Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: M9y6/TcD1KsQNpK2ppOK1oCYlTwGvG69kU4RvTKOjsA=
Subject key identifier: CB:08:FD:D4:66:93:40:D9:F9:BC:8D:C0:15:B8:4A:FA:5C:15:87:B1
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 019D29293D1255A496D328DEB91F6EC01862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: rQm7aAqfLFWwnp-PZYZAG1L9kgg.roa (hash: +2Rs7NNDUUQP5ZkY5X4gpDZNcPWhIbAoaZshLwT8RhY=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: 6Nqx8KmfL4S1PflHqgeQCaSNnaB5DprgGIWq9AgAcL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3d:12:55:a4:96:d3:28:de:b9:1f:6e:c0:18:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=cb08fdd4669340d9f9bc8dc015b84afa5c1587b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:44:cb:28:ec:c0:fc:6a:bc:13:c9:22:55:be:
e7:d0:26:4d:94:41:ec:dd:42:a0:94:10:b4:ae:b6:
22:df:3d:2c:a3:9f:0c:aa:e9:5c:be:88:b7:f7:d9:
eb:b1:39:39:b1:5b:e0:b4:d5:54:b8:23:59:4a:73:
71:0b:24:1d:d5:c0:a2:bb:6c:a9:43:3c:03:7d:8f:
17:43:62:e1:e8:75:62:14:4a:57:9f:3c:8a:b6:e1:
99:dd:42:aa:6f:0b:98:3b:ce:51:aa:fa:ed:fb:e4:
2b:a0:2a:4e:22:81:f8:8f:2d:8f:69:ab:73:12:c6:
38:ac:41:2b:5a:59:68:b5:f4:c7:f9:77:f9:02:c9:
13:35:5f:a1:ed:f4:51:c4:78:71:9c:84:74:f1:62:
8e:f7:77:59:e9:7f:5d:b1:16:ff:9a:c4:cd:38:bf:
96:3d:5b:46:cd:13:e2:cc:37:5e:26:36:a1:34:fe:
ac:46:80:30:83:ae:3f:4a:58:c6:0a:72:89:63:a6:
7c:11:95:b0:64:ba:ab:b7:6b:1a:24:86:6d:20:95:
42:95:ac:78:6d:86:d1:1f:05:5e:36:a0:f7:b1:3f:
6e:e4:e4:7b:c9:18:7e:0a:06:e6:9c:66:51:62:8b:
16:3f:f8:8b:d7:07:d3:c7:ba:db:93:08:dc:4b:cf:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:FD:D4:66:93:40:D9:F9:BC:8D:C0:15:B8:4A:FA:5C:15:87:B1
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b5:f1:ba:51:01:c4:18:3f:dc:ba:58:2e:f6:75:b4:e9:ea:
f2:c9:9d:41:20:3c:e2:22:37:d3:80:43:15:cc:3c:74:f8:6e:
ea:b2:c7:66:82:e5:ab:e3:10:f1:36:27:d2:9e:fb:30:7d:04:
d9:5a:c6:8d:63:d4:c3:e0:a5:60:3c:0f:ae:9d:b9:11:91:90:
b0:2b:20:48:e5:65:5b:c9:6c:f8:dc:63:99:4d:51:18:45:7c:
b1:9d:99:e7:77:1d:86:4b:04:d7:0f:c4:3a:4e:97:1e:7e:90:
0d:af:8d:96:cf:3c:c4:bd:4b:4b:5a:cb:06:46:bd:35:07:b8:
c9:c7:4e:a3:0f:2d:bb:a8:f8:c9:d8:46:ab:e3:fe:a7:39:d1:
0a:e0:a0:34:64:22:cb:90:14:a8:4f:f3:5b:ef:89:89:6f:c9:
81:2b:99:f5:8f:13:9f:46:8c:c9:e3:2a:9c:9a:43:e0:c4:c2:
04:6e:43:e5:cc:6c:0f:15:d2:98:37:3c:c1:f0:2f:d6:ee:58:
f4:55:ef:dc:47:9a:72:81:22:13:6f:45:47:e8:18:e4:9b:09:
74:0e:b0:e2:5e:93:6e:31:c4:0b:a6:5c:24:be:c5:4e:18:04:
ed:fd:0d:50:18:98:82:fb:90:e2:fc:24:95:18:91:e5:ca:81:
21:b3:a2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:22 2026 by rpki-client