Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: 2BWg2tL5gJ5QfMnM0sSQ5kuuAXDkIGwLyrABeI4DdaE=
Subject key identifier: 81:C6:69:63:50:D7:26:98:31:99:52:46:37:5E:FE:BF:24:B9:4A:3F
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019D2B177C6BB5B1DA403225AA7BFAC952DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 17:00:52 +0000
Manifest this update: Thu 26 Mar 2026 17:00:52 +0000
Manifest next update: Fri 27 Mar 2026 17:00:52 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: WauIjMkUFJ8xEphTe50j57+knMJfxnP9MIc8SRK2Of4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:7c:6b:b5:b1:da:40:32:25:aa:7b:fa:c9:52:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Mar 26 17:00:52 2026 GMT
Not After : Mar 27 17:00:52 2026 GMT
Subject: CN=81c6696350d7269831995246375efebf24b94a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:c9:e1:15:12:10:89:c7:ab:3a:59:d9:c6:
8e:49:73:f9:95:a5:cd:60:ef:62:25:e5:c8:e7:6a:
56:04:fb:45:2b:91:01:bf:ea:b0:3c:05:58:56:67:
1a:30:c5:05:92:b4:d2:51:0c:7b:1d:92:59:f0:06:
f2:79:d2:b3:ba:2f:fa:5c:4a:db:1d:5f:e0:1d:c9:
e1:1a:f2:58:23:bd:72:dc:c5:5c:a7:97:61:d2:d2:
e4:69:92:84:44:48:57:af:c6:de:2d:03:d4:99:81:
f0:9a:05:d4:9c:12:42:73:b0:21:b7:d1:a2:e3:b8:
63:a7:50:52:79:20:29:6f:4c:63:81:25:a3:9e:67:
6e:5c:50:e1:ab:f7:7b:aa:10:b5:ab:e4:b1:42:4e:
84:51:72:ef:31:3d:5d:d4:19:c7:46:70:25:7b:8f:
e8:26:3a:18:f7:58:59:64:f6:59:25:a3:5f:f2:79:
3c:09:f8:be:b1:58:77:a0:59:30:bc:a6:eb:00:7d:
c3:51:5d:b5:31:f4:42:2e:89:f4:dc:5f:45:12:5d:
d3:47:94:5f:32:ee:64:7d:49:7b:e5:83:d0:1c:f8:
66:d9:de:29:17:65:f2:e9:13:64:3e:0c:05:b8:22:
7f:08:79:b9:8c:71:e7:86:b6:5b:ef:63:2d:ef:1b:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:69:63:50:D7:26:98:31:99:52:46:37:5E:FE:BF:24:B9:4A:3F
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:a1:e8:95:da:f7:68:e7:e0:e1:18:cd:3f:a4:2d:69:17:
12:ba:74:7c:75:58:e4:c6:a1:fb:4c:85:69:2a:2e:87:05:0d:
11:e2:7b:b9:08:54:41:74:4a:8a:c9:fc:f4:ce:20:dd:44:79:
6a:31:6f:b4:e1:00:b4:08:e4:9a:02:82:0c:39:99:06:40:45:
52:b3:a8:95:0f:fa:b7:3b:08:7e:83:45:78:0d:19:1d:ce:a7:
c7:74:3d:7e:70:ee:28:f0:41:4e:38:78:f4:ce:24:03:3a:06:
95:cc:35:af:1b:94:49:92:14:8f:3e:c9:cc:18:33:2d:28:ca:
87:a2:25:8c:0f:21:56:a9:73:c4:34:c6:13:0d:8a:38:71:00:
54:23:cc:d7:6b:02:de:85:c3:8c:db:40:3e:9e:e5:f3:03:3e:
4a:52:c6:55:a1:8a:0c:2a:0b:fb:6e:43:39:4b:4e:48:3f:98:
75:e2:1e:07:44:60:78:63:d2:de:0b:6a:7b:ef:60:64:d7:7b:
fc:77:f4:07:d7:91:24:3e:54:72:cd:2f:c7:84:9a:c8:46:d1:
cb:8a:49:f0:39:ac:04:31:95:09:36:49:fe:0d:db:df:1f:73:
43:40:91:c6:d4:b3:ff:9e:64:a0:9c:37:a7:96:44:ee:ca:24:
d8:cc:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:19 2026 by rpki-client