Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: i67RCoPlHvLKbomWy88BZTd9ffNmIdnRDqctpozFRC4=
Subject key identifier: E8:4D:98:55:59:0F:C9:D5:E6:22:8A:9B:80:66:7A:65:91:6E:B5:BE
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 019D3A1D1C04517A2FC40652DFC40B38BB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:01:19 +0000
Manifest this update: Sun 29 Mar 2026 15:01:19 +0000
Manifest next update: Mon 30 Mar 2026 15:01:19 +0000
Files and hashes: 1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: hjl4JQ++fdeyJ2JRA3z9NdzaUwfkzrYYEjkzt5kcr/k=)
3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:1c:04:51:7a:2f:c4:06:52:df:c4:0b:38:bb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Mar 29 15:01:19 2026 GMT
Not After : Mar 30 15:01:19 2026 GMT
Subject: CN=e84d9855590fc9d5e6228a9b80667a65916eb5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:15:1c:27:a4:bb:39:08:f4:f9:db:29:47:
7b:5a:f5:2c:4e:37:4b:50:f9:04:31:26:cc:14:91:
14:d2:00:b8:87:79:d2:48:48:09:fb:f1:ab:7c:3f:
47:5a:a2:d0:f3:b0:09:d8:bd:a4:eb:d8:d8:a0:7f:
f2:20:2b:7e:a4:4d:42:c2:58:fa:80:90:08:2d:d6:
b3:07:c6:90:32:e2:ef:d6:74:63:3e:bb:7f:fd:90:
0a:ed:02:a3:07:a5:03:e9:c0:d4:f7:be:e9:3f:34:
e7:b1:3e:04:82:d5:4b:a0:2a:7f:a2:c3:30:db:e1:
d0:6c:8f:a3:8b:8a:7d:3b:eb:13:94:07:9e:15:6c:
26:3b:2f:d2:06:88:43:fa:62:f5:7f:fb:84:d3:ee:
58:fd:71:ad:06:82:ae:07:e6:ad:47:96:c7:a6:eb:
b5:7e:84:73:77:1c:17:56:72:04:8f:c7:3b:12:74:
a2:d0:1a:cf:27:12:5c:c0:ca:bf:39:5c:a9:1d:ee:
71:ec:25:49:16:34:2b:c9:bc:f6:ba:33:00:c4:ad:
4e:ed:65:f6:13:e9:32:f1:88:32:de:39:2b:13:e6:
01:c4:7f:de:61:98:28:30:3f:23:cd:6a:be:70:87:
8e:a3:da:9f:b3:91:bf:5c:43:d8:18:a5:32:b2:95:
7c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:98:55:59:0F:C9:D5:E6:22:8A:9B:80:66:7A:65:91:6E:B5:BE
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:21:b3:ba:e9:76:09:08:f5:17:b9:ae:d3:0e:15:69:e0:
0d:5c:14:9d:bb:34:e9:cb:35:dc:68:3c:e0:00:0b:e8:eb:20:
02:0c:ff:44:29:1f:c0:c7:61:0e:3d:15:47:b1:87:8c:0a:a3:
9e:2c:41:6f:83:14:b4:da:36:e9:f1:e1:b1:d5:cb:74:b8:41:
f0:0a:c5:e2:f0:9d:f2:b1:2b:16:e6:88:16:57:d8:e0:cb:c7:
14:97:78:b5:c3:fc:b1:d9:5f:59:3b:bf:93:69:00:8d:0f:c7:
5e:db:03:5c:24:38:e0:2c:58:9d:21:13:1c:83:4b:cc:f2:e4:
bb:7f:84:72:f6:6c:65:41:95:d5:e6:51:49:bb:67:0b:ec:19:
15:ed:d3:f5:3d:c0:e2:6a:b9:c3:26:30:71:13:76:82:9e:c7:
3a:b8:ad:b9:7d:4c:b3:84:37:0d:7d:90:76:e6:4e:11:f4:a8:
d0:aa:c2:e3:8b:fd:47:b3:f2:a4:b9:f1:3a:3e:6a:1e:17:24:
12:44:0f:24:47:aa:5b:b6:7f:9d:de:63:a5:7d:e8:74:89:1c:
03:94:fe:54:a1:b7:30:18:6e:25:27:9a:d1:56:78:66:25:e2:
27:69:65:c5:ee:9a:40:49:df:86:6a:96:0a:89:74:23:ce:9e:
ac:8c:93:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:16 2026 by rpki-client