Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: 4i6mES8SEfH/+SMKfcz4W0L1DlCT08J3he2tsSkJP0E=
Subject key identifier: 23:B9:0E:43:3F:76:2D:25:05:79:73:F7:4C:7E:36:41:C0:10:CA:A7
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019D273AE7B71E46481A593DBA72359F8B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 1691
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: Bos5wZsnZxJgxAFZyI4OFHCukoACgOvq7tlRDfiHr80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e7:b7:1e:46:48:1a:59:3d:ba:72:35:9f:8b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=23b90e433f762d25057973f74c7e3641c010caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:37:89:42:83:4b:fe:74:e8:47:eb:c9:2f:
c1:9c:9d:e0:b3:68:87:94:d0:6d:a0:01:52:fd:8d:
6d:a5:77:4e:28:b6:e0:9a:75:bb:f7:73:06:35:f0:
10:ac:81:3c:dd:90:96:b5:cd:c3:f8:70:d9:9c:ef:
b4:6b:bd:d9:e1:dc:2c:f7:e9:24:f0:dd:84:e0:0c:
ab:b3:2c:18:30:af:2d:96:c6:b8:54:64:f3:e5:ff:
82:20:2f:f7:e7:38:d6:ee:37:59:af:a6:b2:e0:e2:
6c:37:9a:ab:3e:55:a7:eb:45:2a:ea:df:f4:36:05:
fa:9b:30:65:ae:98:c8:dd:95:17:30:fd:e1:07:12:
0a:01:ad:93:d8:2e:35:bc:91:b6:df:8e:9a:e2:5d:
ca:01:42:f9:a5:96:e5:7a:6f:72:a0:52:76:e1:25:
d5:79:3a:08:a7:ae:a5:8e:d8:b7:73:24:23:65:6f:
af:09:ec:2f:25:66:a5:ac:30:2f:bf:b8:60:8f:0a:
e3:83:91:dd:7d:57:95:b7:e0:b0:2f:d4:02:05:95:
9b:91:a2:45:97:e7:2a:39:1b:10:b5:09:c7:a6:b9:
c7:42:8f:72:e6:d5:71:fa:d5:24:b7:e9:c4:10:b0:
bf:1f:0a:9e:32:51:3d:47:da:a4:95:5b:7b:89:70:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:0E:43:3F:76:2D:25:05:79:73:F7:4C:7E:36:41:C0:10:CA:A7
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:86:19:b1:eb:63:3b:a3:3b:ee:36:a9:42:15:49:72:6a:1e:
0e:3c:9a:6f:ce:5c:1b:73:b3:f7:88:eb:e5:21:db:a4:9b:e4:
c3:f2:04:3b:da:08:f3:ca:f7:44:f6:78:5e:f4:f6:cb:81:5a:
fb:28:c7:e9:32:de:69:3c:87:cf:69:db:c8:b6:de:0a:5a:39:
ee:13:25:a5:f6:4e:e0:2c:8b:a3:25:f8:6e:7c:03:43:08:f5:
70:7c:3c:63:32:87:fb:21:0e:d8:e7:0e:0c:03:4d:6b:1e:c4:
2d:db:35:00:bd:a5:87:59:f9:30:cc:e6:7e:47:e5:01:85:de:
45:ef:cd:e9:56:72:c0:6b:01:97:53:c6:d9:2c:ec:c8:e9:ea:
09:12:84:96:08:a4:05:7c:f9:fc:96:a7:91:75:29:c6:e8:27:
8f:cf:28:5f:36:8f:b6:6d:9d:47:c7:ba:a8:8a:74:94:77:81:
5b:ba:06:85:f5:b1:f3:fa:c1:ff:ea:45:54:bf:dc:7b:cc:7d:
51:0c:e7:17:80:41:bb:ff:90:85:61:8a:38:fa:6e:48:1e:a0:
9f:43:72:f5:ea:16:c7:a2:d3:4e:03:e7:8e:02:05:ca:8f:81:
f8:ad:6a:de:39:cb:96:41:01:a7:c8:00:94:dd:2d:0f:42:65:
cb:2d:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:06 2026 by rpki-client