Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: 2kUJxKIK4XebLRApD/ZvyK42grNIivM7TZWexbN9HHE=
Subject key identifier: 61:44:99:19:51:7B:C9:81:2E:54:CC:C2:86:2B:DA:BB:E1:C4:F3:B9
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 019D2B4E91A7030D9B7203F16220134AD81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 0CA2
Signing time: Thu 26 Mar 2026 18:01:02 +0000
Manifest this update: Thu 26 Mar 2026 18:01:02 +0000
Manifest next update: Fri 27 Mar 2026 18:01:02 +0000
Files and hashes: 1: cBMWof3fzl2WvO-9iPNkwKq65UE.roa (hash: l4uhlHM36IRywwsHUvPgf8xitbWlb3IF/+WuiPml4uE=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: a/KgjsoVC6ewidegWc/5Q80Ka0KtlAu2MeWIdApOKKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:91:a7:03:0d:9b:72:03:f1:62:20:13:4a:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Mar 26 18:01:02 2026 GMT
Not After : Mar 27 18:01:02 2026 GMT
Subject: CN=61449919517bc9812e54ccc2862bdabbe1c4f3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:c2:ee:b3:a5:2e:17:8b:44:16:4b:60:fc:
19:54:81:ef:91:fd:f1:a8:41:68:cd:96:1c:f8:09:
3a:de:ad:24:cd:71:1c:d8:c6:13:f8:47:22:76:dd:
74:53:c5:8d:23:31:2f:8e:70:5a:bb:a0:54:de:4d:
d6:8c:bd:86:a6:d4:41:4c:9e:27:52:64:d6:82:05:
4b:f1:14:ee:ad:38:f9:2b:a6:10:02:61:69:2b:ce:
b4:ec:92:98:79:17:9f:e0:95:08:aa:3c:7e:ff:9e:
bf:c2:d6:22:6d:f3:5d:b7:24:ce:16:92:dc:a8:01:
fe:15:e3:62:3e:81:cb:7e:ee:4c:94:7d:2c:f7:84:
68:83:ac:3c:2f:1e:6d:36:6e:c1:67:2d:a5:fe:86:
12:03:48:40:c1:cf:e9:86:d5:c1:bd:db:0d:68:ec:
d3:2a:16:22:5d:4f:f9:03:68:b5:4d:44:b9:3e:f5:
b7:50:a8:b2:a4:29:fc:f8:b9:b3:35:4a:ea:fe:68:
a4:ce:62:ff:4f:f4:09:22:c4:b6:c5:37:1a:75:59:
e9:49:33:d9:ea:3e:35:da:9c:1e:6d:b4:cc:6c:ac:
5a:9b:e3:f5:27:b5:43:6f:29:3d:36:d1:5f:31:cc:
7c:18:91:17:8d:d7:59:00:d0:da:57:9a:ba:4d:ff:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:99:19:51:7B:C9:81:2E:54:CC:C2:86:2B:DA:BB:E1:C4:F3:B9
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:49:98:99:89:75:89:db:f9:48:4f:a9:85:1c:2f:7c:d2:
26:3e:ef:77:d2:8f:a0:f8:76:00:32:5a:be:cc:b3:59:b2:f6:
3c:1e:a2:66:53:a5:09:a9:69:bc:c2:b0:fc:93:85:50:6d:38:
e1:6d:50:a2:80:14:08:14:29:91:0f:6e:8f:e6:28:8f:d8:d3:
04:51:99:ee:95:b8:4f:bd:8a:79:c9:fa:85:af:65:b8:f3:9b:
a7:a1:93:44:eb:38:da:54:0a:8a:d2:ed:a5:47:08:5a:9d:3c:
81:15:91:5e:cc:f1:b2:86:0b:24:f3:74:62:5d:0d:b8:78:b3:
e1:12:39:7b:f9:bf:2b:06:1a:16:a2:fa:5f:5b:7f:25:99:54:
b4:c8:04:ea:f1:34:e9:b2:15:e4:72:78:82:4f:39:d7:2a:ca:
a4:ee:fe:a4:60:dd:2f:6a:86:9e:53:ba:e8:65:2f:52:7e:24:
17:36:ab:63:ad:6b:07:1a:d7:ea:78:ec:74:78:e9:bf:11:2a:
d5:4c:bc:66:54:1f:9d:ca:bd:01:14:a7:7b:65:3f:c4:da:3f:
0b:38:cc:3a:86:8f:3e:06:dc:57:0d:6d:78:00:29:87:58:b0:
5c:7e:d5:89:4f:13:e4:a2:21:b6:b6:ea:46:b1:65:e2:b5:31:
16:ae:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:50 2026 by rpki-client