Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: 9sdpDeInQ6nTm8OpIGC0NATGN8zSSWg4uw/QkOQeRgY=
Subject key identifier: FF:38:8D:BF:2B:79:2F:6C:18:79:0B:78:23:B9:7E:A2:A2:B1:EE:4B
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 019D27E0543B6CC17C481361FF4D873B19BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0FA6
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: C4QPEpSpw3t5fGPgvzarVGPFeoU.roa (hash: sZmWqujKvyfknDjomNZFVZ00FVqvptB5ow8TW0Spc+s=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: lrCi/lRS/MjhlW3Q/NqJKRhu7WqNgpBJWnPxr8UFkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:3b:6c:c1:7c:48:13:61:ff:4d:87:3b:19:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=ff388dbf2b792f6c18790b7823b97ea2a2b1ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c8:f2:1c:4b:79:f8:46:47:0c:cc:7c:06:e8:
10:9c:23:ab:4d:23:57:d4:49:4f:8d:6a:7f:6e:22:
31:88:ed:70:c0:76:0d:8c:0d:2a:94:2c:54:50:8e:
a5:dc:48:46:c4:e7:aa:93:3b:0b:46:3f:bc:f5:93:
b8:e0:e8:7e:08:ae:5d:37:21:3e:ba:60:2b:7c:b6:
96:08:af:6c:6a:d5:75:ad:9e:71:e6:2d:91:a6:bf:
2c:cc:02:cd:b5:25:51:b8:5e:5e:48:2c:85:9d:0f:
e5:c5:fb:bb:b9:8e:ea:91:50:3e:0c:75:b6:74:10:
96:4c:bd:be:95:69:0f:50:b7:bd:15:cb:9e:26:d3:
e0:a4:d7:d8:8e:09:c7:4f:35:41:2b:0e:9a:23:7d:
68:f9:de:dc:e5:fc:be:cf:f7:a8:67:85:f6:98:79:
f0:0e:d6:b7:eb:11:81:35:f8:3f:fb:21:c2:65:c7:
ee:dd:a5:57:5d:04:a8:1f:ec:c0:bd:75:3e:aa:d0:
ea:f9:5d:4a:7d:bf:c1:a0:b0:56:6a:62:73:c2:65:
b9:8d:2d:57:ac:5f:c8:ed:51:c0:8a:72:9b:3d:50:
a7:fb:02:8c:b4:15:09:01:b7:3f:4a:44:ab:c5:20:
31:3f:c7:54:e8:30:e9:6a:05:86:af:68:97:83:99:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:8D:BF:2B:79:2F:6C:18:79:0B:78:23:B9:7E:A2:A2:B1:EE:4B
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:30:98:0b:c5:a9:0d:63:e9:f7:d0:76:a1:60:66:de:60:5a:
f3:95:42:0a:11:86:0e:b0:d4:f1:e1:62:12:00:06:35:bd:c3:
45:fe:25:bd:41:a0:90:63:e5:67:dd:ec:06:c4:a5:2a:82:c9:
1c:73:88:81:96:1f:c8:03:0c:f3:08:eb:bb:c6:ad:c5:e7:65:
cb:e6:be:2a:5b:47:02:91:29:3f:e5:f1:e8:03:46:60:78:79:
94:85:c9:73:60:77:82:c6:28:d1:41:2e:04:47:e1:59:90:84:
20:3b:f1:1c:52:6a:9b:44:45:65:30:bf:9f:a0:67:72:79:ae:
4e:b2:7d:58:5b:20:63:ca:3e:b5:49:a4:71:c7:3d:8f:75:fa:
2c:66:74:e9:fc:26:c5:d6:40:b8:d5:f7:37:f6:5c:8d:cc:9e:
fa:7d:e0:ef:34:47:46:dc:54:60:a6:42:9f:ea:e1:5c:88:e5:
21:65:ed:b0:59:e6:9f:7a:66:0d:73:88:a2:97:cf:05:8b:e0:
bd:e5:47:c9:93:e8:b9:94:78:ff:93:02:63:0c:6a:7c:d7:05:
ea:0a:09:de:ec:20:d5:ba:7b:62:1c:f5:a0:0f:49:30:0f:aa:
f0:d5:3a:9e:f5:48:27:2b:5a:fe:c8:58:63:d8:1d:0d:34:4d:
7d:20:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:31 2026 by rpki-client