Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier: icyh5yy2GMJxYqOPwdvpSVU7+zugqImgxjB6SlVJqN0=
Subject key identifier: 9C:BB:C2:5A:59:71:50:29:72:32:8C:F1:9B:25:02:CF:45:A1:E1:B3
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 019D33087177036D349AB1AE5BE5A8C564A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number: 0DD2
Signing time: Sat 28 Mar 2026 06:01:24 +0000
Manifest this update: Sat 28 Mar 2026 06:01:24 +0000
Manifest next update: Sun 29 Mar 2026 06:01:24 +0000
Files and hashes: 1: mvsSWkXsoZaA1ourpWIv5ndzQus.roa (hash: NCT6Fnjfvpm4oH5VP79wsNStA4KElS5NV2qxt3IiN5Y=)
2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: mnFkRLZ9CMMBy8E3lxN6sOkrMufszXmUL3PuizUlI6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:71:77:03:6d:34:9a:b1:ae:5b:e5:a8:c5:64:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Mar 28 06:01:24 2026 GMT
Not After : Mar 29 06:01:24 2026 GMT
Subject: CN=9cbbc25a5971502972328cf19b2502cf45a1e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:a8:f3:0e:f6:55:f1:ee:73:6d:33:93:bd:
4d:9e:34:f5:9b:7d:59:f4:e9:66:c1:e5:5f:23:bf:
46:cf:07:5a:77:ce:af:59:32:87:c7:f8:42:e2:18:
b2:6a:5e:6a:e4:bd:b5:c1:2f:b0:fa:27:45:72:68:
b9:be:36:de:23:1a:b5:0a:45:7e:af:c1:83:16:2c:
84:42:9f:24:f2:d2:a5:22:b5:1b:44:af:6f:c0:ae:
e9:8c:e3:08:39:59:51:98:e8:94:4b:09:c2:f6:16:
47:0f:c3:53:99:40:c3:05:5f:73:af:3a:17:f9:bc:
69:54:21:bf:61:80:ab:12:12:d8:5f:ca:09:d2:fa:
8c:93:5e:5d:8b:02:d1:e9:ab:97:e2:9e:66:7e:b7:
63:57:33:12:81:29:6d:ee:e1:f0:92:b4:fb:f7:b8:
20:d9:35:7e:43:a2:d5:88:62:72:f4:62:47:e0:61:
39:b0:0d:db:af:7c:81:38:50:32:57:cd:00:46:eb:
8c:1b:39:1d:eb:4d:7a:f9:53:22:8c:46:36:90:65:
62:fa:b8:70:e3:6d:42:3e:c6:6a:a4:20:7b:bf:87:
9c:7c:fa:82:3c:35:a1:9f:14:ba:d4:86:e7:49:e6:
73:17:07:c7:a7:5e:8b:fe:f0:e4:20:09:b8:e5:7a:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:C2:5A:59:71:50:29:72:32:8C:F1:9B:25:02:CF:45:A1:E1:B3
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:48:e0:46:88:6f:2c:99:95:52:57:b2:88:5c:53:aa:25:e8:
67:23:5b:7b:ed:93:91:0e:45:8c:c2:bb:b6:30:87:aa:67:61:
75:60:1a:db:c3:30:f3:7a:f1:42:78:ca:6f:94:e7:83:58:d1:
58:ea:3a:c6:c5:24:3d:5e:77:2c:b3:32:7e:af:77:4e:33:5f:
0f:fe:0f:40:89:4e:f3:6c:bb:43:ce:89:8c:d4:28:e7:13:e4:
20:d7:2c:98:bd:30:8d:00:55:72:e3:04:c4:80:eb:06:89:b7:
81:6c:32:dc:b4:0d:56:b2:f6:b5:d8:b0:38:02:58:0a:cb:44:
e4:b7:a3:2d:38:ae:76:5c:23:37:6f:a2:dc:19:c7:c8:7b:8e:
08:41:f4:c9:8d:d0:85:8a:f4:5f:d7:0b:1b:40:3b:2a:45:74:
8e:a2:e2:b7:9f:16:40:22:46:98:c3:86:d2:c1:14:a0:31:2c:
ed:b9:01:07:d2:16:26:e1:31:db:ba:78:30:9c:0d:55:ef:33:
67:df:22:53:db:78:18:dc:df:b4:03:1e:18:67:ec:19:9f:ed:
49:29:74:52:07:58:21:d4:36:32:e3:11:26:50:a6:2d:54:3d:
92:71:44:8e:8d:57:17:03:71:80:f1:0f:87:a8:7f:41:14:26:
ab:d1:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:04 2026 by rpki-client