Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: mwOVGdBvFdqnC5elQCkUfDnQAme8tnF218D6w375Iys=
Subject key identifier: 72:F8:E5:33:E6:C2:EB:74:9D:B0:AF:86:49:99:A8:D0:57:F3:40:E1
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019D37F750DA4079CAA55B10D03BCD7D1E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0B4C
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: xZtrWNpAcuOZPtYyCkt1UH7UTEZfScfLIL3Ch5fS8jE=)
2: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:50:da:40:79:ca:a5:5b:10:d0:3b:cd:7d:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=72f8e533e6c2eb749db0af864999a8d057f340e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:5d:2c:62:08:4b:73:22:eb:87:7e:85:c8:
84:55:31:42:af:8f:a3:4b:a5:9a:bb:72:9e:c0:0e:
c8:e1:59:a2:b9:6c:4f:83:22:67:f6:ab:46:96:b9:
81:d4:97:c8:a6:ae:0f:31:f1:ff:4f:52:1c:87:08:
af:0f:20:04:67:70:8f:11:0a:b6:97:cc:fc:23:1c:
fb:ee:59:3f:f6:e9:94:62:0d:f5:d6:66:53:25:60:
39:4a:a4:84:e1:69:64:38:56:14:bf:f3:f9:71:bc:
8c:6c:60:10:02:62:08:1a:7f:1f:9f:f7:d3:b0:27:
be:db:bd:a8:fd:fb:0f:91:0c:19:01:ff:67:08:3f:
e8:c2:13:2d:36:2b:d6:16:e6:50:7e:a4:b9:5c:a3:
3f:bd:8b:41:70:74:6a:59:d2:f1:a9:8a:35:63:5c:
90:79:86:41:92:e2:29:9b:0c:02:03:a7:0a:07:48:
9f:f2:1f:ca:4d:79:97:29:c0:7f:5c:39:de:37:ee:
02:ab:0b:09:56:ce:e5:9e:fd:69:72:62:99:f6:38:
e3:ec:4e:63:49:bc:87:1f:02:7f:18:de:b4:31:4a:
37:84:01:1c:e2:45:5d:c4:b9:e6:f1:74:74:9e:e2:
0a:f0:d6:16:6a:17:a0:39:f3:71:1f:50:2a:62:53:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:E5:33:E6:C2:EB:74:9D:B0:AF:86:49:99:A8:D0:57:F3:40:E1
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6f:b7:4c:b7:37:35:83:80:76:7c:61:a0:f1:94:fe:a6:d3:
45:53:68:56:25:e1:46:f9:ce:18:a9:94:ea:db:99:c0:6b:32:
b1:a8:46:72:a7:34:97:72:2a:c6:8d:35:aa:5d:a3:97:22:e6:
39:d2:12:b6:3d:a5:a3:da:eb:cb:d1:7a:75:ed:40:34:7f:46:
67:4c:d9:b2:43:c2:99:6c:e3:53:4d:2a:8f:10:b5:a5:66:35:
71:71:f2:8b:96:29:7a:b8:54:70:90:8c:dc:e1:3f:62:b9:b1:
d3:73:06:18:17:90:e0:2c:cb:28:de:7a:95:06:f6:71:92:ad:
ec:6f:40:4f:c7:1f:ff:2d:7e:f9:72:2a:53:86:84:5b:4d:6f:
7b:df:55:98:95:c8:ab:65:fb:44:b6:e3:cc:43:70:5d:4e:51:
d4:2c:09:57:1e:07:31:32:1a:1d:83:35:91:d8:83:bf:b7:af:
0c:fd:ea:23:3d:fb:21:1d:af:68:ee:ba:d8:6b:70:54:fb:c8:
83:f1:db:7b:7f:41:ec:27:b8:1c:c6:bf:4c:a3:ee:73:a8:85:
eb:69:f9:69:6f:02:40:02:d6:e1:db:9b:5b:47:40:94:0a:95:
06:94:1a:67:c1:02:0e:29:f4:f9:29:f6:fc:a9:7a:97:b1:b1:
86:bb:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:34 2026 by rpki-client