Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: 9Kd6I7EspX4u+Cg6NToGt5C0Q79sCypUieiPyTUJf9g=
Subject key identifier: 3E:43:7E:21:67:E5:9C:9D:4F:F9:67:F1:51:93:05:AA:DF:11:CB:65
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019D3AC1FAB8DAE2AEA89701006CF33326E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 06E7
Signing time: Sun 29 Mar 2026 18:01:24 +0000
Manifest this update: Sun 29 Mar 2026 18:01:24 +0000
Manifest next update: Mon 30 Mar 2026 18:01:24 +0000
Files and hashes: 1: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: 1Vp4VRsSfRfmuy67FI5hWRVuevI2dVIlWkGPh9ZDDvw=)
2: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:fa:b8:da:e2:ae:a8:97:01:00:6c:f3:33:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Mar 29 18:01:24 2026 GMT
Not After : Mar 30 18:01:24 2026 GMT
Subject: CN=3e437e2167e59c9d4ff967f1519305aadf11cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:36:d8:a2:05:2a:ec:85:45:28:26:df:2c:
86:38:29:2a:98:44:e1:dc:ac:e8:66:10:88:87:3d:
3a:db:e2:96:3f:99:d0:b6:80:65:a5:70:f9:82:71:
ba:b6:c6:2e:40:77:cc:33:97:68:da:5b:a6:1c:28:
32:1c:9d:68:cb:4e:6e:71:31:d2:3f:f7:b0:d5:23:
eb:e9:c6:6b:36:9a:47:8f:01:a2:ed:b0:1e:fd:9e:
77:da:35:66:bc:a4:a0:80:f6:d1:99:5b:cd:b6:d4:
bc:c7:8d:09:96:fa:73:b1:1a:37:66:df:ac:83:ea:
aa:f5:34:02:b1:55:d1:30:db:c3:45:a1:e2:17:aa:
37:03:bd:36:3b:73:10:47:61:c6:87:19:08:75:69:
59:24:ec:0b:64:2a:fc:82:96:bb:12:fa:c5:24:9a:
72:88:9f:1c:fb:02:26:cb:17:77:16:cd:07:79:f1:
18:dc:ee:11:9d:13:08:33:4e:3e:83:32:e8:9d:5c:
ec:35:54:3b:22:a9:d9:2b:49:f4:3c:08:2d:b1:7f:
4c:ab:39:97:ec:40:a4:65:31:b0:e6:5a:46:85:51:
94:a7:ea:3c:26:d8:bc:af:f4:2b:fd:27:76:7b:0a:
4e:cb:8b:6e:16:ac:8a:fc:3c:1b:94:29:cb:04:03:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:7E:21:67:E5:9C:9D:4F:F9:67:F1:51:93:05:AA:DF:11:CB:65
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:71:fd:9f:60:c8:2e:d4:20:69:3a:10:b2:fe:27:54:66:
b1:0a:eb:10:73:e2:87:0a:98:72:e0:7f:4a:cd:c0:59:e9:9e:
e6:96:c6:57:69:9a:7d:8a:8d:8d:56:79:f8:2b:fb:a9:5e:7e:
8a:2c:0d:84:69:09:a8:58:5f:2a:e3:38:1e:99:04:e4:21:9d:
79:29:29:de:74:40:f2:99:da:06:cf:8b:7b:15:65:d2:77:a9:
b9:e2:ab:64:e2:0a:78:66:56:47:75:d9:58:01:c1:9a:33:e9:
2e:0c:bb:67:fe:84:19:52:bc:7e:ad:03:8b:b2:d7:cc:a8:7f:
fe:53:10:51:d2:4d:38:e0:7b:00:85:3f:be:f4:50:f7:b3:81:
ad:cf:a9:1a:87:0e:09:ee:85:36:ed:67:c3:75:13:82:14:e4:
c8:d5:60:20:24:b2:b2:fe:6f:8e:3a:5b:8a:9c:d8:15:3b:53:
49:a0:2d:fb:33:13:54:2a:77:e4:b8:f9:a0:4e:2e:14:c0:53:
0a:74:ec:63:52:a8:78:5c:6f:90:15:e7:3e:4a:6c:2b:98:2a:
48:87:f0:5e:f2:04:96:fe:17:fa:9a:52:49:f0:0d:b4:c1:98:
68:b1:a9:8e:73:0e:51:3a:59:63:76:51:56:20:1b:62:ec:9a:
7c:c6:ad:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:19 2026 by rpki-client