Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: uGGvNscnffNkX/QZcTQllK6sQ+lT7LCKCD6C72PLtlE=
Subject key identifier: CD:93:DC:E5:87:20:AA:1E:49:B9:12:B7:84:FB:0A:DC:C4:1A:62:06
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019D37C0EBFBB89E52C797A54E75F7685882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 14AD
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: WDmiaYYKPto1pys/zgDi/i2REIpEQoCWRcOq4gqFXw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:eb:fb:b8:9e:52:c7:97:a5:4e:75:f7:68:58:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=cd93dce58720aa1e49b912b784fb0adcc41a6206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:35:ff:bf:af:9a:8b:9a:2a:77:25:78:8e:
08:63:cd:ba:a4:70:69:be:3b:c6:5b:4b:6e:7e:ea:
63:61:2e:ab:ef:4d:4a:57:60:1f:b3:83:22:bd:b0:
f4:61:c0:0f:84:78:98:ac:29:80:b0:ec:5c:08:a3:
ac:bf:bd:a7:9c:4a:a3:ba:67:f3:68:0a:46:b8:86:
84:2a:0a:01:f3:97:f3:6a:e9:8d:80:bd:36:ad:0b:
bc:ec:81:4f:b1:6e:af:e7:82:8d:52:df:a3:4d:de:
28:66:4b:ac:37:1a:22:97:4b:e9:a0:91:cf:39:a3:
35:cf:d8:a0:da:29:e0:58:7d:e3:22:b7:d1:ff:48:
70:f6:52:1d:fa:dd:c6:ca:69:a3:db:6a:31:a1:24:
29:09:10:22:7e:56:3d:93:e5:82:6e:ec:29:5e:50:
fe:81:58:33:16:34:a2:fd:8c:6e:e3:76:49:f0:be:
ac:2a:1a:fa:d9:95:d3:3c:d8:47:84:b4:aa:4f:ee:
27:0e:78:03:f7:33:c4:eb:a3:64:ef:ae:36:24:d4:
1c:80:25:4d:5d:87:81:4d:a6:0a:ee:4f:62:92:43:
60:ec:f6:78:98:c8:9a:ec:58:45:27:c7:88:a6:62:
0f:56:c4:74:dd:ab:5d:3b:22:1c:a4:e7:df:42:08:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:DC:E5:87:20:AA:1E:49:B9:12:B7:84:FB:0A:DC:C4:1A:62:06
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:66:14:14:7b:b3:bb:ad:56:91:a9:cb:70:7e:ae:df:a3:47:
ef:fe:cb:b6:96:4f:27:08:b7:35:25:13:b7:9d:6b:20:d3:e7:
1e:3d:49:ff:18:24:a3:6e:8b:63:ce:fc:d4:59:44:37:e1:41:
3f:8e:d2:d4:72:8f:78:82:fe:f1:f3:e8:d3:28:9f:e1:e3:6a:
bd:1c:1a:96:fd:19:87:41:b3:52:18:4c:31:2f:4d:a0:36:98:
dd:18:33:9b:d6:ef:c0:70:71:e3:7a:c0:d6:df:15:42:d7:68:
5e:a8:29:c6:1e:dc:9c:fd:12:56:53:fb:46:fc:1b:28:77:cc:
da:3f:33:32:a0:a1:5f:2b:5c:0b:35:0c:28:32:44:d9:25:7d:
f6:be:30:99:12:b2:ef:ec:06:9e:56:5e:a7:ec:04:3c:94:43:
dc:16:c8:e7:04:9d:d1:d1:85:d6:46:f1:4a:fb:33:e0:fc:2d:
25:de:c2:dd:80:33:dc:4c:2e:62:b0:70:a7:a0:0e:23:4d:74:
47:55:7c:3b:bb:8e:5e:49:66:f3:24:fa:ba:57:e6:f7:6d:35:
11:8b:d7:eb:e1:4b:d9:c2:50:72:9a:ea:d4:df:82:ca:d8:f1:
26:41:10:5a:ef:e1:17:d9:09:1f:cf:bf:e9:db:8c:9c:80:34:
d1:fe:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:07 2026 by rpki-client