Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: UAIDg73CpUWPMT3JvwRLiOV49kkozQuSyNNzLZ8TG0c=
Subject key identifier: B7:3F:F0:F3:62:4E:F4:BC:C9:4A:94:B6:4C:13:51:75:A7:F7:5B:6B
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 019D273B36E9ED980B05B0830AB1419B74F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 1584
Signing time: Wed 25 Mar 2026 23:01:25 +0000
Manifest this update: Wed 25 Mar 2026 23:01:25 +0000
Manifest next update: Thu 26 Mar 2026 23:01:25 +0000
Files and hashes: 1: OZYmRenxzws5RHeszMUB-d1Fung.roa (hash: FZRGbJ46ktz/zyt6seOoaLUbodNhJwoXUxII8sfP6io=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: GpcRr0UjP1d53kkXG7M1o9RSnSxT8qb36xLM4LqG6/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:36:e9:ed:98:0b:05:b0:83:0a:b1:41:9b:74:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Mar 25 23:01:25 2026 GMT
Not After : Mar 26 23:01:25 2026 GMT
Subject: CN=b73ff0f3624ef4bcc94a94b64c135175a7f75b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:52:e8:f5:ed:6d:88:e1:4c:06:64:89:26:
ff:cb:01:6f:af:d5:9f:3f:35:aa:73:c6:0d:5b:80:
00:ab:2d:42:12:9b:3b:a8:a8:f1:88:b7:55:e3:ce:
4f:ce:c5:c3:f2:2b:67:e3:9a:bc:10:95:1b:b5:b0:
3b:2e:78:cf:24:56:18:a8:66:1e:90:93:77:b6:74:
b4:74:ad:94:32:e6:b8:78:d3:e0:5a:9e:b2:32:ef:
3b:14:39:47:0d:ba:3f:86:8d:eb:7b:66:44:61:6b:
45:d0:a8:f5:99:40:36:08:f8:ea:b0:21:07:9d:1e:
35:4d:ed:20:f4:5a:42:51:55:d6:2c:00:64:e7:eb:
7e:69:f0:0f:47:f4:29:ac:bb:f1:d7:1a:4d:d4:18:
b9:31:5d:ff:2b:6a:03:19:34:31:14:18:d4:e7:2c:
a8:db:db:5c:91:45:bb:b0:4d:fd:a9:58:60:24:b0:
54:21:a6:5b:8b:8d:55:da:d4:29:b4:66:28:a6:de:
f5:14:3c:84:b4:a5:db:cb:8a:de:e1:79:54:dd:9e:
0d:0c:19:ce:c7:f6:8b:82:dc:f2:df:14:f7:37:d5:
4d:86:9e:e3:b2:07:44:1d:87:b0:ce:8e:11:46:d3:
20:12:03:f6:31:6c:2f:71:b5:d0:62:81:0e:6e:7e:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3F:F0:F3:62:4E:F4:BC:C9:4A:94:B6:4C:13:51:75:A7:F7:5B:6B
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ff:11:bc:89:42:7c:b2:d3:93:e3:07:69:8e:5f:c8:cb:05:
55:51:37:ee:0a:f4:86:e6:d2:27:6e:07:88:f1:b8:5c:ac:1a:
05:d5:59:a6:2b:fb:ce:ed:d4:d3:31:2b:02:9e:a0:0d:45:e4:
51:39:a5:63:22:57:16:c4:ee:0f:9c:52:30:11:1e:27:ff:4d:
54:4a:0b:00:2b:37:f7:ec:00:37:07:4a:92:10:bc:e5:4e:3a:
0a:d0:00:a8:97:da:28:fb:2e:89:45:4d:eb:ac:ce:fd:1c:05:
d5:c3:d0:e8:01:d6:94:e3:aa:3e:7b:1c:78:4f:60:76:65:40:
c4:80:2b:0e:83:f7:78:09:58:a6:35:b1:06:6b:f9:9f:08:b4:
5b:07:c9:48:59:35:53:fd:ad:7c:18:ac:81:af:9a:45:af:ee:
01:28:03:b2:68:0c:c5:5b:6d:4e:a3:f5:dd:a8:09:be:95:44:
c9:2c:36:53:82:1b:38:40:3d:7b:46:2d:51:ca:3c:f3:31:15:
b2:81:9b:7a:98:61:4e:92:71:21:e0:8a:30:e3:9c:35:85:c8:
2d:e9:6b:08:40:77:9e:5d:68:a3:22:44:bf:9a:a5:16:b4:98:
47:be:d5:90:59:98:a5:ab:61:e6:d8:09:c4:13:65:82:5e:fa:
5f:b3:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:09 2026 by rpki-client