Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
File: UoVvOOBRP5_qsFeMd3170GOidKo.mft (raw, json)
Hash identifier: y40KjLTuw77elRP8yupkWSKhvjTtCeicRZCq+xUl2EM=
Subject key identifier: A7:AF:F9:4E:82:C8:6C:50:86:28:76:FA:64:33:6C:AF:1D:DB:C3:BC
Authority key identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
Certificate issuer: /CN=52856f38e0513f9feab0578c777d7bd063a274aa
Certificate serial: 019D258330EE592B3BA7D4F3FAE55CD820AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
Manifest number: 98
Signing time: Wed 25 Mar 2026 15:00:47 +0000
Manifest this update: Wed 25 Mar 2026 15:00:47 +0000
Manifest next update: Thu 26 Mar 2026 15:00:47 +0000
Files and hashes: 1: QwFKvvopZqKlG9j4iBrrVAusGsg.roa (hash: 14iSYLqrVub3iW+aJenPS0umnDZDvuXqPyuEeqJM+DE=)
2: UoVvOOBRP5_qsFeMd3170GOidKo.crl (hash: PqSQ6qzdU5H9fFBDodjT6wveA8x+RA0lPVarpZfxQb0=)
3: nn_JfFoGDqXnHnXClRYM8BVKfms.asa (hash: Go99gPjwQ2qP0Poq+GhGWvW0PoWn1a+y2XVSES6ZIPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:30:ee:59:2b:3b:a7:d4:f3:fa:e5:5c:d8:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52856f38e0513f9feab0578c777d7bd063a274aa
Validity
Not Before: Mar 25 15:00:47 2026 GMT
Not After : Mar 26 15:00:47 2026 GMT
Subject: CN=a7aff94e82c86c50862876fa64336caf1ddbc3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:3c:3f:f4:f7:cc:42:77:fb:8f:0b:ea:db:
65:00:03:b4:4c:29:e2:22:4b:3a:12:b6:54:42:95:
0a:57:7f:ec:c3:a6:25:be:28:44:f1:bb:40:14:c2:
bc:1e:43:57:3c:54:d5:d5:41:2a:ce:be:5a:f4:e4:
d6:c9:83:37:d6:ed:ec:79:df:11:6b:3a:29:51:bd:
b5:b1:3a:91:8b:00:6a:59:35:12:ea:ca:84:0f:89:
b6:47:fe:61:fa:9c:bb:9f:ef:fe:6e:51:b5:23:b8:
a4:13:15:b9:ce:48:b8:17:c9:60:d2:fe:4e:d4:3d:
4b:5c:45:f9:63:81:7e:31:b7:07:11:3d:4b:f3:47:
22:b6:36:17:e1:ae:31:0b:82:8d:85:8e:9b:b3:bf:
57:4e:50:b3:e3:3c:e6:b8:3d:cf:51:aa:f0:b0:2d:
67:9e:18:8f:11:e8:df:41:cb:05:a3:cb:8b:52:2f:
b1:4f:a0:63:a2:3a:76:70:f6:99:62:ff:b6:24:33:
5d:37:7c:63:53:de:cd:09:e3:f8:27:0a:3c:e3:f4:
8b:6b:1d:31:0e:13:cd:65:96:60:cb:b5:64:dd:d4:
3f:6f:09:c2:5d:ca:25:ba:fa:73:b2:48:22:f2:4d:
4f:8a:4e:e2:dd:5c:61:76:d1:b5:90:f2:89:bb:0f:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:F9:4E:82:C8:6C:50:86:28:76:FA:64:33:6C:AF:1D:DB:C3:BC
X509v3 Authority Key Identifier:
keyid:52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:62:8f:02:44:36:30:98:26:76:09:62:a5:48:8b:a8:e4:
6e:83:60:71:52:cb:34:7b:c1:26:1e:74:a4:1d:5d:a3:95:3b:
87:e3:c9:cd:ba:89:68:30:2f:ae:9e:9f:1c:03:c7:85:1c:17:
72:7d:d9:7b:9a:ee:80:b4:14:27:36:4c:ec:84:62:42:cf:fb:
5a:cd:b9:7e:43:54:71:67:b8:e4:8c:d3:d0:f7:af:ff:8a:93:
f1:aa:e3:63:51:83:b0:e8:dc:24:c3:42:ca:bc:9b:da:39:f1:
15:26:10:36:ae:a5:d3:1c:47:1a:f6:21:39:b9:bc:41:0b:95:
8d:1c:7e:d4:c1:24:7e:5b:7d:41:55:a4:ae:f0:4a:8d:7c:9f:
3f:4c:7c:9e:83:64:ca:63:43:8e:16:d1:b6:2d:b7:e8:8a:c7:
3f:06:8a:af:5e:c8:d4:1e:1b:10:01:95:94:1f:40:0c:2a:93:
ca:94:a7:83:f7:eb:fb:0c:1e:9f:df:e9:fa:7e:ab:8e:39:62:
51:ec:54:1c:36:1e:0e:66:b8:61:2d:74:28:dc:6b:16:5a:3f:
31:ad:ae:3c:4d:24:06:e3:6a:19:c3:9b:18:82:df:a4:2c:23:
dc:1d:fb:2e:08:62:39:a8:1e:be:86:f6:6d:c0:48:4d:13:d8:
cf:f9:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:58 2026 by rpki-client