Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
File: UYnbLl9XTdoOPBfjldXwW2YlTsU.mft (raw, json)
Hash identifier: KMUDchnzW4+HiC7qPs5DhnTnTh0oFeCOxVBzGEQrrp0=
Subject key identifier: 8A:CC:2D:48:C2:84:46:A9:F1:8A:BE:D7:F0:8C:ED:04:75:17:9F:82
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 019D299730A9DAA9570FCFD6F92C5036A8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
Manifest number: 0F6F
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: Lx0GZ21TiR4ew8qj_wZ5bar6vug.roa (hash: lf4lQFDrnk5VRiTZ4XBPmQTyhm8ggaJBhIQsymhNxRU=)
2: UYnbLl9XTdoOPBfjldXwW2YlTsU.crl (hash: DEe1yEE0JsN8qVqHJ0XySmONAv5EcSSUWn0mMRhH9ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:30:a9:da:a9:57:0f:cf:d6:f9:2c:50:36:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=8acc2d48c28446a9f18abed7f08ced0475179f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:87:5a:f1:b3:0b:b3:37:d0:5d:88:c2:f7:
09:42:85:c1:b6:9b:f5:10:d9:11:4f:5b:fc:25:77:
17:99:4f:f9:1a:9e:3d:14:ad:62:b7:c8:ab:7d:d9:
f9:fb:9b:ac:87:e1:80:22:cc:68:05:fe:0c:6c:46:
cf:2f:dc:6c:21:b9:b5:2c:e7:dc:88:81:8f:38:cf:
77:b0:9a:d0:83:4c:60:93:2b:18:7f:b4:96:eb:d8:
47:3e:55:d4:a2:a3:25:b1:1e:82:9c:2a:df:36:ea:
6d:77:fd:83:27:2f:9c:bd:a7:05:ad:97:f0:d4:27:
77:52:a9:d1:5b:b8:5c:d8:30:9e:9b:70:c1:50:a0:
57:c2:57:ad:f4:07:4c:dc:27:42:b2:31:5e:b6:e1:
b3:fc:8a:ef:7f:02:54:60:41:9c:93:30:9b:28:89:
fb:89:96:7e:cb:83:2b:ab:a3:29:7c:1d:38:9c:5b:
7d:10:1a:d3:9e:67:06:93:6a:30:ce:0e:62:51:13:
37:bc:57:2a:1c:43:ed:7e:89:7c:e0:e9:38:b5:f6:
37:60:43:4a:c3:60:82:20:4b:68:9d:a3:24:ef:00:
ac:f6:34:02:c8:d8:ef:e6:e4:60:6f:06:a1:c6:78:
d4:01:7e:f3:22:ac:5d:4b:f8:5a:bb:73:4f:6e:51:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:2D:48:C2:84:46:A9:F1:8A:BE:D7:F0:8C:ED:04:75:17:9F:82
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8f:7f:76:df:01:44:a5:c9:1f:bc:fa:b5:02:e4:79:ba:e3:
d8:c7:74:1c:66:b9:12:d8:f5:ab:72:4c:b0:6c:4e:8f:38:73:
e4:34:66:e3:fb:a9:58:ff:5a:fc:50:40:05:13:4a:ef:01:2c:
b0:87:43:de:28:66:47:f7:57:32:09:05:ac:f6:c2:e7:64:46:
4e:38:a5:41:8e:14:41:f5:d7:3f:eb:78:63:15:53:63:dc:d3:
ac:6e:48:ad:98:fc:1a:78:e0:0f:48:c6:51:7e:42:5d:7b:ee:
12:d7:15:59:04:d5:b8:a6:4e:17:6c:61:88:e6:cb:b9:49:35:
be:01:3e:b2:ab:75:1a:e2:cc:a8:d5:f6:77:65:f5:74:7b:4f:
eb:d9:64:04:1b:18:b5:48:f8:2f:a3:26:a3:6f:38:ee:f5:d6:
fd:7a:3c:47:3c:f5:5f:03:63:21:2c:c0:4d:25:53:23:1d:70:
c3:6d:ad:6b:76:cd:55:9c:76:c4:19:96:b0:24:67:c9:e7:5e:
16:ce:12:f4:e0:b5:54:ca:62:d5:63:14:80:cb:ae:5f:23:4a:
3a:20:d7:0c:b5:09:11:58:5a:58:1f:38:63:81:15:c5:3a:26:
69:e5:30:66:3d:04:e0:2c:a4:f3:69:12:49:35:4b:a6:96:90:
9b:f7:a6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:58:39 2026 by rpki-client