Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: 2lJxxUnZmJWbZqhvHi2vvlZB+faQcOgWQIO3+y8dVlw=
Subject key identifier: C2:01:FB:4E:62:89:A9:1A:C1:DA:B4:9D:07:12:37:26:F4:31:6A:75
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 019D2AA952057FE771B8472719B2532EE91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 14BD
Signing time: Thu 26 Mar 2026 15:00:32 +0000
Manifest this update: Thu 26 Mar 2026 15:00:32 +0000
Manifest next update: Fri 27 Mar 2026 15:00:32 +0000
Files and hashes: 1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: oiIu5SqpM1Bsmdeq+8XqTmInPIxcjC+dcpgRoQTsMAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:52:05:7f:e7:71:b8:47:27:19:b2:53:2e:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Mar 26 15:00:32 2026 GMT
Not After : Mar 27 15:00:32 2026 GMT
Subject: CN=c201fb4e6289a91ac1dab49d07123726f4316a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:14:dc:57:d0:f6:c4:f9:9b:a8:8a:01:3c:
07:75:cd:1b:9b:99:a8:a5:22:e6:8f:e1:84:47:d2:
30:9c:9e:d2:7c:df:d9:26:41:b3:82:d2:18:6d:e7:
27:e3:c1:ab:91:c9:eb:10:d4:d3:e3:ec:6b:ce:42:
2e:b9:a4:ba:2a:0f:58:b0:12:1b:bf:1e:f8:68:82:
4e:61:f6:ae:ef:eb:38:d9:12:79:69:eb:34:c7:6d:
1b:ca:23:3c:1e:e2:1e:6f:2c:60:c2:42:bb:a5:ce:
e8:6f:9d:b0:98:76:57:d1:42:c9:76:f7:fa:f6:bd:
1c:fa:c0:f4:f3:89:1e:4d:81:ca:c8:3a:75:f3:fa:
1c:3a:0f:1a:6b:be:ef:16:3b:3e:cc:41:86:34:61:
3b:8e:5c:55:7b:ff:71:48:c7:97:b5:40:cb:06:a7:
2e:f4:db:a7:e2:fb:f9:9b:00:69:1c:b0:1c:3d:03:
02:57:80:0f:d2:c0:30:88:37:f7:70:4f:6c:b8:2d:
dc:5b:6e:77:0c:cf:bf:91:f7:e3:42:50:ed:2c:4a:
43:15:c6:35:27:eb:82:25:9e:f8:eb:62:82:b6:35:
31:00:48:27:a1:29:ab:9d:2f:9a:f1:21:06:f9:4d:
1d:39:db:5f:51:91:ee:fa:16:2f:5b:8b:a6:87:2e:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:01:FB:4E:62:89:A9:1A:C1:DA:B4:9D:07:12:37:26:F4:31:6A:75
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:b6:af:aa:ba:71:a9:47:17:65:1e:fd:91:12:d6:d9:5a:
28:64:71:e3:c6:f3:d2:4c:a8:c3:3a:c9:a8:7f:ce:27:7f:8f:
d6:ae:bf:da:55:ea:76:61:45:8d:bd:e5:49:0c:95:55:34:f9:
c5:7d:a5:fc:8e:fc:ad:98:d5:27:78:89:aa:8f:7b:09:b2:62:
1e:de:6d:2b:6c:a8:cc:be:3b:fb:44:07:eb:c9:7f:6c:de:ae:
da:15:ff:bf:e9:f3:3d:6b:20:fd:51:5b:5c:51:38:e9:0d:9b:
6d:f7:be:b2:cf:71:0d:3f:d1:6a:07:03:8d:67:7d:29:a3:f1:
03:32:2e:6a:35:0c:f9:41:a6:74:97:83:04:b1:72:91:8f:42:
df:a5:49:08:0c:33:d5:a0:58:48:f9:23:9f:07:3c:c8:8f:29:
07:d2:00:a5:29:c5:0f:6f:1b:b8:9c:b3:e3:06:da:a7:21:d3:
d7:d0:d3:65:8e:68:7b:51:10:a5:f3:b6:2d:9f:21:a6:4e:cc:
a5:34:79:dd:31:ee:69:e7:a2:29:9a:ac:ae:54:37:3a:ef:96:
c3:a2:32:d0:18:05:3b:61:3e:af:b1:87:a2:b6:f5:04:95:45:
fa:a8:e8:b9:2b:95:54:dc:5c:10:e1:c2:e7:99:27:be:81:7a:
4b:e1:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:14 2026 by rpki-client