Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: Pt5Z5l51m9+2xKJVMMhXYzVZfecHz0wGLMxg18hQ690=
Subject key identifier: 05:21:B9:40:D0:6C:74:DB:77:73:BA:DC:82:14:EF:01:AC:0C:6C:44
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 019D26CD2273D7B4825CEA5C463F3B685049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0EB7
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: ixsNkkFAPoBz6g0Ltj4Evr3p7MewoLkwndofjioeK2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:73:d7:b4:82:5c:ea:5c:46:3f:3b:68:50:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=0521b940d06c74db7773badc8214ef01ac0c6c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:4e:a1:ab:bb:b1:c9:ac:11:b7:de:0f:a2:
b4:d7:a1:b9:c1:b8:39:d7:a1:fc:d3:cb:a8:36:08:
df:40:73:52:11:4b:bc:e6:28:de:ac:4f:37:ac:9f:
0f:1e:a1:2c:05:ef:d9:7f:65:0b:0c:ea:9f:93:a8:
ee:83:19:8d:df:88:cc:53:6f:5b:32:04:77:35:1b:
8a:ba:2c:05:c2:10:3c:da:fb:a8:d9:8e:c6:c5:6e:
c2:aa:4c:23:15:bd:ac:ce:fd:34:1a:64:44:f7:d2:
2a:e5:13:7a:26:85:30:0a:11:6f:32:80:92:09:b6:
44:9f:a4:3c:69:4c:59:06:cf:50:8a:96:cb:ce:e1:
19:ad:b9:c4:a1:8d:ef:14:1b:fd:ad:13:58:f6:1e:
6a:3a:7f:06:2a:06:86:78:46:c1:9b:67:b9:81:f1:
1c:3b:63:36:1c:3c:9e:70:fb:db:d7:29:20:e8:2b:
d1:0b:f9:71:89:10:41:97:e3:62:93:ff:c6:32:b1:
7d:33:31:49:74:67:6f:b7:98:d8:7a:42:67:da:1e:
81:00:f3:59:31:97:c1:c8:ad:c7:9d:2b:67:7f:7c:
b7:b3:5d:3e:15:4e:01:91:f7:64:c9:f8:55:f3:86:
d9:91:b4:9b:fb:af:42:7e:b1:95:3e:06:e4:5a:15:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:B9:40:D0:6C:74:DB:77:73:BA:DC:82:14:EF:01:AC:0C:6C:44
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:4b:50:11:c9:18:e9:3c:34:1e:c1:51:95:aa:b4:63:36:
e4:37:45:30:dc:66:6d:e4:ac:64:28:85:a6:5d:a3:a4:28:b8:
eb:bd:fd:92:77:f2:dd:46:7e:ac:62:60:7f:93:ea:8d:86:0f:
25:8d:34:21:e5:dd:82:24:33:d1:3c:a4:d8:2a:b1:18:ac:f1:
28:1f:2a:34:d4:3e:2f:82:d2:1f:86:ed:b4:35:62:fa:6a:bf:
d9:d8:52:09:63:52:ca:35:15:ea:3d:bd:f8:61:52:0d:c6:e8:
75:ca:f8:31:4a:ba:66:02:75:bc:c1:29:74:98:8c:ca:28:89:
56:e3:af:32:55:f3:df:6f:75:ee:6e:95:c3:15:aa:53:9b:37:
da:0d:cb:d0:5c:d5:e2:cd:f0:0f:0e:b0:a2:b4:cb:7a:7c:fd:
6e:bf:e0:be:26:cc:ed:0b:3c:5d:11:99:8a:48:6a:ae:8d:36:
4a:1d:fa:a2:93:5c:ca:c0:3f:6c:9f:0f:c0:99:da:62:8a:18:
21:75:04:28:ac:17:fb:c9:5f:2b:e6:50:d9:21:06:ce:7d:a0:
b5:ec:9b:7c:37:9e:89:e2:e7:8c:a1:a1:7c:6b:99:27:14:03:
65:70:98:24:60:44:1f:1e:f5:d5:5e:ab:64:d6:f8:77:37:c6:
c7:40:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:09 2026 by rpki-client