Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier: 465fx2xO5l1dVhT5Jdro+SaJxbf6M7SX0ips2nSDIyk=
Subject key identifier: 63:8A:6C:F4:59:76:3D:6B:56:A5:46:C3:68:0A:BB:16:8A:9E:47:F5
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer: /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial: 019D389BB02C55E11BB518CD6277720C47DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: Gx6baosvhsyuunnM0M86NpVi0j4.roa (hash: K5GR2Z76x52/389cbUDZWRSkT2fniOaUKJncmjnTypo=)
2: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: ZqTCk24zVCEpsKv9sJsuy5pHbS2daOKFgXKqhT+zpP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b0:2c:55:e1:1b:b5:18:cd:62:77:72:0c:47:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=638a6cf459763d6b56a546c3680abb168a9e47f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:e8:9f:43:a9:6f:26:3e:b8:46:a0:e9:4a:
19:75:8c:be:0e:86:ae:11:20:6d:1e:6f:af:22:f5:
82:8d:c2:56:c3:a3:38:08:42:14:57:ac:e9:20:15:
f8:f4:42:ed:69:1d:0f:60:a6:5b:2d:97:0c:fb:6c:
31:ab:a3:5e:1c:24:fc:57:1e:92:0d:7c:18:ec:f6:
b7:6f:44:3c:8d:5f:65:b1:0d:c5:71:bb:f2:f1:64:
ec:3d:fe:d0:e2:80:f4:06:cc:b7:53:27:02:24:34:
ca:21:d5:27:b0:d8:d0:4c:20:ee:9b:16:e5:52:17:
d9:34:c3:e6:68:1d:3c:55:de:a1:13:de:6b:7f:6f:
ff:29:74:39:c3:62:2f:35:36:47:02:e5:63:59:22:
59:b7:ff:45:8d:2d:40:dd:85:5c:85:da:b7:8a:55:
93:ab:3d:80:e8:6c:7f:ea:9c:4f:bf:c6:ac:06:b2:
2f:0d:64:da:6c:4f:0c:66:65:3b:2f:ba:0a:61:ca:
42:5a:d8:6d:38:9c:0f:b2:18:01:df:c3:90:a5:83:
b3:97:a1:1a:99:10:ab:fb:c5:1f:39:ca:d9:d7:a1:
cb:05:59:40:1b:c9:98:7e:e7:23:f3:5a:06:d1:ed:
bf:ff:ca:d1:70:3c:0b:19:c0:86:56:48:80:c0:90:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:6C:F4:59:76:3D:6B:56:A5:46:C3:68:0A:BB:16:8A:9E:47:F5
X509v3 Authority Key Identifier:
keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:13:c3:e6:5b:d2:68:a8:22:a2:3b:b5:a2:e5:e8:eb:d7:
6a:7c:1e:06:3f:70:f1:8d:24:0d:5d:69:0a:6a:bd:ca:7f:ff:
b0:38:d9:60:78:9a:b8:e9:e1:d3:10:05:1a:ce:af:5d:0f:1a:
60:5f:7d:69:1e:0c:fc:83:f4:a7:2b:53:d6:c7:55:de:f4:e9:
37:44:30:8f:45:65:b4:28:78:73:be:ed:10:c6:46:41:a6:5a:
c3:86:98:5b:9d:91:c7:22:35:da:27:4e:12:d2:de:df:61:64:
1a:02:09:a9:a0:1c:86:6f:3e:77:3c:83:83:e4:6b:bf:60:59:
09:eb:fc:75:8c:ee:1a:85:c4:0c:7d:01:60:b7:6c:1b:25:60:
e5:5d:15:f0:b9:af:19:63:6b:d8:22:69:5b:c8:87:ed:b8:b1:
d7:6d:6e:4f:a3:dd:0f:54:62:55:c9:e9:74:22:37:b5:77:7c:
76:b1:81:d6:87:a4:8a:4b:7e:89:4b:65:1e:f9:87:b7:67:1a:
c4:a2:eb:91:67:6b:44:5c:eb:7c:09:25:91:18:ee:f1:2a:24:
48:ee:99:4e:ec:44:32:14:6d:3a:d7:15:cf:e8:d3:4f:e3:a5:
d6:a7:a9:db:a8:aa:00:d6:98:31:89:92:70:fe:4d:c2:e6:79:
7b:72:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:14 2026 by rpki-client