Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: EOY9jmUun36fXzfMGQfRUmf4XHlmbm7DcGRjQqlFadk=
Subject key identifier: BA:94:8D:F6:4E:EA:DF:C8:AA:22:C0:6F:68:76:52:F8:A6:E6:2F:F0
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 019D2583E9CD8D5270E01AEEBC1026E87312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: CrGYIchI8IwBMeaWGahVoZEqk54.roa (hash: rZvxjkfTz0RWRMKrtuKeopQdQfgWWqYNcNjUqBs51x8=)
2: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: 2ocIW5LCw+3cYydpPp4r+TTlLzg5VHzBegNxrIojWNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e9:cd:8d:52:70:e0:1a:ee:bc:10:26:e8:73:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=ba948df64eeadfc8aa22c06f687652f8a6e62ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:e7:df:69:b6:98:0f:f9:9a:e3:c0:b3:35:
c4:be:6f:d1:38:1d:88:8e:eb:6e:9e:f3:ba:fb:71:
d5:d3:42:fd:3b:d9:bd:60:37:ee:a5:5b:e9:f3:2b:
f0:71:20:44:08:78:1e:f4:36:39:d6:44:1a:29:e0:
a3:6a:6b:de:0e:65:f0:a5:d6:72:37:5d:26:6d:e5:
cd:cd:8a:03:e8:66:e8:8d:54:99:13:74:c5:b3:ef:
5f:6f:79:ea:30:62:b6:6f:8b:85:4a:b1:c7:1d:87:
80:2c:0f:45:60:30:86:75:31:3f:63:28:17:78:6d:
62:4d:a6:7c:98:93:2c:c3:60:82:8c:1c:ef:9c:23:
84:15:77:d2:c6:a2:b1:dd:85:e9:e0:ea:7c:fa:71:
d8:88:bb:3a:6f:5d:c7:d5:c3:f1:51:4b:51:7e:f4:
31:52:02:cc:3f:e3:dd:9d:ce:78:64:85:0b:09:4c:
36:ea:2e:11:2b:ef:12:75:ee:92:f1:b7:4e:6d:ff:
fd:9d:17:ce:53:64:f3:7b:0a:17:0a:1f:f3:17:8c:
bc:f8:7e:14:7c:c0:eb:8c:a6:aa:d5:da:1e:27:b0:
07:7f:67:a3:42:73:8d:2f:f3:52:ba:47:8f:97:04:
7d:e6:3a:3f:73:79:5e:67:67:9a:d2:36:31:71:f1:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:8D:F6:4E:EA:DF:C8:AA:22:C0:6F:68:76:52:F8:A6:E6:2F:F0
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:2d:83:11:9c:b1:95:71:f9:70:12:cc:75:f7:f1:52:88:
09:dd:32:06:04:15:d5:a4:47:9a:2c:7b:6a:99:3f:bf:e7:ae:
da:e4:17:da:c7:71:21:8f:c4:bd:6d:f5:75:6d:c8:d1:a3:54:
56:fc:60:9e:26:2d:bc:1e:ec:67:2e:07:0f:d0:25:4c:05:f3:
ba:0b:45:56:c1:7e:42:dd:7f:d3:ff:08:34:1f:67:5c:66:e4:
3c:11:82:1e:3b:57:9f:df:71:9e:e0:f2:cb:b2:77:d6:30:34:
b3:74:ce:06:fb:b7:69:7f:f7:23:39:cb:e9:85:d6:ed:2a:75:
2a:42:c5:f2:e5:7a:7e:ef:2b:c2:ab:36:5a:2d:d4:8a:80:c2:
e1:5c:9b:ec:07:d8:b4:e3:35:ef:34:65:88:a2:68:cc:f2:4e:
c3:84:20:de:e8:d4:02:4b:e3:d7:da:13:32:df:56:77:13:12:
17:48:1c:70:c8:b8:99:16:17:f8:af:c9:fa:57:45:13:bd:af:
d4:62:1d:b9:07:12:25:40:ad:59:a3:17:c9:64:b4:1d:78:74:
a3:ce:b1:7d:04:7b:0a:51:ed:0c:3d:e0:39:b0:4e:1a:cc:9e:
b2:c8:24:7c:ac:28:0f:14:f4:70:ee:b0:72:ae:a9:07:2a:c6:
03:48:7a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:44 2026 by rpki-client