Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: HyxS7ZmOd25hj488u4Aa9Q8pF9w6Zdu5STCwuhtZfa0=
Subject key identifier: 03:7C:5A:F0:22:75:E9:18:92:72:64:F0:77:D8:C5:D0:3A:AC:94:E7
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019D37C05D23CA91CE512C897D91CE10AC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0C95
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: c6jmYRtVwlcH6CfZwahdti0uORDnlQX4AM5KEUhV1Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5d:23:ca:91:ce:51:2c:89:7d:91:ce:10:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=037c5af02275e918927264f077d8c5d03aac94e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:44:77:8d:93:7b:1c:95:f2:e2:a4:18:23:
60:ce:03:2d:2a:76:9b:66:c0:fa:41:c3:e2:b0:c7:
35:4e:66:6e:2b:74:6c:ff:90:28:a9:54:2b:3b:44:
a9:d8:20:9a:a1:41:94:b8:6c:38:c0:ae:7b:5d:36:
2f:f9:ed:b8:b7:80:ec:fb:a8:1e:21:2b:21:64:09:
be:ff:40:06:bb:2e:ae:77:8e:a3:3c:9c:8a:78:57:
ef:c3:0e:c2:4d:80:bb:2a:2e:ee:4a:25:d9:15:ac:
a8:5b:d6:ac:f9:10:b8:49:48:e5:cc:58:bc:bc:1f:
fd:43:80:b5:83:4e:da:9a:12:0a:bf:61:05:60:46:
fa:f0:c3:91:88:b7:9b:3d:97:25:05:3c:05:9f:a3:
b4:62:c5:58:2f:f7:98:ef:78:be:75:27:95:d1:2c:
92:a8:f8:ef:bc:7b:7f:4f:d8:9a:28:f7:ae:96:ed:
11:92:14:c8:d5:0f:52:80:61:e9:42:7a:24:48:a5:
16:00:39:dd:29:8a:53:98:7f:80:b6:0c:96:81:e7:
6e:75:a3:73:81:36:01:85:d5:dc:44:74:a7:a9:d5:
80:31:1e:8f:ea:ce:97:70:20:62:1b:6a:89:16:58:
3d:c4:e7:20:3b:85:66:e8:f2:f1:a5:a2:11:0b:29:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:5A:F0:22:75:E9:18:92:72:64:F0:77:D8:C5:D0:3A:AC:94:E7
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:15:34:e2:7f:b3:a3:5e:aa:e6:ca:0e:2f:03:cd:d4:e6:
62:87:6a:36:9c:78:72:f3:5e:08:05:35:35:f3:ad:31:e3:70:
94:91:1e:f7:74:ff:6b:74:12:89:ce:13:39:22:57:f9:ac:d0:
fd:b8:78:74:15:81:e6:0a:dc:6b:9b:de:09:a9:12:ff:78:81:
c2:59:19:2f:ec:96:5f:a5:62:b3:23:a8:d6:43:19:59:4b:d0:
ad:9a:12:3a:68:75:ca:e4:06:c2:bd:ff:63:33:fc:7e:be:7f:
3e:75:c2:da:77:94:8b:c3:b2:d2:80:3a:b2:c0:34:cd:3e:ab:
87:08:81:28:06:66:5b:eb:86:4c:cd:4f:37:df:9b:21:4c:67:
0b:3b:df:68:2c:ab:4e:12:8b:9b:9a:c0:19:7e:c2:3c:05:ba:
98:b8:7f:9e:0b:9d:65:7e:0e:e0:64:ed:28:3a:e9:91:a7:c9:
f1:5c:e0:dd:cb:81:4d:78:70:f7:3c:91:9a:e2:5e:47:a0:64:
51:2a:ed:45:97:81:55:f0:b4:b8:34:c7:39:d4:b6:1d:dd:6d:
25:60:02:50:1e:9c:7f:af:89:53:49:4d:b7:48:c5:40:a5:c6:
8c:84:9d:da:38:d4:c4:9a:58:c3:d5:59:68:9e:cb:49:ce:c5:
11:3e:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:51 2026 by rpki-client