Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: r44Lw+bN6SXylqVBfTNHLCE9dhm8L57R6+hu7uRJwNU=
Subject key identifier: A9:27:5C:3C:A9:85:8A:A8:1A:9D:4A:F5:9A:B2:F8:01:8B:35:C1:BC
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019D3940DCB9EFE71566131B4572C7DC4438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 05EF
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: Lzw_xKxC3BOEX_GyAK3M7os7d00.roa (hash: B2gs3iBOLuhwIkmQhoan7QBJkm/HZgFTXNqJZkVZlEQ=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: TOG6M2+QjkgAo7v6r+EWXwkIdCa8rUym43JZx2i+ADk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dc:b9:ef:e7:15:66:13:1b:45:72:c7:dc:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=a9275c3ca9858aa81a9d4af59ab2f8018b35c1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:ba:75:fa:10:ab:cf:5d:41:15:73:0c:82:
e3:23:93:e7:e5:fb:ba:58:7c:51:5b:c1:87:db:1d:
55:fd:ad:cc:36:5f:6b:d6:2d:8f:d4:d5:ce:d3:69:
00:7a:f6:01:d8:3d:7b:5e:f1:fe:8e:31:ad:45:96:
e5:49:e2:c4:db:78:c6:a1:86:ec:a3:4f:11:e2:a1:
4a:7f:30:a4:2a:31:d4:12:38:54:f0:c1:fb:17:6a:
0c:e6:a6:ee:7d:ee:8b:b0:a6:4d:b0:fc:b3:64:22:
71:af:47:66:b0:ce:4e:da:63:67:89:d2:df:ec:45:
a9:96:57:2e:6b:65:31:47:91:45:8d:2d:2d:3a:27:
a5:9e:20:57:d0:ba:24:66:ec:5c:86:46:e3:8d:13:
eb:00:1d:48:71:b1:69:bd:bd:43:f1:b1:5c:16:4f:
27:c0:7c:ff:5d:fe:c8:17:a5:75:9e:a8:95:5b:b7:
e2:b7:4c:44:8b:6c:04:c6:c2:33:41:8c:a8:a9:19:
93:28:b1:d4:58:f2:d7:eb:6a:b0:3c:01:9b:29:d1:
ba:e4:32:a1:d8:4e:8e:8b:3f:30:17:94:22:db:88:
37:79:43:c8:5b:b7:77:89:c2:02:d9:ef:11:52:54:
3f:25:fc:27:0f:1e:5c:bc:ab:1b:65:2b:60:24:05:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:27:5C:3C:A9:85:8A:A8:1A:9D:4A:F5:9A:B2:F8:01:8B:35:C1:BC
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:75:ab:73:b4:67:b8:4c:fa:d9:58:9a:01:b9:30:3a:de:e5:
da:f5:57:7d:55:39:4d:0a:45:c2:3a:2f:5b:97:45:33:2d:4f:
d9:08:3a:b9:18:60:d9:34:ed:19:1b:4e:f3:8c:7c:fa:af:51:
83:08:38:ab:ea:8f:97:f8:d2:10:bf:43:1a:b8:78:e5:6a:a1:
0d:e8:76:40:df:64:e1:a1:8c:20:ae:ab:44:db:a1:73:fa:97:
a0:e9:7a:b2:aa:2f:56:37:1f:b4:26:10:00:80:10:98:e1:2d:
9f:d8:8a:20:48:14:a3:b6:86:63:d1:d9:12:1a:34:fe:25:aa:
7d:e8:fa:70:e3:84:12:87:d3:b4:60:f5:f1:b3:ba:a2:20:bb:
5c:80:4c:56:3d:86:af:30:20:f2:8e:4c:35:3d:c3:5e:86:bc:
b8:1a:1e:c9:df:1d:c1:22:49:db:64:f4:12:2d:98:da:51:4d:
2d:91:d7:a0:f7:e4:63:01:a4:38:5d:df:81:19:ad:91:5b:ee:
1f:17:46:f4:97:24:72:4b:5c:d4:d4:bc:e5:f0:58:2f:4e:51:
77:a3:d5:7f:f3:d8:7a:c0:04:fa:b7:22:56:f4:a8:20:0c:41:
f5:87:83:33:6a:87:71:c9:47:0a:c9:43:ba:b5:3c:a7:3f:1b:
f3:92:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:28 2026 by rpki-client