Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: tF4KDpjbUZU6dSBplR08dIDSDt2KiqBWPALXNonwnG4=
Subject key identifier: D9:35:A6:45:26:CB:64:E3:EF:CE:EC:42:A2:75:8F:F5:C9:C1:F3:50
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019D3909F7F61D16B43522E998B52E67DA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 07DB
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: 3FCFgj1hyTVQ9jH/isQXNnGQEb27q4aZXALfMr69Jqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f7:f6:1d:16:b4:35:22:e9:98:b5:2e:67:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=d935a64526cb64e3efceec42a2758ff5c9c1f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:5e:ee:43:06:84:7b:8d:cd:53:58:93:a3:
eb:31:3d:4f:20:11:a9:38:94:28:b3:6e:6f:64:98:
9d:9b:90:af:df:5b:41:a3:50:f9:73:f8:5b:0b:11:
51:d0:d8:97:ff:a5:21:96:d6:c2:04:11:9b:16:35:
81:a3:f5:6f:6e:8c:94:2a:b6:53:1d:c1:f5:6a:66:
8a:5a:23:73:e4:1c:b6:ba:83:51:44:97:ac:d5:8e:
88:5a:41:04:5b:4d:c1:01:7b:be:23:b8:f5:e8:8d:
86:58:53:80:56:97:f1:4a:2d:52:67:ec:bf:e1:fb:
cf:30:ca:c3:28:8d:c4:f9:e6:d9:eb:d5:c1:3c:fc:
69:1a:d4:f4:19:35:7c:91:c9:89:ac:61:7d:fc:e4:
d0:05:15:b0:68:fa:40:6c:d8:0f:f4:1a:ec:39:53:
5b:70:b8:99:68:54:de:b8:db:ed:4f:ea:2d:e0:bf:
75:a7:7e:29:ce:1f:9d:07:87:f0:b2:22:44:91:99:
1b:68:9c:40:09:ac:58:09:82:8c:66:65:61:4e:5b:
4b:1e:7f:44:44:eb:0a:20:bc:0c:75:b7:b2:9a:96:
8d:a2:2b:97:32:b6:52:4f:c5:a8:81:57:7f:4c:10:
da:28:6b:f3:f7:b5:a5:8f:2f:37:e6:ed:34:7f:a1:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:A6:45:26:CB:64:E3:EF:CE:EC:42:A2:75:8F:F5:C9:C1:F3:50
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:48:5f:33:8f:eb:14:1a:ce:bb:ed:31:27:d4:45:05:58:80:
98:fb:e4:9f:20:94:36:87:dc:89:4f:19:d1:10:08:97:2d:eb:
18:68:fb:ea:40:8a:0a:c2:3e:dd:e0:27:4f:43:ea:ca:53:7b:
ba:22:0a:43:b5:46:25:ff:0e:ee:0c:0f:3b:16:00:5a:5f:cb:
a6:68:81:f4:56:80:96:1c:b5:1a:5b:98:36:51:b1:5c:b7:cc:
b4:b5:f3:e7:5d:24:cb:dd:80:3d:0e:b5:dd:bb:de:11:27:9d:
cb:d5:f1:4e:f7:7f:d7:a6:b0:1f:8e:a1:70:b8:28:6b:87:1f:
da:62:6b:89:97:20:81:fb:44:34:b5:9a:7e:e2:3a:35:03:b6:
e4:c7:d2:08:ee:0e:e8:a5:29:77:13:f7:87:00:3d:c2:a9:5d:
06:c5:ac:07:6a:e0:fd:87:cf:e2:74:e2:f1:ed:0a:c5:e1:d8:
37:db:0d:70:75:b7:23:3c:f2:04:50:01:46:e5:be:87:9d:33:
e9:45:c8:b7:6c:8a:ef:e6:59:ad:7d:8f:f5:92:cb:01:d2:a1:
44:66:c7:68:4a:4a:d5:15:7b:12:0a:cd:3b:6b:d0:ab:20:d3:
6e:09:a6:13:02:7e:fb:91:20:6f:38:54:40:5c:ee:1b:85:02:
23:da:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:46 2026 by rpki-client