Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: LgPOWONBbPh2iTqvRkLsTpXQN5/KRY7x/mpVDOfWE1o=
Subject key identifier: 29:41:B3:54:99:41:F0:1B:F7:8C:6A:65:EE:85:08:0C:F6:51:BC:BA
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 019D389BE78D59D1358BFECE41F7E92FA104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 1540
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: kGHJ-8rZWO54aj3tYcGMYD_2TqQ.roa (hash: cYqFt+Ygq2GVWtReyVY63qsFOpbAunakWaQ4n67Z65Y=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: zrNOeGssU56LccBHshH87CE4QB+hBB9gWN6eqa9dCpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e7:8d:59:d1:35:8b:fe:ce:41:f7:e9:2f:a1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=2941b3549941f01bf78c6a65ee85080cf651bcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:8f:ce:f0:e4:c7:d6:47:78:26:4f:f8:42:
ae:b8:02:e8:a9:0e:3e:56:4c:eb:ad:29:d9:74:05:
06:05:ee:0d:25:47:cc:eb:18:46:21:d2:97:47:35:
eb:a8:99:33:b1:df:f4:ab:db:4b:53:42:ec:a0:bf:
be:ca:d0:2d:9d:60:31:ae:3d:84:18:4d:8b:b9:07:
2e:a8:99:d8:a4:fd:0c:58:ae:f6:2f:b3:7b:de:53:
bb:0f:ad:db:07:31:e9:25:b4:c6:7d:2e:d9:6d:9f:
0e:eb:15:37:8b:82:2d:66:5f:5b:16:49:89:c3:fa:
80:01:b8:a3:77:98:32:55:7e:dd:8e:6e:f0:f6:b0:
7b:86:b6:08:7f:a9:d6:6c:a0:7a:42:21:3f:61:82:
7a:70:af:5d:b3:2a:d7:fb:0c:a4:c1:df:60:1e:b4:
8f:51:45:bf:10:6f:c1:e8:d3:4b:93:82:15:ae:e4:
7a:e5:3e:8c:d8:f8:cf:31:02:f7:f6:f8:73:84:0d:
00:b7:6f:01:e2:8d:ef:ca:2e:b6:32:3d:31:8a:ce:
dc:2b:fa:99:c7:da:3c:9b:83:c3:7c:9f:cd:e6:fc:
d0:6a:79:89:98:56:ea:45:4d:f0:27:9c:1e:4a:e9:
ff:98:74:e6:7a:5b:5f:dd:72:6e:ca:36:e7:88:18:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:B3:54:99:41:F0:1B:F7:8C:6A:65:EE:85:08:0C:F6:51:BC:BA
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ab:06:34:63:de:55:8f:14:d8:29:98:b7:12:1d:78:c7:ac:
6e:f9:be:d3:11:38:37:66:89:a4:0d:8f:85:0a:76:a9:ba:02:
aa:84:9a:c2:c6:92:24:1b:2c:9e:ec:f6:aa:6d:04:01:e1:6b:
b4:88:80:7f:fa:7d:cb:af:98:d8:79:df:ca:fb:5b:60:f7:46:
3b:99:c5:b0:f4:0c:38:b7:10:29:f6:f2:98:8c:bb:b0:93:2b:
9a:35:7d:88:5b:0d:8d:da:dd:c5:8d:98:c2:a7:f2:b4:63:cf:
13:77:f1:62:33:fb:5b:8c:8c:e2:8f:f1:e2:5c:06:78:69:04:
a7:7a:e3:ed:8a:0f:d2:3a:53:ce:7b:b0:0d:32:83:92:5a:1e:
ed:f2:ca:67:f4:f2:12:f2:7e:3b:e6:48:17:0a:7e:20:45:23:
d3:10:54:15:1a:8b:4e:a0:f1:16:d0:c5:8a:d2:37:95:9a:f5:
4b:11:e5:f8:e2:e0:d2:12:72:f7:eb:ce:fa:64:f2:12:5d:e4:
19:ac:ef:de:f8:41:34:fa:37:19:9b:1c:9d:33:ac:e0:05:e8:
6d:3e:a1:0f:04:ab:66:3b:f9:dc:03:14:5d:d5:1a:f3:a4:dd:
25:31:5f:cd:c8:ed:3f:e7:eb:6d:0f:4b:67:dc:0d:25:5c:09:
09:e9:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:18 2026 by rpki-client