Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: vGGzKR/mM8Gxwhq0qkxnDe1saDiXOrSSTIzwAbSQU9Y=
Subject key identifier: 3A:FF:4A:E0:30:B4:A6:C0:16:82:84:A6:D0:4A:E7:50:36:3C:85:CC
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 019D27A8F9C6611031BFE4A2A8FF870F8DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 1361
Signing time: Thu 26 Mar 2026 01:01:18 +0000
Manifest this update: Thu 26 Mar 2026 01:01:18 +0000
Manifest next update: Fri 27 Mar 2026 01:01:18 +0000
Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: UVJx5sMgGiTcm3OKHyfhhg7fweQWhnlC3PI0VfFo3UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f9:c6:61:10:31:bf:e4:a2:a8:ff:87:0f:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Mar 26 01:01:18 2026 GMT
Not After : Mar 27 01:01:18 2026 GMT
Subject: CN=3aff4ae030b4a6c0168284a6d04ae750363c85cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ae:48:83:b2:e3:13:61:d5:e2:25:38:4e:
65:88:77:37:dd:4b:8d:05:39:ca:a3:cb:48:e0:bd:
ef:7f:b0:a3:f9:a1:29:2d:c5:c6:23:ea:19:7a:c4:
d0:79:28:56:cb:80:5f:67:9e:cc:3f:e6:bd:70:77:
f4:b4:40:ea:c3:7a:21:74:96:58:2b:e7:c0:b0:0e:
c9:42:64:2a:d1:ea:cf:31:fe:cc:5b:1e:ef:9a:5a:
bf:2c:61:fc:cf:f7:e9:28:94:c1:ae:56:be:85:1b:
cc:35:df:00:17:1b:7c:5e:59:9e:d3:98:02:d1:9c:
92:3c:88:2b:e2:ae:53:cf:7e:9f:b6:4a:90:4d:18:
57:ad:be:fb:f6:4f:18:ab:4a:c2:d4:7e:25:5f:cc:
74:61:a2:d5:68:89:df:a8:11:70:45:50:74:46:b5:
4a:88:be:c2:6c:35:f1:45:b4:d1:88:5f:cb:1b:5f:
8d:f5:aa:bb:1d:9d:16:60:d3:cd:7b:68:3d:8e:f6:
73:0c:8d:ff:73:2b:af:77:e8:e0:b1:3d:f4:9e:29:
80:c3:a0:1f:2e:64:2f:ec:a3:72:b1:a4:1f:7f:75:
2e:e5:ed:72:6c:94:ce:2e:2e:0b:55:00:09:de:2b:
8e:f2:1f:60:ba:de:91:16:18:24:3f:4c:21:b4:b1:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:4A:E0:30:B4:A6:C0:16:82:84:A6:D0:4A:E7:50:36:3C:85:CC
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:08:20:e3:f5:95:ff:12:5f:e8:d4:10:59:59:0a:ab:5e:65:
ac:83:a8:ce:ed:93:d8:5c:1c:24:e0:04:98:0e:28:e7:ba:9e:
ad:65:51:ad:0e:21:96:d7:1a:2f:63:5a:38:b0:a3:ab:7b:69:
ca:e9:1d:99:6b:bc:0c:f0:db:30:1b:5b:21:89:71:29:ff:2c:
52:b6:4c:97:92:cc:c5:64:bc:d7:66:ef:1c:b7:8d:a7:f7:ad:
83:22:a4:8b:0a:13:f9:98:90:e6:70:11:be:1e:44:98:20:d8:
ce:a6:13:2c:cc:f4:aa:3d:54:7f:cf:f9:55:e8:bd:4f:b2:04:
70:a0:02:d4:f9:5f:6b:52:53:9a:62:df:e6:3f:3e:0d:9f:a2:
33:1f:7f:68:eb:00:e7:5f:f6:d1:48:7a:ed:7a:52:50:ca:0c:
c4:a8:f8:04:49:5f:50:24:88:00:be:4c:35:3f:5f:39:4a:98:
17:85:34:70:4f:a9:55:ed:51:ac:f6:cd:fb:c8:a5:ed:83:bd:
86:80:31:bf:2e:05:23:94:a2:c8:bb:5f:55:37:09:09:23:14:
3f:1a:63:19:e1:e1:94:95:98:be:7b:30:91:d6:47:79:6e:a1:
bc:c8:ac:21:32:b9:c3:31:c1:dd:74:92:db:b3:32:f5:a9:b7:
de:47:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:11 2026 by rpki-client