Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: VARPgzI1kg26+pqHBQpATvjfviCVaoyMEELfhQnSUHw=
Subject key identifier: DF:19:F4:E8:87:D8:B8:56:E6:3D:04:EC:FE:F0:E3:4D:26:72:42:E4
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019D333E811FC66857A6F227BC0154B9E8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0F0A
Signing time: Sat 28 Mar 2026 07:00:27 +0000
Manifest this update: Sat 28 Mar 2026 07:00:27 +0000
Manifest next update: Sun 29 Mar 2026 07:00:27 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: ZLo7HmP5AWlMuDgmbgi7oX4iZ6B0SJ+WmBnlyX2N56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:81:1f:c6:68:57:a6:f2:27:bc:01:54:b9:e8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Mar 28 07:00:27 2026 GMT
Not After : Mar 29 07:00:27 2026 GMT
Subject: CN=df19f4e887d8b856e63d04ecfef0e34d267242e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:ef:f2:09:e0:0d:d9:67:21:56:d2:9a:4a:
69:23:4a:29:14:f7:51:fc:4f:4b:79:40:dc:01:40:
35:10:5b:b5:b5:91:42:ec:72:b8:6a:8e:5f:53:e1:
0c:0d:54:e1:b9:24:ca:8c:f0:9f:de:17:7c:d7:f4:
7c:e0:11:7d:47:b6:7a:39:67:f5:a0:d6:06:f7:73:
d9:cb:20:0a:9f:28:d1:95:06:3a:2e:32:40:d7:68:
ef:29:a3:ec:94:46:43:bf:fe:ab:44:61:59:36:97:
98:cb:dc:ae:e6:cf:d7:57:3f:9f:f7:c9:0c:04:2b:
cc:5b:57:35:b6:7e:21:0b:a2:13:13:d8:f5:09:9b:
6a:c2:c5:2a:49:98:82:82:7f:35:d9:a7:4b:9a:c1:
a5:be:83:5f:00:85:ff:c0:39:a9:52:6b:16:6f:b2:
4c:ed:14:69:a0:aa:15:0b:ca:63:30:bd:8b:d5:f2:
79:a4:51:64:f6:c6:19:4b:5a:58:46:88:04:5a:a8:
c3:09:7f:6d:31:87:b3:1b:79:15:d4:6d:70:97:c4:
b2:f1:88:1e:14:0c:40:b5:2e:e3:98:82:84:fe:8f:
08:4e:a7:a4:a3:d2:48:86:fb:f5:f7:ec:66:51:20:
28:f1:0e:ca:73:0b:95:af:07:88:26:08:ef:72:b9:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:F4:E8:87:D8:B8:56:E6:3D:04:EC:FE:F0:E3:4D:26:72:42:E4
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:e4:e1:32:09:6a:be:96:99:04:06:54:c2:12:55:1d:56:
3b:6f:79:64:e4:55:6b:fa:f7:23:6c:6c:8d:4d:13:8b:19:6c:
12:33:03:d9:08:6d:60:4d:7b:a9:ff:9e:84:d5:c6:17:b4:5b:
3b:de:1f:38:5c:09:2a:a8:03:4a:6d:27:43:51:28:e9:e4:70:
f8:4e:59:99:1a:e3:e8:31:55:fc:1d:a2:ac:8c:70:4f:be:11:
d6:f5:03:ca:cd:1a:6a:c0:09:af:7d:b1:41:13:d6:c2:a9:be:
5a:2e:e6:f6:04:6f:41:60:69:a3:a3:9c:03:25:30:87:dc:eb:
45:ea:6b:bd:65:9d:3a:df:8d:0c:d0:c8:47:1e:97:ae:3c:b4:
20:2a:fb:e8:6d:48:a6:ff:40:a3:3e:ff:d4:a8:be:02:a9:7b:
05:93:20:34:0b:28:dc:97:94:80:d4:81:66:a2:f0:21:06:4b:
dc:fb:83:d6:3e:dd:1e:8e:e4:56:d0:f1:d1:05:0d:50:58:8e:
16:60:cd:60:8e:2b:98:51:42:a6:f8:dd:ae:63:78:18:d0:51:
30:34:fd:6c:7f:86:73:db:9f:16:6e:1b:43:38:4e:e8:c6:7c:
58:2a:40:83:ec:11:ab:6e:1c:3f:0a:48:5b:94:22:3d:64:fc:
f7:f9:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:24 2026 by rpki-client