Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: 7xH7V/PhFeVoauvB7G0Zu2tJncT0v2nl7SRlnndeAio=
Subject key identifier: 6C:0F:CA:9F:76:7B:96:C0:06:E1:9D:A2:1B:CC:E3:22:DC:EF:12:DF
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019D382E071EA460DDDE01A5AC1817628188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: SU9PYRAM665DV-tMHEvPHcVEgsI.roa (hash: jeXeTXBC5h2fT2fI75NdT9H4uSbQgepZnNzAOw/Te8I=)
2: rXw-nLWuLOJA5VYfraArb8rhBxg.roa (hash: aX5SC+qo7NJeSmp0QxRgYljkusSGS9FEUNCHyn6SxQM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: WpOA6ZJjhvjvrv8d3dUHMlq+Bm4NhAfyBL63EyAgvSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:07:1e:a4:60:dd:de:01:a5:ac:18:17:62:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=6c0fca9f767b96c006e19da21bcce322dcef12df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:50:65:ea:75:19:7d:63:1a:11:5e:50:a2:
93:ab:c7:af:68:95:ae:11:6b:c5:34:cc:1b:9e:dc:
12:0f:95:a9:ec:35:f0:3f:f3:e1:7a:57:97:d8:06:
77:19:92:00:d3:f3:bf:8f:15:a0:d9:05:2c:47:2c:
09:40:e1:f0:14:9c:73:cb:ac:62:2a:b8:b7:ce:55:
a2:27:da:39:b2:22:c4:53:df:26:f4:65:21:69:9a:
b6:9e:c9:cd:2f:15:4d:0c:7a:15:19:6f:82:f4:37:
62:0c:a0:66:31:28:e1:56:4a:06:a0:74:3a:f7:4c:
91:15:04:5a:73:41:f4:72:4f:98:4a:fa:5f:a9:49:
23:64:23:e3:ed:8f:51:75:46:c1:f8:4e:fd:99:ca:
33:2b:ee:cb:7a:3e:ba:5d:7f:52:4f:57:9e:97:5d:
22:d3:02:c3:f4:c7:ac:76:8a:e4:8a:25:f1:32:c7:
d2:2f:ee:b7:59:1b:f5:5c:a5:98:f0:e0:13:08:0d:
40:e9:df:af:4c:98:4d:3d:b7:00:59:21:00:c6:e6:
fc:f4:fa:9b:45:38:ac:bd:93:2e:e7:a1:b9:ab:f9:
a8:f7:bf:37:72:9d:6e:25:8f:f8:7a:97:2e:a4:be:
43:78:03:b4:21:a8:66:81:cd:c4:f3:9c:e5:f7:43:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0F:CA:9F:76:7B:96:C0:06:E1:9D:A2:1B:CC:E3:22:DC:EF:12:DF
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0d:4b:05:91:c6:0a:5e:d1:91:24:f9:67:5c:2e:a4:24:c5:
f6:3e:b1:ac:2e:a8:d7:c3:5a:d2:67:81:40:46:41:cc:5f:a1:
cb:e2:ed:0b:a9:bf:3b:3f:7d:15:06:e7:e8:79:c0:e6:7d:78:
49:b8:1c:7d:ef:1b:8f:76:24:12:9d:77:33:68:4d:9a:85:31:
42:21:f4:b6:82:07:da:f2:04:08:7d:07:5e:c0:02:13:22:62:
b7:57:c5:62:dd:84:20:c8:5d:3d:69:9e:8c:5c:5b:f1:fc:d3:
79:05:8d:fc:7e:16:06:e9:e1:03:ae:8d:c7:e1:34:c1:c4:7a:
66:6d:cc:b4:41:2d:b6:fd:36:83:5d:42:59:fb:9d:f7:e4:b7:
ec:3c:12:c9:54:0d:fd:d3:be:57:b1:28:40:aa:70:c4:38:4f:
53:b3:ae:c6:b0:f4:c7:dc:76:1b:8d:81:a0:ff:63:df:31:29:
17:1f:82:df:42:8b:75:99:94:ed:34:b0:ab:05:a5:de:b2:e0:
1c:90:a7:8a:b1:06:a6:79:f2:8d:e4:96:cb:ba:8b:5e:40:fb:
53:88:90:b6:9b:b4:b3:ca:ce:54:d2:99:2a:42:4c:8d:62:07:
11:28:6b:de:9a:b8:58:94:93:a4:6a:3e:4a:a7:d4:da:7c:2f:
1c:d9:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:16 2026 by rpki-client