
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
File: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft (raw, json)
Hash identifier: CodmVdOdLgVFdw0zOH3AmtBJugb6cLlcxI72ecNIzR4=
Subject key identifier: 34:BB:DD:14:A7:A8:05:31:34:37:AA:30:E0:15:74:96:62:F8:AC:21
Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Certificate serial: 019D28F236F8A463652F00DDC9E7276B5F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
Manifest number: 17AF
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa (hash: TuLZ7u/Cx0w1+WEAiUv8OozNkGlySiKUJnI2uVfgxus=)
2: uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl (hash: Y7x47/oSzw5Z53/q5Bc75fRujrPbWWazJyJj2SetfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:36:f8:a4:63:65:2f:00:dd:c9:e7:27:6b:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=34bbdd14a7a805313437aa30e015749662f8ac21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:ae:79:f8:10:51:cf:dc:97:32:5f:ee:c8:
c8:61:42:8e:ee:81:f0:fe:44:e3:34:1f:f5:bb:6c:
61:af:f2:66:f5:35:44:08:19:96:17:18:25:03:86:
d7:cb:60:ec:1e:0c:57:3d:5f:fa:39:bd:df:46:90:
f6:7f:9e:e4:51:3d:da:9e:9c:cb:a4:06:b1:c5:a9:
49:ca:1b:5e:6a:7d:f4:91:41:7b:9c:83:2c:a9:38:
b8:2b:72:25:ee:ae:02:53:81:50:ec:5d:c3:75:d0:
e2:70:cf:b6:66:59:c4:a5:ab:4d:c8:45:63:a0:58:
7a:55:c2:47:e6:3f:4e:a1:79:5c:45:55:39:02:78:
ca:70:f6:f9:4a:c7:58:74:01:c0:c7:12:8b:cc:77:
cf:50:33:9e:ae:3c:4c:d2:72:8d:f8:51:72:74:b4:
a6:80:53:ce:3c:26:a8:67:76:4c:77:6d:20:ce:6b:
88:ec:a4:fb:68:e5:53:6a:13:35:d0:14:b8:9f:54:
11:07:13:0f:d6:3e:75:8b:d0:1a:63:54:5b:3d:ac:
8e:a7:30:e2:75:70:a4:8f:d6:24:58:f4:36:b0:3f:
7f:6e:31:be:99:ec:82:f8:0d:08:e7:65:79:66:81:
fd:ca:1c:b3:50:f2:3b:1b:d6:07:5c:fb:9b:33:86:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:DD:14:A7:A8:05:31:34:37:AA:30:E0:15:74:96:62:F8:AC:21
X509v3 Authority Key Identifier:
keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:79:c5:cb:54:59:ae:f2:47:54:ea:cf:e7:2b:7b:c5:37:
7b:fb:1c:2e:c1:af:78:6d:be:4e:10:9b:17:8d:48:ba:2b:6b:
97:84:60:89:a9:e9:c0:21:f1:e0:f4:41:35:84:dc:8b:cd:24:
53:4b:92:ee:90:40:04:72:9d:10:dc:48:57:9d:b4:00:e9:be:
42:8a:83:e7:fd:34:38:ce:94:5e:34:86:b9:49:cd:95:74:34:
6e:5a:93:45:93:d3:69:13:ba:c5:e3:9d:79:ff:ca:1a:f2:a2:
24:aa:e3:09:d0:00:c1:79:65:fb:f7:d6:d4:bf:8b:55:9c:6e:
81:2e:ec:7d:60:d1:d7:aa:10:04:2b:56:62:49:5b:39:51:a9:
f8:3d:93:94:6a:e2:e8:92:18:b4:1e:a2:b5:51:98:89:fd:55:
b5:c3:fc:56:09:82:9c:0e:96:f7:df:7d:6e:f5:8b:96:07:b7:
60:6d:65:be:4b:a7:1d:23:55:95:e9:75:cc:40:b4:0b:4a:7d:
8c:91:ff:24:d0:ef:de:0c:63:23:b3:3d:da:ce:a5:56:ff:25:
d2:85:e4:5a:88:08:c6:ae:53:bf:d9:69:32:bb:13:1a:73:a3:
b7:2b:e0:39:52:00:ab:77:39:de:72:47:48:5b:c9:b0:3a:b8:
3c:21:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:31 2026 by rpki-client