Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
File: UIqaCKvvdNzFEAT0-uAmbWIDleM.mft (raw, json)
Hash identifier: dLTUlQzfLD3NMkUFXZBN5lJZEahDSmJng6wzeDMQv4k=
Subject key identifier: F4:08:7F:41:F5:6B:36:54:96:8C:D1:DD:5B:6C:45:EE:CA:F9:06:91
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 019D3940FAD80D92E226981DD11B082B39CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
Manifest number: 1084
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: QAgOOWOSGVL9EA58pEl1eGs2WSI.roa (hash: h4yfJTuGabEHeQ+rxp95srDtrChZHsYML/0NIEoqm54=)
2: UIqaCKvvdNzFEAT0-uAmbWIDleM.crl (hash: A5Tn9QuAyPZJPB1rEOlcDRDfRpCpg1yrFYUHw64Mo54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:fa:d8:0d:92:e2:26:98:1d:d1:1b:08:2b:39:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=f4087f41f56b3654968cd1dd5b6c45eecaf90691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:ca:77:b9:a5:c8:9d:41:f4:e0:0f:09:08:
1a:e5:c3:73:28:97:5e:11:ee:39:26:5a:3e:b1:32:
e4:cc:9b:9b:f9:a5:57:f9:17:f8:cb:ab:d1:3a:6c:
b2:50:41:03:8f:30:40:2e:e1:6e:a0:1d:d3:44:af:
d5:2c:68:da:15:29:77:f9:9a:d5:e0:7f:aa:34:3e:
ec:74:42:92:92:fa:0d:02:1e:b7:c2:f9:bc:e6:0c:
44:18:c0:ed:17:a6:d2:43:b2:da:ac:9c:8d:39:38:
e1:28:8e:30:2c:49:15:2b:28:88:e9:4a:b8:2f:49:
b6:25:ff:57:5c:16:65:c9:90:8d:0d:e8:90:14:66:
dd:e4:d1:55:3e:a8:da:d8:c7:00:ba:8c:b0:28:9d:
75:63:70:e6:3c:66:f5:d1:88:38:eb:33:2a:45:dc:
94:a6:e1:80:00:de:e8:f4:1a:53:06:32:25:d2:ad:
df:20:ba:ea:fb:0c:63:7a:c0:4f:5d:7f:4d:74:bf:
0f:5f:01:2d:02:7f:b3:bc:65:ab:bd:d8:c1:3a:e4:
8d:44:cb:bf:15:05:16:de:49:f1:ee:06:2f:20:0e:
83:66:73:bc:12:2f:6f:7b:1f:73:28:97:77:96:13:
05:3e:2f:84:2c:51:1f:72:fa:80:41:54:8b:8c:72:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:7F:41:F5:6B:36:54:96:8C:D1:DD:5B:6C:45:EE:CA:F9:06:91
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:91:fd:8c:a9:63:f7:6a:be:70:2b:cc:a5:ab:33:df:9c:
94:a9:f1:36:4f:94:d2:27:eb:a3:02:86:51:80:c5:b3:e2:53:
01:a6:e1:bb:8e:43:c8:1c:16:10:d5:5b:2d:62:ab:a6:bc:87:
11:7e:6d:91:9f:2d:10:5a:45:01:15:7b:ee:c8:e8:e6:d0:c2:
e3:7e:b7:10:e6:8e:ea:2b:77:15:c2:f7:c2:b5:21:bd:2a:25:
2a:25:e6:7c:34:5d:b1:a7:eb:91:bf:46:6f:c6:b2:a3:d9:21:
ca:39:4e:7f:3b:2c:b4:44:b8:7a:6f:eb:6d:9e:45:65:b1:22:
7b:b7:77:d9:6a:b3:18:90:ca:fa:14:44:ea:9c:fe:25:51:31:
dc:98:77:1d:07:bf:bf:9d:15:d1:b4:8b:2f:a1:42:c7:88:26:
60:5c:f5:c9:6a:b2:6f:11:09:33:16:dd:ee:f1:ca:de:ff:33:
00:bf:c1:3f:c8:77:89:07:42:87:2b:4b:b6:82:61:1f:86:bb:
d4:fe:5d:67:b0:77:b8:2b:64:e6:2a:5e:df:25:02:a5:62:ec:
3b:30:d5:7f:f6:ea:d4:e7:3c:91:a7:25:09:b9:9f:0f:20:0d:
58:7a:f6:35:25:04:25:08:da:d7:12:a8:df:1c:01:73:2b:e8:
7a:46:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:14 2026 by rpki-client