Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: S7hc5L52p4MlUlaNLfTJR7Ex7ldR72g9CPcLFyVDqBY=
Subject key identifier: CA:6C:10:8C:8C:B7:1A:BD:60:26:78:07:4A:E2:BA:52:8A:BA:9F:C9
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 019D27E0544211BD513891AEFB896E33E394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0EC8
Signing time: Thu 26 Mar 2026 02:01:46 +0000
Manifest this update: Thu 26 Mar 2026 02:01:46 +0000
Manifest next update: Fri 27 Mar 2026 02:01:46 +0000
Files and hashes: 1: OMDj7S7H5Znb54o4B4mYw4OI1xA.roa (hash: QwhdgA5D4IFqcLTQvjEb7OBJC7e4ri/WagCnJPfPU5Q=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: 23audZswS/cdSLCfQ7ECNAD/xfz4YJCMaBLw3M4RPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:54:42:11:bd:51:38:91:ae:fb:89:6e:33:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Mar 26 02:01:46 2026 GMT
Not After : Mar 27 02:01:46 2026 GMT
Subject: CN=ca6c108c8cb71abd602678074ae2ba528aba9fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:1d:d4:82:42:b9:e0:a0:2f:93:2e:a5:f0:
8a:d5:ff:fc:19:00:13:3c:61:2a:b6:30:d6:2a:b9:
fc:4a:ce:95:04:1e:57:21:e1:7a:bc:f6:4c:17:28:
43:cb:54:48:af:60:1e:9e:da:43:4d:07:1a:85:4d:
51:8a:ad:b0:52:68:6b:ff:3e:58:38:b2:40:f3:91:
a4:aa:7a:bf:aa:46:59:50:3f:d4:fc:c8:b4:27:71:
d6:bb:f9:49:8a:9e:b6:22:d6:12:af:b4:fd:e3:de:
f5:fa:c0:e2:d2:b3:1c:04:52:99:93:e7:4a:ce:4c:
f0:db:8e:c2:c4:a4:1f:83:c0:19:f3:81:1b:44:15:
90:39:50:ae:f6:fa:bc:e3:1f:4e:af:8f:bf:47:cb:
a3:fc:b2:c5:ba:90:ce:ee:7b:f3:48:c9:2c:ac:93:
d1:47:97:14:f7:a2:70:76:05:2a:09:b2:0c:7d:cc:
21:86:36:52:08:60:00:f4:31:e7:a6:fd:7c:64:b8:
9d:94:8b:64:ff:db:bb:4f:79:5a:b5:97:15:b3:e1:
b5:2e:e9:ee:93:b0:fb:59:7e:a8:75:1d:15:97:e4:
62:e3:ed:5f:f3:0a:e0:e8:47:a0:6b:ba:a0:01:b8:
11:25:dd:fa:f7:a6:ef:85:b3:59:f4:84:43:d2:6e:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:10:8C:8C:B7:1A:BD:60:26:78:07:4A:E2:BA:52:8A:BA:9F:C9
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:63:78:37:3b:17:52:5a:a4:f9:e6:21:3f:ad:3e:4f:05:
47:d5:6a:e4:7b:b3:b6:e3:ae:5f:93:61:b2:bf:0b:bd:23:af:
eb:c1:a9:aa:fe:ae:7b:d7:40:a5:5d:26:f1:e5:72:95:e2:f4:
a1:70:fc:62:8d:e5:4f:98:5c:bb:6f:da:9c:29:2c:14:ec:35:
a5:a6:33:1d:13:94:ca:ed:83:4a:0f:78:28:a4:0c:0c:fe:4a:
46:0f:bd:20:1b:a7:40:8f:a9:96:6b:e8:5b:9e:47:02:c7:85:
6a:f6:55:25:b8:74:77:0d:5d:5a:b8:d0:5d:09:03:14:23:c1:
56:e6:61:4a:0c:94:a3:0a:6d:6d:af:af:62:ce:d1:32:5e:ac:
e4:03:03:14:61:3d:c3:b6:f5:67:6c:a5:65:8f:48:d0:0d:82:
d3:20:dd:a5:43:69:b7:90:d9:fe:7c:01:01:ab:64:75:72:63:
25:0a:1a:67:f3:4b:ae:11:f5:42:aa:e5:aa:42:49:5a:b3:7a:
4a:26:9e:fa:7f:95:5e:b5:79:90:fc:93:93:e2:42:4b:7f:e6:
76:02:55:92:1e:2c:41:73:4a:36:c7:a6:90:3a:bf:1c:1b:b8:
99:f2:26:2c:af:b9:1e:e0:c2:af:59:9f:67:db:18:03:cb:52:
f6:52:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:59 2026 by rpki-client