Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File: uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier: wndnTp537k77/6aG2I9mK1C1+6fJcvKABwAc8iK1tr4=
Subject key identifier: BB:90:73:BA:5A:39:ED:B8:4C:44:2F:87:27:F1:8F:C9:C4:60:9C:3A
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial: 019D31BEEACAD570010892D06BE2CEB32D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number: 0FC2
Signing time: Sat 28 Mar 2026 00:01:28 +0000
Manifest this update: Sat 28 Mar 2026 00:01:28 +0000
Manifest next update: Sun 29 Mar 2026 00:01:28 +0000
Files and hashes: 1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: RKAoV4ONjmlGpSr3OGZN6QbGW2tEiCor6IScVXihwCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:ea:ca:d5:70:01:08:92:d0:6b:e2:ce:b3:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
Validity
Not Before: Mar 28 00:01:28 2026 GMT
Not After : Mar 29 00:01:28 2026 GMT
Subject: CN=bb9073ba5a39edb84c442f8727f18fc9c4609c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:21:24:97:63:cc:8b:18:7b:3a:5f:84:96:
67:dd:e6:79:57:7d:1d:a9:1a:dd:0e:09:69:50:f7:
4c:a5:13:83:42:b2:8b:95:33:bb:9a:1b:a7:7a:ef:
e0:69:d9:28:74:93:ca:51:83:4c:58:a4:58:ab:b7:
a4:6a:8a:79:bf:8c:4f:5b:d7:6e:2e:7f:e4:d4:7a:
da:72:55:ce:80:80:0c:a4:cf:9f:21:d0:db:c7:4e:
10:b0:8d:22:19:fd:87:f3:75:89:18:ca:0a:08:fe:
9f:0b:a8:9a:2b:81:67:ba:2c:29:5d:63:d6:0a:8f:
57:7b:94:c6:c0:c1:29:d0:90:ae:bd:d5:be:20:9b:
ff:cf:c3:7a:48:2f:6f:f2:b4:84:37:b1:3e:51:02:
10:f7:8b:d7:e8:48:77:75:81:dd:46:49:5c:c4:00:
f2:80:83:01:62:5b:32:51:82:c6:9e:2b:2e:8f:9e:
0d:4e:06:6f:c2:a2:2d:71:83:4e:d6:f1:18:1a:11:
aa:cc:eb:45:49:1d:fa:e3:a4:99:53:c5:8a:ed:f3:
68:49:8e:74:ce:0b:e8:94:91:2f:b1:d6:68:18:37:
1e:79:fd:e8:b6:a4:2b:b0:37:a7:d1:0f:96:2b:48:
be:54:9e:57:40:d6:82:71:fe:2a:7f:7f:ef:9f:b0:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:73:BA:5A:39:ED:B8:4C:44:2F:87:27:F1:8F:C9:C4:60:9C:3A
X509v3 Authority Key Identifier:
keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:b9:d2:03:62:6e:d5:f1:a6:70:3b:6a:19:fa:19:6e:5e:
96:96:b2:44:79:37:b4:a9:d5:04:6b:7f:2c:86:13:9f:b2:0d:
d2:b6:85:03:99:ad:5b:58:68:bd:8f:e2:f2:6f:cc:d0:9b:91:
0f:9b:68:c0:b3:ad:31:78:a6:9c:8f:ef:b9:c3:fe:37:70:1b:
1b:a7:b0:61:53:77:a8:ef:ca:6d:3e:05:90:a6:cd:37:2b:d2:
9f:96:08:b2:66:88:36:c5:3b:6b:28:b8:25:9b:98:4f:38:a6:
1a:08:62:89:27:3e:5f:f6:b9:a4:94:c5:b3:9c:1b:db:f6:c3:
21:43:c2:d5:18:43:94:01:fd:b7:31:7d:ed:9e:a7:c7:64:83:
ab:7d:9b:60:41:e6:da:e3:7f:c1:8f:d1:1e:d1:27:ce:35:3d:
bd:88:a5:86:a2:fc:14:66:4d:52:ad:6f:37:07:a8:df:75:49:
87:5e:17:55:08:c3:73:cd:b7:29:14:b9:83:94:45:b0:df:df:
99:aa:53:03:87:e3:63:2e:66:32:53:cd:19:8f:3b:45:4b:ba:
0e:e8:17:bf:4e:f4:79:58:4c:83:4d:00:d4:96:9c:75:5b:79:
ec:a8:6f:a7:7f:27:f9:02:72:ee:a4:7c:0a:4d:7a:45:2a:81:
6f:ed:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:02 2026 by rpki-client