Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft (raw, json)
Hash identifier: +JE16kndMgsUzkosBe/WoV/ZeoMCCVGmohpINHhNGP4=
Subject key identifier: D8:21:66:37:D2:CF:01:4A:A8:87:68:F2:CF:BE:2F:ED:BF:E2:8D:0E
Authority key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
Certificate issuer: /CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c
Certificate serial: 019D2772C9AEB8348A19A5CB3E7B64FC70EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
Manifest number: 0134
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl (hash: x/sdfXTMwS9AaaGsT5GlFum3s9iBsq8bTALtduWRFrM=)
2: zd2YY232foFztKAVe_hqygCGOBs.roa (hash: WYlwfqh2Q7yj5vEWYIxMIxEey2q+2TK2T+nh6BP9btI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c9:ae:b8:34:8a:19:a5:cb:3e:7b:64:fc:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=d8216637d2cf014aa88768f2cfbe2fedbfe28d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:fc:17:ca:e5:9c:d5:d3:19:50:72:19:7d:
ac:69:99:85:8e:fe:06:13:4f:4d:94:88:1c:94:e2:
4e:ba:8b:56:b8:3b:ff:8b:b3:9b:71:88:d6:7f:ff:
19:12:4f:70:e3:bd:df:bd:a0:61:ed:27:b8:f3:3b:
86:1f:67:7e:c5:99:e8:e5:ee:c9:81:24:86:18:dd:
ec:21:9d:ef:d9:9d:3f:f1:0c:13:0c:92:66:15:81:
67:51:f5:d7:74:90:85:61:5a:48:4e:07:03:75:01:
ed:89:bd:6a:d7:d1:54:08:4f:ca:44:66:f2:2f:47:
38:62:58:18:7a:c8:ee:9f:a1:a7:34:06:66:b5:ca:
75:0a:dc:5b:cc:c8:05:49:b3:44:08:2e:e1:1d:b2:
5d:cc:55:44:24:9a:4c:29:33:c6:be:f9:b3:81:3f:
9d:d1:a7:f0:d8:bc:12:4b:c1:92:99:69:07:35:d2:
24:b1:c8:c3:e1:4a:d1:90:03:05:b6:55:74:7f:b5:
2b:05:d5:3c:de:31:c4:3f:94:8a:80:2a:32:f9:f3:
76:c2:24:df:3f:3d:ce:42:6d:e7:b9:8f:e3:e1:7c:
be:d1:a3:f5:4a:29:40:08:d4:67:6b:4b:c5:4f:09:
12:d9:bf:4c:0d:7c:bd:b2:c7:42:73:5f:5e:b0:a2:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:66:37:D2:CF:01:4A:A8:87:68:F2:CF:BE:2F:ED:BF:E2:8D:0E
X509v3 Authority Key Identifier:
keyid:B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:0a:07:7e:f0:4b:42:c0:e6:e3:8b:47:1a:47:cc:c2:90:
77:64:6f:15:53:92:e2:bd:e6:56:8e:bf:29:c0:5e:bc:de:fa:
88:31:e1:fd:46:f1:f8:dc:cc:f6:9d:b8:1e:ce:65:4c:0b:12:
80:43:5f:7f:cc:bd:bd:26:4d:9b:30:3c:71:bb:8d:98:3c:b7:
73:5a:ba:1d:5f:dd:f7:4e:8a:57:42:59:40:58:72:8e:f7:d5:
20:13:fc:fd:51:f3:32:c2:95:a6:4f:27:88:d2:fd:fd:e1:35:
d4:0b:84:f0:1a:78:c3:9c:e8:10:45:9e:35:5f:82:5a:86:dc:
94:12:f8:d8:6b:c7:77:fe:5a:5b:aa:02:a2:c0:e4:21:01:c1:
4e:2e:43:56:df:38:20:d9:6b:00:15:16:54:9f:eb:8c:74:25:
d8:ad:d7:6b:e8:e6:f5:25:8a:9a:c2:ff:3f:6e:b9:79:56:15:
6a:23:9b:e8:01:73:57:59:4f:13:a3:a0:c3:98:15:d4:fa:c7:
2c:3a:f3:57:7a:f6:4d:39:a1:75:db:b4:6f:3c:ed:5f:50:44:
19:34:61:09:95:d8:38:61:5a:8e:39:d3:29:7d:17:f1:cb:22:
49:76:bd:34:c1:a0:0f:89:34:d6:5a:18:60:2d:9c:f0:f7:de:
6f:73:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:53 2026 by rpki-client