Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File: uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier: dmBjjIWdBhGyB6+ef2ltJiiOwNoWoUx8H7bJcDK2JAM=
Subject key identifier: 0A:A3:84:72:25:A1:22:26:CE:88:47:9E:00:FE:6B:A5:1B:97:15:42
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 019D296172920A02A2774D6B67684367E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:02:25 +0000
Manifest this update: Thu 26 Mar 2026 09:02:25 +0000
Manifest next update: Fri 27 Mar 2026 09:02:25 +0000
Files and hashes: 1: 1S7wmC7UNi7YklqSCZbK-q4l2aw.roa (hash: grflm2PbIIqM2mq6/myyrNwOE3qgPal6r2qF/DPaHSs=)
2: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
3: kaJAlUNXuvgIldw8HKxblZiQ1xY.roa (hash: sktya3OX64f09BO6r6lg+c9q03KXeV5TYfpw1RTIwcY=)
4: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: P6a58ZX2vfzVaJeO0viiGuLGZm0VMq914H7oJuhGzKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:72:92:0a:02:a2:77:4d:6b:67:68:43:67:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Mar 26 09:02:25 2026 GMT
Not After : Mar 27 09:02:25 2026 GMT
Subject: CN=0aa3847225a12226ce88479e00fe6ba51b971542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:21:e9:db:36:9f:6c:33:dd:3d:f6:32:a1:
a4:ec:1d:76:ef:44:70:a5:e7:30:0b:9c:66:55:0a:
89:5d:24:22:85:e6:fe:3c:fa:88:b5:72:b4:5c:c7:
00:c9:e1:b7:dd:53:53:dd:3d:30:70:0e:4e:bb:da:
5e:18:7a:36:b4:a5:bf:2e:8e:70:86:0a:ae:7c:1f:
dd:cf:7e:cc:56:b8:1c:c6:95:a5:6d:d3:0e:77:4a:
10:bc:cb:e5:ee:a0:d7:90:a3:73:8b:1c:a8:44:39:
5f:1b:28:75:07:ea:20:f1:ca:a5:3b:de:03:85:cf:
c2:ab:bf:81:cd:81:17:89:73:56:e4:92:84:19:1d:
ce:6d:1e:cd:44:f4:7e:19:f3:3b:ca:4e:4b:9a:e5:
9b:b6:11:6a:1a:13:d3:64:04:37:dc:e8:b3:d1:3d:
35:6f:96:64:11:4c:1b:d8:07:d1:ca:0c:0e:0f:2f:
96:61:ed:ab:b0:91:51:75:b0:de:d7:67:cc:ab:db:
08:9a:45:db:9a:94:2d:08:45:99:24:91:f4:b4:45:
ed:b0:56:c8:91:f4:31:27:5d:5b:70:ed:82:f0:21:
1f:b8:a8:79:50:25:f9:e0:48:ce:f0:91:8c:fc:7d:
c1:7f:7f:07:fc:97:1c:1c:f4:73:ec:ab:93:e3:9b:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:84:72:25:A1:22:26:CE:88:47:9E:00:FE:6B:A5:1B:97:15:42
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:ad:69:54:a1:b0:6f:d7:96:17:56:47:d1:3f:81:9a:cc:
8d:96:88:3e:ea:0d:eb:3e:f8:8a:28:af:7d:04:1b:50:ae:25:
24:ed:fd:96:58:ec:32:4e:7c:f8:3c:b1:5d:16:37:ba:62:f8:
ef:ed:6b:94:92:da:b4:be:c1:6b:2e:c8:30:6d:1a:6f:0b:ba:
88:1e:e7:e0:77:23:90:2a:40:0a:2e:6b:e5:ac:6b:8b:d9:28:
58:59:41:80:8c:4c:08:97:c4:58:fe:38:cf:be:29:7e:8f:89:
d5:8a:a3:48:15:53:e9:11:3d:3a:fc:24:30:b3:75:41:ab:ee:
7b:8f:49:69:f0:92:47:da:89:3e:ad:29:72:9f:20:88:a0:0a:
f3:46:01:9e:0c:11:0b:42:58:ec:47:d4:5d:bd:23:92:fe:0c:
4d:a6:e1:70:ae:5d:b4:16:06:0a:0f:c0:17:34:9f:75:d8:78:
7e:e6:78:1f:4e:31:ef:97:9f:fe:1b:df:22:9d:cb:bc:56:1c:
a1:ff:06:43:72:b7:95:7f:23:65:d7:2d:69:1d:82:22:22:fd:
f6:ae:ef:2f:a2:73:89:fd:52:62:c1:a7:cf:9d:16:b8:b8:e5:
b2:37:1e:c6:e0:1b:76:ba:56:73:eb:4f:da:68:51:de:f5:77:
9b:ff:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:36:51 2026 by rpki-client