Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: WFPQr/KRIJRcjBg+9qULMz1io3xsyMWg+1jowdlF4e4=
Subject key identifier: 2E:14:E1:EB:DB:9C:48:5C:44:81:D5:11:7E:03:B8:C5:B2:45:97:97
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 019D38664A26D7D2A6E7BA52D3658269A684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 0ACD
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: E--NdyO753FcMlbJimLkhuZlt1Y.roa (hash: 6iRAUFzJTZeczBRYhd57dFCMl+xN+qP3SGXmpRERH8Y=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: CMUprh/qcGTEQIZief4tbDGlUBdWh0cIlqQDXc9FFEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4a:26:d7:d2:a6:e7:ba:52:d3:65:82:69:a6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=2e14e1ebdb9c485c4481d5117e03b8c5b2459797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:8d:93:b6:8f:84:dc:88:6f:ac:5a:af:08:
f2:e9:52:ae:6b:34:8a:4d:bf:72:fc:8c:dd:b4:7a:
74:11:b3:7e:27:e2:77:13:67:5e:2f:10:73:65:9c:
8a:bb:5b:98:28:ce:8f:89:9a:ca:43:b5:ab:46:ac:
67:e3:c1:62:f6:62:66:dc:e2:2c:fc:a3:1d:d7:57:
db:b5:07:dd:58:49:21:a0:12:ab:7a:8f:d9:94:67:
b2:69:18:e5:c9:da:a4:07:80:75:6d:3b:f4:b9:40:
02:c7:49:42:0e:f3:1b:a8:56:24:72:f9:00:f3:34:
07:08:55:99:c1:9d:53:64:1a:20:6f:48:89:a7:aa:
e7:41:41:8b:86:c3:a8:82:90:7f:4c:d2:06:0b:8d:
79:a8:54:c0:fa:5d:21:0c:eb:91:89:94:d3:98:da:
5b:86:cf:4a:41:aa:e9:73:e4:55:95:9a:8b:40:07:
a9:65:f6:83:9f:ff:a3:25:29:b6:05:f8:4a:85:5f:
d1:b7:9e:4e:1b:0c:6f:e2:17:63:50:3f:08:90:68:
10:72:15:ea:8e:d4:37:4d:8b:e3:88:e3:ae:f1:0a:
cd:df:c3:45:53:42:04:98:02:2f:04:1f:2c:ff:ea:
e6:2d:5f:2a:eb:cc:49:eb:24:72:d0:58:e9:5c:13:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:E1:EB:DB:9C:48:5C:44:81:D5:11:7E:03:B8:C5:B2:45:97:97
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:38:31:5a:14:9c:bf:7e:d1:58:69:c3:fd:7a:d0:65:9d:
ce:47:66:bc:c3:72:bf:82:b1:df:5d:83:37:b7:ab:92:75:07:
b8:90:53:0b:25:94:9e:f6:10:11:86:de:5e:39:29:8d:1d:e7:
d4:27:b9:d3:c4:c6:db:6b:ef:26:13:46:46:13:7b:57:36:0c:
df:3c:fc:70:ca:34:49:94:01:e6:7c:21:56:1c:bc:2a:8d:a0:
a6:a8:52:33:b7:3f:fd:bc:51:74:52:19:f9:ae:bb:95:6d:ae:
34:79:ed:e5:5d:0c:f7:2b:47:25:a6:31:2e:2a:07:86:33:f6:
9b:af:c2:14:1b:94:bd:88:da:12:e7:16:ed:2b:8b:3d:b0:33:
2e:89:62:39:e1:2e:d3:92:db:cc:93:0a:22:15:1c:e4:ab:bc:
24:9e:b1:ff:91:54:d2:c0:32:6b:4a:cd:20:8e:a6:87:18:c8:
e1:d5:33:86:4c:27:9e:83:e8:ab:a9:c4:b4:02:5f:a0:9b:58:
ca:45:7d:31:33:f7:66:5c:c2:a4:ce:60:2e:68:93:df:cc:e7:
b9:4f:b3:0d:79:5f:8a:10:4c:d4:1d:27:0b:4f:21:d9:8f:1c:
94:5c:e6:12:aa:ce:65:2a:8a:6f:c7:88:7f:fb:65:2f:14:8d:
ac:35:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:31 2026 by rpki-client