Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: UQnxRSQP6fL25somUNeVf67HNULZ+6YcJyExYfFFHRs=
Subject key identifier: 0D:F1:F2:E8:30:BF:80:7A:E6:E9:B1:7E:54:2D:51:0F:27:D0:98:7C
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 019D2695EC6260A71097B1A99B886A959437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 01D5
Signing time: Wed 25 Mar 2026 20:00:52 +0000
Manifest this update: Wed 25 Mar 2026 20:00:52 +0000
Manifest next update: Thu 26 Mar 2026 20:00:52 +0000
Files and hashes: 1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: oPK/VXxmVl9VUrXmSGTDKjp0CksHfn4ZrqvTyRZmLEc=)
2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ec:62:60:a7:10:97:b1:a9:9b:88:6a:95:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Mar 25 20:00:52 2026 GMT
Not After : Mar 26 20:00:52 2026 GMT
Subject: CN=0df1f2e830bf807ae6e9b17e542d510f27d0987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:4a:3d:2e:8a:98:d3:be:cf:12:74:89:b7:
33:f2:70:f1:96:f2:84:f6:a7:96:20:89:33:ce:98:
37:b8:4a:88:12:3b:7d:3b:64:1e:0b:a6:b7:fd:89:
61:cf:11:ce:0d:88:06:13:41:9d:c7:d4:e6:d1:a9:
b2:33:b8:ef:4e:e4:b5:da:1d:7e:59:e4:d2:49:51:
3b:79:24:d0:bd:b1:57:cd:17:7d:35:1b:bb:13:f5:
ea:c0:b9:59:77:0a:a1:51:7f:00:33:49:ab:6e:36:
7b:81:bf:bd:b6:8a:b6:35:3d:e7:0f:8d:d3:eb:26:
69:f4:c7:e1:2b:98:ca:f0:67:f9:56:a9:b0:fb:92:
8b:7b:af:92:e1:3d:ff:0c:49:f4:9a:28:49:17:c5:
4d:0f:43:30:cf:71:3d:d3:4d:d8:04:52:9c:e2:01:
32:8a:55:c9:2c:f4:4b:e8:00:3d:3c:4d:da:1a:15:
c4:18:0b:60:15:68:f4:c1:51:5f:7a:00:99:4f:9b:
b9:fe:de:a1:b5:5a:0b:98:39:ca:71:a2:77:40:0c:
4c:57:47:4f:81:49:93:43:2e:f4:83:5e:98:69:4b:
84:56:e0:94:66:36:ae:6d:c9:fa:1c:c6:08:e5:f0:
f5:77:b5:47:27:17:35:17:f4:c0:80:6f:5b:ca:a5:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:F2:E8:30:BF:80:7A:E6:E9:B1:7E:54:2D:51:0F:27:D0:98:7C
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c3:4e:55:9b:86:53:84:d3:ba:fc:7b:cd:c6:bc:fb:48:10:
d7:9d:bb:66:0f:49:c4:1f:fa:49:06:a7:9d:9f:f6:b6:22:29:
a7:56:84:f7:3c:68:d7:9b:78:a3:74:84:9f:19:94:cc:d0:92:
14:97:8c:2e:85:a2:92:91:c8:01:27:04:b5:55:9f:70:0e:b1:
39:68:9e:64:06:90:1c:e8:45:87:ae:23:7f:d3:e2:f5:89:8d:
a8:86:73:28:9d:46:18:4e:58:de:09:be:5d:b5:11:1d:6d:51:
21:11:56:92:f6:c8:50:aa:3c:ff:d0:68:01:a2:cf:7f:92:f9:
e8:8c:a1:bb:24:ce:76:01:37:c0:0b:e6:2c:e6:b4:2a:0d:74:
26:07:20:4f:41:01:98:e1:de:40:60:ca:5a:5c:0a:1f:1a:92:
bc:2c:79:f3:6a:97:32:1a:cf:89:8d:17:1e:b3:56:85:6c:81:
b8:b9:6d:e7:9a:39:c2:fe:ae:fd:09:62:e0:7b:98:a7:49:51:
5d:e8:04:b7:c3:c5:c5:21:b3:16:1b:bd:a1:f9:3a:f5:bd:51:
f9:6d:ed:68:ef:08:9b:2b:bd:66:d9:54:78:c1:84:12:3d:f6:
90:21:51:12:48:c8:f0:23:2c:e0:67:c8:9b:30:fc:53:50:d7:
5c:13:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:47 2026 by rpki-client