Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File: Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier: bHf4En40E2OqRJcZ22WFN/cR/HzzbIhDQ1TS9cq9Aek=
Subject key identifier: 53:24:AE:EE:67:71:62:A3:20:3A:65:0B:C3:E6:D7:CA:33:C5:42:B4
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer: /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial: 019D2961754BEE8FEB6D47964859FF8BF295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: 7qtrZvTgn0cpSEVLml8fcuthLe4.roa (hash: S4nLPxNgM6/xYB2o4ZydmxvSiUoLNOsPi+E4YsX/E2g=)
2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: +MaxMBCnjEXnUwyF3swX46kCV8zKy/YX8S6/rJfBGLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:75:4b:ee:8f:eb:6d:47:96:48:59:ff:8b:f2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=5324aeee677162a3203a650bc3e6d7ca33c542b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:d3:70:68:52:57:53:33:d6:98:e8:7d:f1:
3b:3e:ff:ec:b8:01:bd:11:15:5a:7b:24:69:6a:32:
04:0b:e2:a2:31:2d:aa:6d:8a:17:22:89:89:b6:47:
58:4e:93:37:87:66:2c:2b:e0:81:47:f3:42:f8:b1:
fe:ec:f4:3d:16:a3:45:ae:ec:a6:6d:d2:75:14:2a:
3f:d9:5b:30:28:aa:6c:70:37:8f:30:44:c0:a7:9c:
94:d0:17:68:d0:60:0b:8a:77:81:df:e2:b8:fa:03:
af:6b:5a:79:b1:1c:43:4d:44:57:c9:12:17:50:80:
0e:26:c5:fd:a8:f8:b8:54:27:2d:0c:c1:24:65:d6:
93:f1:3a:a0:41:2b:be:73:3b:90:d2:2f:0f:ca:34:
e0:a5:f7:24:d2:d3:f6:df:9d:38:37:4a:85:31:de:
2d:09:c3:f0:4e:00:8d:6e:08:73:f8:9f:1f:3e:5b:
2d:bb:87:c7:1e:8c:b9:7c:0e:ae:c1:19:1c:9b:64:
4f:cd:32:80:df:e3:f6:a6:b1:66:57:23:0c:a5:92:
eb:88:ac:e2:9b:24:a5:c4:54:24:53:cb:1e:19:c2:
78:87:59:b4:b8:63:64:a2:37:99:9d:5b:0e:58:18:
30:61:6f:49:6d:29:e6:b2:44:79:bf:d8:2e:0f:31:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:AE:EE:67:71:62:A3:20:3A:65:0B:C3:E6:D7:CA:33:C5:42:B4
X509v3 Authority Key Identifier:
keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e4:b0:46:e2:76:6b:db:e1:b7:18:f7:52:42:45:74:30:04:
0a:9b:82:86:f5:8c:41:27:7d:c6:9d:00:f4:0e:85:83:27:1e:
f7:32:e6:51:de:5b:b9:fb:e2:4c:a4:a8:02:44:f3:82:f7:6e:
33:fb:b1:02:e0:fa:1a:f8:3b:71:60:7d:22:5c:a9:17:8d:9e:
78:4a:ca:90:72:58:ab:2e:80:34:4c:26:a7:d9:b9:8e:93:28:
62:ab:66:70:db:fb:52:af:3c:40:a0:d3:af:87:00:82:de:5f:
bc:53:22:3c:2b:46:d3:69:74:d5:44:0a:ef:d9:95:25:bf:37:
ba:fb:b5:37:5b:31:a6:16:5e:73:6e:58:dd:e9:7d:05:46:eb:
c0:97:cd:88:47:46:1d:f5:2b:92:55:8f:f3:2b:12:8a:cb:2a:
53:73:16:9c:45:45:e2:2c:74:aa:2a:88:f5:2f:bd:c4:4f:a0:
80:83:5b:4d:79:c6:40:49:cf:61:82:aa:f1:47:72:20:0e:a6:
0f:1a:34:08:4f:f0:de:c8:00:90:f1:4d:be:a9:ee:1f:57:11:
a7:dd:58:a4:4c:29:60:1e:c7:0e:27:2e:df:9a:f0:cb:71:ac:
ed:1f:c5:c7:23:d7:a5:e2:eb:49:59:5e:45:ea:0e:86:f2:4b:
ac:a8:76:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:13:59 2026 by rpki-client