Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: XqjWmmA+1z4SREBXWvFVh9Xc69S0Aq8CWtrHYg60rbw=
Subject key identifier: 69:C6:9F:10:C2:76:CA:D0:DA:ED:CC:E7:98:73:F5:A4:BF:6F:AD:02
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019D39AE935367E1B94D868B883C6D58D8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 055D
Signing time: Sun 29 Mar 2026 13:00:35 +0000
Manifest this update: Sun 29 Mar 2026 13:00:35 +0000
Manifest next update: Mon 30 Mar 2026 13:00:35 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: /709ZF2FmdBLYDELHyDk4V5/BkdeUkXdfExGi5LpXEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:93:53:67:e1:b9:4d:86:8b:88:3c:6d:58:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Mar 29 13:00:35 2026 GMT
Not After : Mar 30 13:00:35 2026 GMT
Subject: CN=69c69f10c276cad0daedcce79873f5a4bf6fad02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:34:0b:21:d5:49:8b:1d:22:f9:7f:02:48:
db:3e:f5:54:44:fd:e6:e9:d6:22:f0:04:9f:ff:3f:
2e:35:95:74:86:84:5f:bd:ec:e8:01:70:09:28:e8:
1e:43:df:51:b6:f3:8a:5d:9c:3c:97:5a:91:35:0a:
b2:be:e7:13:4f:89:6f:0a:31:10:4c:25:65:6e:e9:
53:7d:14:5c:9d:34:b3:86:c4:e8:b3:06:2e:c1:1a:
cf:79:c8:b7:96:bf:58:21:49:d3:4b:af:65:57:6f:
56:a7:bf:24:34:f7:b1:38:49:2c:ed:d3:5b:1b:af:
aa:61:f7:9c:74:86:f5:fa:76:55:33:f7:f4:b1:31:
40:e6:7f:cb:a7:55:4b:ec:4f:c0:ba:7d:01:14:0b:
a8:cf:56:50:79:d6:6a:35:78:db:92:9a:1a:51:5d:
ad:80:13:d9:82:93:07:1e:74:ae:df:e0:72:32:4e:
10:b6:16:4a:50:6e:23:be:b3:b4:2f:ef:68:4d:66:
f3:cc:c2:20:80:bb:38:11:d5:08:2f:4a:c3:d8:5f:
60:99:c2:d7:bf:77:f5:6d:8d:dc:64:87:ff:41:09:
10:ab:f4:c5:9a:f5:5f:b4:83:2b:4a:76:be:9a:25:
67:72:3a:94:de:4c:d7:eb:3e:08:34:fb:da:f1:9e:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:9F:10:C2:76:CA:D0:DA:ED:CC:E7:98:73:F5:A4:BF:6F:AD:02
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7f:68:3a:fd:44:12:18:b1:8c:12:66:23:64:52:aa:07:31:
0f:bb:00:e0:6b:a8:4c:1e:4c:9a:e2:01:d1:16:49:3e:e7:7c:
57:ac:a6:f2:ea:97:fc:ac:63:a6:34:d7:19:51:ae:28:d7:96:
92:cb:7d:cc:c7:52:b1:c7:eb:af:b9:e5:b3:71:d2:cf:16:7d:
3a:54:13:3e:20:96:24:a1:f1:76:e3:49:ac:3f:15:f6:d1:96:
78:5f:fd:32:df:40:d8:5d:2a:a2:4e:31:fc:90:c4:85:d8:34:
b5:94:19:e8:1c:56:be:2a:00:12:1b:77:bd:da:d4:11:9d:7d:
95:41:29:c6:88:ab:ea:97:9a:0a:be:8a:f5:f5:81:96:eb:9a:
e3:39:91:a3:31:70:fd:ac:4e:70:69:4f:9a:7c:a2:47:44:01:
98:e8:6b:97:71:01:2c:d2:d0:d7:bc:98:a3:c1:f7:48:4e:7a:
90:4b:43:81:a8:85:1f:95:ef:83:a5:76:07:09:47:ae:99:f4:
b7:92:fa:37:22:02:db:ca:49:20:81:72:2b:df:c0:43:81:48:
ae:2b:14:53:00:be:d9:89:1c:4e:49:4e:ff:1c:1a:5a:8c:e1:
f5:5e:b2:18:d4:90:68:8f:92:0f:f8:a8:43:de:f1:e9:1a:86:
eb:80:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:18 2026 by rpki-client