Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: 2ouqBWtgatCY8uutfLXWY9aYGHMNztWZnIdr+shs5oA=
Subject key identifier: B4:02:B3:85:FF:D6:24:18:11:1D:51:CA:24:7E:7F:2D:27:06:B6:90
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 019D27A8C93C2ACA39E4DBE362DE44E19989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 137A
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: JGRc8gWxsOVbOpLY1p0YvVJjb3A.roa (hash: Wj8ZnZcpmyQBFn1WIawrKmviMNPdyAHSA5qDhEVw6AY=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: PHrxUZ7gT8giO831BdGIFVpvAQFsYOdZ0CeH+gNtU1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c9:3c:2a:ca:39:e4:db:e3:62:de:44:e1:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=b402b385ffd62418111d51ca247e7f2d2706b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:4a:74:59:00:73:6a:44:a3:c0:3c:98:f1:
a4:bf:91:a2:31:f9:e5:bc:90:ed:1c:b3:f5:9f:0a:
f1:66:ae:97:98:b8:5e:e3:51:6a:59:f4:71:c5:a9:
fb:2a:76:da:5e:af:54:41:f7:86:54:16:90:b0:c4:
d3:ec:c6:ee:5b:72:bc:e5:5d:8a:da:96:aa:bc:fa:
13:10:21:fa:02:54:3d:83:41:ed:1f:b1:07:c6:75:
bb:01:a3:34:63:ca:84:2e:c1:17:71:03:b3:85:ee:
71:01:a0:ce:2a:ac:97:d3:81:51:20:65:f3:7e:7f:
ea:7a:b8:3d:9c:63:5a:d0:0f:67:21:2b:a7:34:ff:
9b:76:e6:2a:93:d1:2c:38:3e:15:85:8d:e4:02:19:
c2:a7:32:e8:26:73:53:33:83:ce:cb:cb:b9:f3:f5:
d1:84:e3:9e:2e:4c:45:d7:6e:7a:52:a0:cc:e7:ca:
78:fa:60:cd:73:71:3c:4a:d0:25:4e:53:73:32:34:
26:9f:49:12:3b:20:37:5e:fb:13:94:d5:95:e8:69:
4c:78:08:06:5d:16:6f:94:b9:3b:17:19:40:ac:23:
1d:b1:b9:19:a1:24:e3:56:7d:bf:af:8b:4f:ff:03:
c9:6b:f5:54:50:12:57:c3:1d:9a:d1:49:cb:e4:31:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:B3:85:FF:D6:24:18:11:1D:51:CA:24:7E:7F:2D:27:06:B6:90
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cd:d7:0a:9d:70:db:f8:4c:b3:a2:be:b2:9d:87:7e:39:21:
84:0e:7d:c3:e7:64:c4:00:be:d5:9d:15:ab:1b:a6:01:1a:46:
d1:2f:65:e5:96:b0:24:5f:6b:85:4f:c7:e2:0f:39:b8:61:05:
78:9a:c3:d1:a3:82:d1:3f:e1:a1:f9:c0:bb:e7:e2:ab:4c:63:
88:c1:0a:33:72:e5:a8:1c:c7:88:97:0a:0d:c7:44:19:b7:74:
63:3c:36:cd:25:5a:f1:2d:a7:f5:78:05:a5:cc:22:3b:0b:7b:
6f:87:2a:c3:90:77:44:9b:78:26:72:4f:03:17:bc:57:77:61:
eb:7f:c4:6a:4f:7e:1b:7d:d1:1e:c6:0c:39:b3:11:3f:3e:97:
2f:d2:e2:87:e6:f8:18:fa:e5:98:98:b6:6e:2b:c9:35:56:39:
bf:38:81:ce:f1:f2:d8:7e:77:f7:f4:0d:93:12:13:30:6e:48:
7b:b6:f4:c6:6c:e8:9d:b8:43:c0:20:44:06:1d:e2:e9:e6:75:
1a:ef:07:02:80:09:ff:e9:f1:76:c4:06:2a:2d:00:bd:83:b6:
c0:fa:e1:a8:91:4b:46:4e:c9:5b:11:c4:7d:1c:b3:7f:01:9d:
a0:9b:30:51:b0:0f:6c:07:bb:e2:70:d2:14:ac:1a:58:5f:cb:
34:f9:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:19 2026 by rpki-client