Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: 8K+IFYA5CJj2RNV13g9BXu+0xaLU43zlUWWU07fZFYY=
Subject key identifier: BC:C8:9D:AC:18:84:93:1D:D3:4B:10:BD:1B:F4:39:9F:C4:6D:87:7B
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 019D382E494A7135FCC2C1E7BDC8CAA80401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: UQjho8HJso3oqBvU3cymBRJqexEF7aZGGgvuwxs5Xq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:4a:71:35:fc:c2:c1:e7:bd:c8:ca:a8:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=bcc89dac1884931dd34b10bd1bf4399fc46d877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:1e:c6:35:97:2a:41:06:76:25:93:f6:04:
af:a1:89:07:3e:8f:61:16:e5:69:a6:9c:f1:6b:5f:
e2:77:e9:7b:75:ef:3a:f3:45:71:0f:5a:b5:93:7d:
9a:72:0f:6f:7b:a5:11:db:61:54:7a:e1:1d:36:f0:
2b:8f:75:c5:d8:5a:10:97:fb:0e:4b:d5:89:65:c1:
77:f5:0c:ef:67:18:be:22:95:58:f3:fe:01:f2:85:
e0:00:a8:b9:7b:c8:7d:29:39:98:e7:31:e3:ed:6d:
9e:9b:8a:a0:68:18:0a:c0:ee:0a:90:ea:41:fd:f5:
d3:ef:fd:ca:9a:ac:78:27:3a:05:04:32:b5:6c:44:
11:56:1a:5f:b9:0c:eb:c0:5c:c7:e3:d2:b8:8b:f3:
de:bb:f7:dd:58:ca:a2:e5:07:1b:99:90:f2:d5:5a:
f2:83:ff:3e:ea:c2:0a:03:5d:3f:d6:95:de:8a:7f:
ef:a6:ff:6a:3a:59:da:1d:86:9e:00:8b:a7:25:e9:
04:c1:99:25:66:33:01:19:68:28:a6:c5:8e:23:61:
24:8b:61:54:89:0e:0c:a0:f8:f8:c1:61:25:b2:c3:
22:60:69:2f:fb:17:a9:9b:47:79:ba:8e:6c:09:35:
39:b4:aa:40:44:f1:37:3f:2e:18:51:3e:0a:72:06:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:9D:AC:18:84:93:1D:D3:4B:10:BD:1B:F4:39:9F:C4:6D:87:7B
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:63:de:ae:bc:ba:ba:63:27:63:fc:2e:24:7d:19:ea:f9:
8d:b7:37:62:42:16:13:12:bf:6f:c6:0e:4b:ef:ea:27:41:07:
64:b1:95:1c:e5:d3:29:96:d7:91:01:64:89:3a:6c:e3:15:d7:
80:1e:c8:e0:bb:c8:5d:b9:82:ae:2c:59:46:04:14:62:5a:69:
15:13:37:f4:68:33:ff:66:25:05:17:a9:60:9e:d8:27:8d:ac:
7f:bd:79:cc:a1:78:85:6d:c2:3e:13:af:67:05:7b:70:40:66:
9a:fc:d3:d2:19:77:d5:3c:4c:d6:5a:24:7e:49:3e:18:da:2b:
62:5f:1c:07:dd:fe:5d:54:0d:c2:8a:57:f3:f7:e3:88:f5:c9:
b9:44:8c:6a:c6:3b:3a:fc:13:03:a0:ee:2a:c4:ff:c7:4b:1c:
da:03:55:e2:44:c9:70:3a:18:cc:0b:87:2b:5d:73:1c:b0:41:
7a:c3:a1:13:93:98:32:ad:66:5b:32:2f:ad:0b:3d:cd:6d:7b:
13:a3:42:bf:1e:2c:82:a5:8f:3e:47:1a:af:02:b3:77:4d:1e:
15:0f:19:23:35:96:76:48:66:da:2f:8d:18:1e:46:f9:fd:8f:
62:1b:52:d0:76:7e:3d:a4:82:54:bb:89:89:10:03:ab:66:13:
be:a7:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client