Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: M/R2tUDW5U3cXS01BqrYqC5B5k6me+YW3V9fbff0CO4=
Subject key identifier: 29:DA:4F:1A:85:38:CA:DA:06:A8:99:58:9D:41:0C:7D:8A:17:D5:B3
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019D397789714B400CC466CC313717CFD72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 1865
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: GMX4zOyKc8ZzM+4hWob7QAaEGf8PkT/Ucirx8J99w7g=)
2: uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa (hash: Rgrpa9BFgykqaCEIzp1M6C8GB9BsKEtf6xgAPY/or1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:89:71:4b:40:0c:c4:66:cc:31:37:17:cf:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=29da4f1a8538cada06a899589d410c7d8a17d5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a2:e0:5c:69:05:ea:3f:7f:cc:85:fc:94:04:
1d:36:29:23:d9:c3:64:dc:26:10:b7:b2:80:f3:58:
4f:b7:3d:01:a3:21:a7:d8:cb:ef:90:1d:b5:00:ae:
aa:1b:66:bf:f7:b7:2a:8d:02:ea:1b:a6:ec:82:fd:
f1:da:12:0e:e8:a2:b1:d1:d1:68:9a:5f:8e:cb:5a:
ea:f0:84:d4:e8:03:00:d4:46:eb:a6:b9:ce:cd:6b:
b8:31:26:5e:78:7b:52:9e:e0:02:91:8d:b3:de:2f:
d4:37:96:ec:91:d2:78:53:03:5d:11:4f:74:56:63:
72:99:c9:67:3e:dc:a5:cd:72:1e:a7:e9:51:39:04:
5e:50:af:15:a4:98:22:99:af:7a:f2:79:9e:1e:48:
16:da:c5:0d:41:e5:0e:04:28:17:9f:1a:54:fa:f8:
b0:4c:57:09:87:be:a6:11:23:83:51:5a:bc:cc:10:
d4:16:50:77:7b:ee:90:fd:21:85:7b:37:62:e4:d8:
a0:57:2b:b4:9a:48:e5:37:49:c7:f7:0d:91:7f:87:
e0:4f:0b:24:81:af:99:f3:0a:d0:5f:49:36:4b:60:
06:d0:c8:b2:63:66:0e:b0:e2:1a:75:9b:cd:d3:ed:
ee:07:e8:77:e4:bc:b2:38:9e:c7:ac:b5:90:a2:86:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:4F:1A:85:38:CA:DA:06:A8:99:58:9D:41:0C:7D:8A:17:D5:B3
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:63:7f:a5:2c:d4:60:46:c8:24:f4:ef:34:33:95:07:3f:
e8:aa:9f:88:74:0d:da:95:ec:13:3c:64:7b:43:b1:61:dc:aa:
48:e9:0e:63:a5:e1:89:95:76:67:21:6f:8f:4f:25:85:43:fd:
17:31:34:b2:8f:f3:53:34:ee:20:b6:d7:28:46:44:a0:2f:e8:
1c:03:87:5b:5a:77:a2:b5:a6:0a:37:20:96:6c:5c:09:37:7d:
a3:7d:93:22:bc:5d:fc:83:f7:88:05:08:26:1f:1e:ea:3c:eb:
4c:ca:9b:68:7c:53:55:d8:a5:cd:cb:eb:c9:6e:bc:b6:73:f2:
c1:f0:a1:08:7e:37:05:c9:99:98:93:f6:25:8a:31:54:11:73:
f3:c5:e9:03:88:35:9d:93:d7:64:12:af:a7:8e:53:2a:cd:b3:
0a:eb:58:65:79:59:67:15:f2:7d:c1:0e:48:c9:cb:46:ce:5f:
41:20:a2:b5:44:b6:ae:c9:bb:2a:79:34:62:ec:ec:ad:4a:61:
20:bc:91:82:eb:a6:91:f3:30:f5:24:a0:31:01:76:14:0a:10:
03:7d:23:95:98:af:19:ed:20:e9:c3:a5:14:43:86:73:d4:e3:
2b:df:60:ac:bc:8c:61:e7:76:b9:bd:bf:11:99:5f:f1:8b:ea:
5c:7c:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:49 2026 by rpki-client