Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier: a4A2HSyLDxL2M6yCpVsHsoGtxUwHDHoNTko2DzxKFtA=
Subject key identifier: 36:7E:A1:91:DC:AF:21:2E:98:25:C7:32:66:44:5C:9A:04:B2:D7:7C
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019D27A88860086A90D6EC18C3E7302CF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number: 13AC
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=)
2: Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa (hash: pR+eHKxdsqOeJhrr2qYTxhhUH69JVErIDEpF2ZKp/Bc=)
3: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: J/dsrrevKI/6OBOJWs7xPNfdJNX040M7vV49R5tgWcg=)
4: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=)
5: XEGrGY29N2_6fdEZQllMn9S3ctY.roa (hash: FoInU+oGSpZKQRSWi66xB6iIQ2i/avIu/9TIfHo6uB0=)
6: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=)
7: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=)
8: uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa (hash: 3lqaJbLuu76YzS5K2R73vb0E1obPhoOUMrSjJHQL5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:88:60:08:6a:90:d6:ec:18:c3:e7:30:2c:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=367ea191dcaf212e9825c73266445c9a04b2d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:99:85:13:0d:bd:fa:08:d1:e4:4d:12:49:
e2:5a:27:06:c3:49:44:96:c9:e0:7e:d1:12:f1:c0:
be:39:1c:a0:4a:de:a0:f7:ba:52:98:8d:4f:da:22:
5c:11:b2:a5:4c:8c:ee:6c:c3:52:fa:30:a2:86:51:
36:61:0d:2a:69:85:c9:45:01:04:5b:79:9a:c4:0e:
85:c5:2f:9f:a3:ad:52:47:ca:e8:e0:6b:f1:e7:bc:
29:8b:3d:da:b4:0e:a7:0e:bb:de:e6:b2:3b:ba:87:
9f:2b:64:9c:b9:28:d6:b9:88:19:b0:21:ed:f8:63:
fa:03:a0:ad:14:ac:d7:af:e9:bc:af:05:33:4d:b4:
25:00:3e:e0:27:38:5c:fc:32:37:ff:a3:d4:45:8d:
b9:99:43:18:50:87:5a:23:9f:26:ac:a5:25:43:18:
6b:06:a4:48:76:74:f6:0a:1d:8f:fb:48:c6:7d:38:
f8:a5:ab:c4:2c:89:27:ed:76:01:25:69:2b:c8:78:
cd:23:18:71:4c:d4:64:67:e7:dc:72:4a:db:0d:64:
c5:8f:e4:e2:30:a6:d6:10:fc:3e:7c:a2:e4:7d:fc:
86:25:e1:04:d7:bb:b6:39:62:8a:36:d3:8c:4b:95:
f5:64:62:36:1d:56:f4:fe:fd:26:7b:6f:17:44:82:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:A1:91:DC:AF:21:2E:98:25:C7:32:66:44:5C:9A:04:B2:D7:7C
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b3:60:11:14:13:b2:9d:e7:d6:ab:a7:af:dc:8e:63:6f:e7:
be:0b:87:e9:3a:01:63:31:9d:9b:64:fc:3d:c4:30:6d:3b:e8:
9e:7d:e6:eb:49:11:99:5f:41:8c:a8:e3:54:87:09:a5:59:89:
c7:ee:c8:3f:31:22:ec:6d:32:6e:5c:0c:de:b0:e9:02:62:d4:
cd:ac:ab:7b:ec:2d:63:47:a9:d9:56:6f:3a:38:e5:9a:35:4a:
71:e2:67:f9:db:32:b2:b4:f4:ca:d5:b7:fc:76:60:52:3b:e1:
fb:d7:5c:f9:48:13:95:76:c5:5c:5e:2d:44:6b:38:a1:3d:d5:
3f:db:ba:c9:be:f4:2f:e2:83:0e:3e:12:6c:d7:1e:0a:51:c4:
3c:3e:c8:d9:89:b7:87:f8:fe:64:33:bb:34:4c:47:70:75:1e:
00:60:a6:c7:d1:c4:be:19:86:0b:20:3c:35:40:d1:39:4f:f4:
31:b8:7a:77:58:eb:ad:d9:be:b9:8a:10:6d:38:d5:cc:3c:2b:
c6:8f:ee:40:b2:cb:bc:4f:db:6f:ad:0d:57:00:45:89:4a:5f:
e6:ac:0f:34:e5:b9:77:ac:42:95:9e:13:ef:51:ea:b7:4d:b4:
6b:03:38:12:2d:c8:76:1d:4d:cd:84:c4:e1:d0:fc:6c:3c:a2:
56:02:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:08 2026 by rpki-client