Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier: 024uP1exr443e7PuphtqQZeSRBkio1qJjXwFkh3OK40=
Subject key identifier: 4F:1B:56:DB:F9:44:E1:9C:F0:7B:8A:80:CB:9C:E8:06:E2:9D:46:6C
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 019D24DEC45345FF1C9659FA30042600E29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number: 17E2
Signing time: Wed 25 Mar 2026 12:01:12 +0000
Manifest this update: Wed 25 Mar 2026 12:01:12 +0000
Manifest next update: Thu 26 Mar 2026 12:01:12 +0000
Files and hashes: 1: 8y3Tj4TsEaNV9uqE3_Wm8d75SXY.roa (hash: yZH4sqNiTJoNNbuM1J9mJYZWJbe1HILioSLqth5sEdY=)
2: 99n1Nj9JWOBlph-qyEOq1kwsmVA.roa (hash: hrSybeByET9wVr2vMj/IPydJCZJ5FMbnEfA7G/SOUtk=)
3: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (hash: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=)
4: HqKAWum-OFZ9NLI9L0i8Qooknqs.asa (hash: lOJrYcM36+x+F6jmp2VCjFJX1AVn86mOQN9gIP6YbRA=)
5: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: NDL76hLo2ak4dNR5d8dTkdJgxDsBf/7ctYt6bXLoJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:c4:53:45:ff:1c:96:59:fa:30:04:26:00:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Mar 25 12:01:12 2026 GMT
Not After : Mar 26 12:01:12 2026 GMT
Subject: CN=4f1b56dbf944e19cf07b8a80cb9ce806e29d466c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0b:6c:ae:79:2e:26:67:5b:01:51:bb:70:0f:
89:01:71:9c:2a:94:c5:be:9b:b4:17:e9:9d:19:18:
f7:e4:09:cd:11:e2:c6:86:52:98:4d:bd:8f:8a:57:
18:17:d8:98:fa:d5:22:5a:80:aa:c9:39:c2:9f:f1:
94:46:c8:9c:83:f6:aa:b6:37:d0:53:ed:29:cc:fd:
be:f1:21:69:b0:54:73:af:86:74:6e:f9:03:de:8f:
e3:da:dc:3a:4b:e4:84:3c:fc:3a:f4:e4:d5:e1:6f:
f7:d8:19:24:66:99:1c:16:f3:51:74:27:37:38:94:
32:22:ad:26:59:b4:2f:bf:fb:38:45:04:1d:22:22:
58:01:04:29:6a:dd:5b:b0:d8:39:19:2f:88:73:d5:
82:40:69:16:af:ae:5a:4c:b1:78:c1:4f:15:96:1c:
06:19:54:b0:b9:0d:46:97:12:7e:ee:08:fe:b8:6e:
5b:f2:b8:8f:9c:25:8a:fe:be:8a:1a:a3:d6:8a:80:
ac:9a:f9:3b:b7:b5:5a:e8:29:8e:be:68:9b:52:3e:
37:10:5d:82:e0:93:ec:01:c1:cb:b4:3f:2f:bc:93:
d9:1e:69:88:51:d1:6e:b1:f4:d5:88:f3:40:6f:f9:
1a:6b:8a:04:84:41:ab:1f:e2:0a:71:be:25:ed:4b:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1B:56:DB:F9:44:E1:9C:F0:7B:8A:80:CB:9C:E8:06:E2:9D:46:6C
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:c6:db:21:d5:db:a8:9e:36:f6:11:83:c8:2b:8c:49:97:
27:98:e3:91:01:d2:c5:5f:9e:f0:40:3e:65:00:11:43:67:27:
a8:1d:9b:7d:f6:cc:9a:e9:a6:79:7e:bd:fe:b1:2f:b7:8e:d6:
f5:a1:d5:11:5e:be:80:08:76:5e:03:28:f2:63:7b:f0:79:45:
9c:39:4e:07:87:0b:ba:a1:b2:cf:51:27:80:44:31:ce:29:7a:
e9:5b:1d:5e:e5:b9:ca:09:ba:e8:8d:be:38:ca:fb:55:3f:6a:
d1:0e:0d:fb:0b:3b:d1:5e:b3:ca:dc:12:65:6a:86:1d:d3:04:
fd:85:c5:1a:be:d0:67:04:17:b3:95:a1:a1:9f:02:b2:17:a5:
05:c3:b2:dc:de:80:89:ea:fa:26:99:3c:8b:ef:06:5b:6c:9a:
df:ec:a7:b9:18:40:70:9b:b0:27:50:29:45:cd:61:b8:8b:bf:
ca:a7:c0:c7:55:f4:96:9c:9f:11:f2:ec:e9:92:5d:14:00:c0:
71:72:a2:26:1f:35:03:23:c0:59:28:83:af:66:7d:24:71:bc:
64:49:91:f4:ab:a6:4a:a3:3b:3c:a2:4b:f1:e2:04:0f:d9:01:
26:f8:74:96:19:2d:5a:c0:c8:10:e1:ad:bc:78:27:48:98:de:
a7:ba:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:38:17 2026 by rpki-client