Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: bPtrEdD+XaExujnX32PSovIrhHu0Xmh1bn7YKmyn0mM=
Subject key identifier: 72:0F:05:F7:E7:34:E7:32:A8:58:10:64:E7:09:CB:A8:A6:7B:74:57
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 019D273B16F6873F65788A87EF0AFFCF3F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 23:01:16 +0000
Manifest this update: Wed 25 Mar 2026 23:01:16 +0000
Manifest next update: Thu 26 Mar 2026 23:01:16 +0000
Files and hashes: 1: bNRuTlB0fzyI9CGmSgXBXA-B5so.roa (hash: 3U824o26TdTCJO0oNfs1eyzOIoGDTofZcJsuKnrhEM0=)
2: kBUNjbSsmm7Mn3Q5G8pHzfSdrJM.roa (hash: btnz9PZAp3acMBNeW36Iy/hL1kzMf0nqH+ga7/me2mw=)
3: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: TNt+1uiTjl3SfyFw4J3Cv3kA/wIOzYKadLlCWCiL9MA=)
4: ykMOxNfjS-vqAEial74o856O6c0.roa (hash: VC7AcuplTftdX1hkRufVprbTyDIhwpVO8tWKCFEqnPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:16:f6:87:3f:65:78:8a:87:ef:0a:ff:cf:3f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Mar 25 23:01:16 2026 GMT
Not After : Mar 26 23:01:16 2026 GMT
Subject: CN=720f05f7e734e732a8581064e709cba8a67b7457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:8b:ab:a4:b3:a2:fa:d4:34:b8:18:b7:21:
1e:d2:f3:97:97:4b:87:81:8f:fd:96:0d:73:41:2f:
38:f8:d3:e1:eb:31:dd:fe:c1:4e:c4:ab:0e:3b:70:
87:a1:c7:5d:31:ae:1b:6b:5d:26:90:e3:6d:49:cf:
4c:02:cf:e9:e8:b6:41:d9:34:7c:b3:b4:aa:01:a0:
32:fd:48:72:12:91:2f:a0:13:7e:de:8f:a2:9c:fd:
b5:07:a9:82:7b:f2:eb:be:31:f4:fa:62:1f:7c:4a:
d3:fa:4d:af:34:8d:3d:bb:a8:20:f8:95:27:40:59:
01:61:d7:b8:9b:6f:5e:9b:c7:4e:c5:fd:46:b6:d1:
ff:db:6d:b3:10:d5:75:23:eb:d6:08:58:49:c7:be:
4d:c6:97:6d:89:7d:f7:08:c9:de:bb:0b:53:2a:81:
b3:f6:6c:29:62:46:2a:fa:57:c0:80:aa:09:a0:23:
1e:71:22:b2:1f:c1:fc:fc:e5:50:bc:c7:65:43:b1:
c4:a9:a1:d4:6e:e1:a2:5b:c9:90:53:77:29:31:c0:
83:d2:dc:33:da:7a:55:f2:c0:40:1d:16:ae:9b:63:
bb:cb:36:10:de:2d:03:3d:1c:e9:8b:f4:01:18:a4:
9e:82:86:39:6a:84:f7:ad:92:7d:53:2a:9e:e0:b4:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0F:05:F7:E7:34:E7:32:A8:58:10:64:E7:09:CB:A8:A6:7B:74:57
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fe:ae:77:69:e3:0a:fd:58:a4:a8:ea:13:60:a9:6c:a9:c6:
89:bf:21:e2:0e:6f:35:a6:c6:5b:2f:b9:ae:50:8d:7a:aa:b4:
a3:0f:d1:4c:54:87:fb:65:e0:2c:a4:d9:38:87:c2:2e:51:03:
51:95:d5:ff:a2:03:d2:0f:f2:34:90:b1:fe:48:a7:20:f1:94:
8d:78:ae:d6:7d:2e:2e:dc:2b:2d:14:83:04:dc:0a:fa:f8:32:
b6:a5:32:d6:b6:d1:f3:d8:4e:42:24:53:71:ed:fe:67:dc:80:
73:b0:b5:d6:55:79:0c:18:a3:8e:67:e4:2f:8f:76:34:e2:d5:
43:8f:14:27:91:7d:c8:68:96:f9:1a:00:e5:51:a9:6a:3c:10:
0f:d8:c2:87:7c:a6:31:01:c7:6a:d6:23:c4:ef:9f:86:99:26:
fb:d1:fa:d7:bb:b7:9b:13:96:3d:54:63:57:7e:bc:87:30:57:
3d:c3:c7:5e:6d:c6:36:df:1f:ab:47:90:f8:f7:31:6c:2a:89:
fb:35:ac:52:c1:fe:f5:a9:d0:24:61:ff:85:5f:31:a9:f1:33:
1a:ba:ec:03:d7:17:29:e0:83:f6:3d:7d:23:0d:ad:e0:33:84:
3d:cb:6e:96:d8:2d:62:13:a7:62:3e:63:08:5e:b2:44:e9:08:
54:bb:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:37 2026 by rpki-client