21:a9:76:a4:00:5c:b0:1d:54:86:d5:cc:8a:26:af:
c6:6a:36:03:59:89:b9:9f:38:71:56:d0:4a:d8:67:b7:1a:2c:
c9:37:4e:a6:c0:5a:55:d5:6e:49:dc:c1:3f:0c:c0:74:2e:de:
e2:57:f8:1a:f7:43:14:f7:da:f4:31:70:90:20:01:7a:95:69:
07:bb:12:68:69:a3:59:9b:ba:15:96:8b:02:26:4e:65:0a:f8:
d8:7f:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:23 2026 by rpki-client