Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: 5ilB+uKqUeTk3xlgyV5b+7tTIVHJGybuuqwhzqMzzlU=
Subject key identifier: 02:DA:11:58:CF:B3:84:DA:11:72:5E:EF:40:AB:18:39:C3:07:F6:D8
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 019D3940DC09709EA34D9F32B3510BB0BB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 0B45
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (hash: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: VZI//4tG/E9/KkltkXLSpJp9HAn8oFw2nGHKRkgahBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dc:09:70:9e:a3:4d:9f:32:b3:51:0b:b0:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=02da1158cfb384da11725eef40ab1839c307f6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:36:89:8d:77:ab:96:6a:ae:9b:97:d9:7a:
1c:9f:35:53:52:ab:4b:c8:98:b3:a2:da:ce:15:16:
33:60:fd:8b:b7:66:ab:ad:55:a2:53:2d:4f:ba:b0:
ca:72:01:72:64:59:46:40:2b:1e:df:41:a1:c5:67:
a0:ba:57:87:48:12:57:01:bd:c0:b1:f3:9c:f6:08:
11:ec:d3:08:0f:e1:69:73:e7:65:42:c1:0f:72:d1:
0f:4b:18:58:51:cf:e7:a1:53:02:36:3c:2e:0d:2b:
ca:c6:99:eb:ab:75:e4:d6:7b:e3:21:61:18:42:19:
a1:39:b0:e6:d0:8f:63:91:7b:0e:60:be:68:65:85:
73:51:20:5c:a4:05:e7:99:9e:32:f0:9e:58:55:bc:
23:42:d3:50:06:a9:a5:f4:f0:0d:e4:ce:d0:57:8a:
ba:7d:24:15:d8:75:06:aa:03:0a:3a:21:ff:bc:94:
88:1a:0e:a5:4a:0c:ac:8c:7c:fc:11:28:1a:05:ed:
e9:7f:ae:32:2a:59:16:b8:60:c3:fc:e6:80:72:f1:
49:8c:b8:76:18:21:d5:56:7f:95:a9:a3:3e:4d:5a:
6d:0b:cf:d0:75:28:8a:77:e6:19:f3:d6:28:ae:34:
6a:20:60:1d:98:3f:30:72:4e:98:f2:9c:8c:03:84:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:11:58:CF:B3:84:DA:11:72:5E:EF:40:AB:18:39:C3:07:F6:D8
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d4:58:95:4f:0b:db:83:df:7d:26:94:41:15:33:ef:7f:92:
92:43:68:8e:56:6a:8d:25:37:5a:13:ae:d5:52:e4:2f:73:f9:
9d:fe:eb:6f:2d:c7:6c:21:78:8b:a4:9e:ad:83:6a:d5:34:4b:
ee:3f:ab:0a:40:ef:79:dc:d0:f0:fa:94:b6:c1:46:dd:60:07:
9c:66:47:d2:f0:21:bc:fe:41:14:87:13:5b:61:bc:7e:4a:e0:
4a:c7:d0:03:82:7d:99:8b:d8:5d:79:db:34:6b:f5:25:a5:2a:
de:ad:7c:8d:58:89:e7:2d:03:3b:8a:d5:be:d4:1f:68:06:b7:
8d:9b:bf:a4:04:b0:be:6d:27:9c:fb:64:75:14:36:b0:8e:31:
8d:a3:fb:2d:7b:4d:c4:ac:2a:b6:70:d8:7b:33:6a:ec:da:a9:
bc:30:8b:54:e9:8f:91:c8:8f:cb:c1:3f:ce:04:20:95:7e:e9:
0c:17:bb:70:ee:85:89:64:3c:bd:86:b8:40:27:11:69:c6:f0:
be:be:64:6f:e3:38:04:ff:86:30:4b:10:e1:69:e2:0b:3d:cc:
44:23:fd:6b:18:94:7b:1f:7f:81:fd:ad:22:bb:d8:5f:41:11:
1f:12:96:29:b5:64:12:4f:98:ce:99:2c:91:42:09:15:97:29:
0b:07:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:30 2026 by rpki-client