Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: FQ97t0+nMMoaPEClDRKvLBOW6Z5AR8BA9QgVJrg4Ufg=
Subject key identifier: 0F:20:0B:AB:F6:3E:42:63:69:E7:C1:17:A4:73:B2:F3:87:70:CE:AE
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 019D38666B8C115D89C7A7E351B6DF8A1D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 15D7
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: 6feLhGZNxoXnjxOWltLLEWo3w_w.roa (hash: WsluKnulotDxPx8j4niJ1mddplF8Z7pdwFLIc7RHFSg=)
2: jIkBln67tBEqFrddInS7FiZiLBA.roa (hash: XeN/N3RSEi8zGMX3oXezfBvkd+PC1ufTYKGx8KmK4ps=)
3: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: 0te/qWb+Gdxsyb8gsrw/iw8goZ11dUxIJLVIqe52m+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6b:8c:11:5d:89:c7:a7:e3:51:b6:df:8a:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=0f200babf63e426369e7c117a473b2f38770ceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:8b:06:40:b3:bc:b7:3c:4b:80:13:32:46:
a0:78:11:ab:97:60:b9:7c:e4:1f:7e:05:d8:f6:c0:
f5:44:78:ac:64:e5:e5:f9:51:19:a0:cc:ba:cd:3c:
ce:90:f3:65:f7:77:0c:89:87:96:67:fc:92:ae:7c:
70:28:58:18:f2:23:d4:3e:0c:cb:78:71:46:c0:44:
bb:7d:5a:2f:11:68:3f:34:25:fa:6c:e2:b5:c0:98:
d5:a5:81:c7:db:8a:7c:0e:21:55:e9:f8:9c:e2:77:
f7:88:a5:60:ca:e4:d5:d1:00:99:d1:4d:a8:06:a9:
46:3d:1b:0b:41:4c:d6:de:e8:0a:8c:82:b0:93:9f:
20:d3:c1:35:01:50:5c:f3:33:c8:ff:0c:1e:64:db:
7c:42:2e:f3:38:42:3a:ed:60:0b:09:86:7d:20:f5:
4b:99:3c:0d:cf:b5:21:9b:38:55:03:70:c9:e1:b0:
18:19:11:f8:71:f6:1d:34:29:56:68:58:ae:60:79:
57:4d:49:f9:98:5d:8b:de:7c:48:90:a7:dc:4c:1e:
65:27:74:51:91:1d:e6:a9:aa:0e:92:b6:e8:1e:93:
a2:ff:76:f4:90:5d:f8:31:c8:cd:ae:25:e7:6e:be:
80:4a:a2:9d:81:2c:7d:cd:d6:02:df:9e:e9:99:02:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:0B:AB:F6:3E:42:63:69:E7:C1:17:A4:73:B2:F3:87:70:CE:AE
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a7:5f:da:a9:a0:05:3b:14:05:3f:90:fe:f5:d4:13:4a:f0:
69:fe:e9:0e:00:1c:84:6d:eb:25:cf:90:df:74:4d:15:f3:d1:
b6:df:7e:e2:49:34:52:79:9e:69:96:a4:84:2c:e9:9a:b3:e6:
1a:77:f0:30:16:e9:93:c0:1d:31:9f:cd:3e:d4:3f:97:7a:46:
a2:f4:be:f8:84:2b:e9:3c:38:70:85:20:c8:e8:81:ae:2d:b9:
75:40:ca:f0:df:a4:f5:a1:38:5e:9d:5a:3c:84:a4:1d:5c:e2:
fd:47:9c:b6:f0:6c:9a:cb:79:3c:fb:cf:9f:43:61:a5:e8:3c:
a9:61:34:48:69:5d:ab:13:6f:13:95:d6:f6:32:63:eb:f6:06:
77:c0:9f:72:41:47:b4:9c:e1:b7:2c:80:19:5c:b1:ab:c4:3b:
4f:8a:6b:fa:2a:3b:02:2c:ee:03:86:b4:61:1d:9f:bc:50:31:
1e:13:81:1e:65:be:c0:11:c8:f0:b2:63:0b:6b:34:52:ff:65:
37:3c:f7:00:54:34:dc:4b:d5:74:0a:ed:a0:64:d8:08:1a:f7:
c7:9c:6e:b1:7e:19:41:3b:3c:aa:c1:39:b7:c1:8c:19:4b:28:
69:f8:a1:3d:f9:ce:e3:ee:1a:af:68:ee:b4:8f:ac:40:28:cb:
98:a0:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:38 2026 by rpki-client