Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: knv5iVCVIDgLk/kmPw/oKcQIJISQIibfy0haKDJaHsU=
Subject key identifier: 78:B5:9D:68:40:92:69:49:7A:73:57:C8:B0:8C:44:90:AA:47:22:B9
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019D37899E3CB1F3CEDB5DF5F4F52BC02550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 1730
Signing time: Sun 29 Mar 2026 03:00:58 +0000
Manifest this update: Sun 29 Mar 2026 03:00:58 +0000
Manifest next update: Mon 30 Mar 2026 03:00:58 +0000
Files and hashes: 1: RrsaAahk0Vba-XkVgGrcvV0uLOU.roa (hash: CIPZFtJdaOw/Ie6ppEcG6OhrO0JGBP2pAR46eIvpN8g=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: ngggFMqzG8v+w3U8fpzowrMm3Ra0ESWPaZyxFg74p8c=)
3: _8f64H6kLzJHWcOIk3oSyh4YXRM.roa (hash: n4LZZXz9oD2l4x9qTuFFYxB9HvtLZ63oNauDlgkiRcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:9e:3c:b1:f3:ce:db:5d:f5:f4:f5:2b:c0:25:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Mar 29 03:00:58 2026 GMT
Not After : Mar 30 03:00:58 2026 GMT
Subject: CN=78b59d68409269497a7357c8b08c4490aa4722b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:67:7d:10:97:5e:00:83:ce:66:7f:5f:54:
31:84:42:b6:d6:73:3f:e2:d1:e0:da:f8:1d:0f:ad:
c2:ef:9c:98:d3:64:09:fb:e4:ed:ba:9a:39:23:19:
32:81:ea:fe:71:7b:b1:f4:18:25:fa:da:5b:3c:34:
57:a1:c2:5b:14:94:71:35:f0:c6:67:88:9a:20:c2:
38:8b:47:d6:cb:a2:ec:08:b9:aa:7d:51:98:f8:18:
35:8f:71:10:59:b1:2c:00:8c:e8:e7:30:cc:07:f3:
8a:63:b6:55:08:d1:81:4b:df:03:9c:d1:a7:e8:bd:
3f:51:2d:b3:fa:15:a8:22:df:e5:26:a6:9e:73:f8:
6d:6d:ca:0b:7d:a3:dc:13:b7:e2:54:30:8d:21:43:
23:0d:0c:65:b0:ed:a8:14:30:c1:76:41:9d:9e:19:
cf:84:0f:f0:4f:1a:06:33:3e:f1:f5:cc:5a:d9:44:
69:94:55:6f:f3:13:1c:fc:da:24:b4:93:f3:eb:b0:
81:a4:e5:2b:a1:2f:2b:20:32:29:5b:d6:d4:ef:97:
58:df:4b:2c:c8:ed:50:56:cd:da:8d:f5:50:82:3e:
ab:a6:75:df:ea:16:de:92:59:43:e6:77:4c:ff:19:
43:76:59:54:21:ab:8a:cf:30:b8:72:79:aa:3e:fc:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:9D:68:40:92:69:49:7A:73:57:C8:B0:8C:44:90:AA:47:22:B9
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:9f:97:7b:88:5a:32:a9:de:e2:47:9d:c0:d9:4c:1b:49:
a5:c4:f3:c8:1d:71:90:91:49:52:c4:63:75:a6:ae:1a:43:ea:
8a:99:74:0b:c2:e7:be:db:51:3c:be:01:50:9d:5c:cf:63:26:
03:b8:cd:16:37:eb:21:d0:67:3d:9e:99:bd:3a:5e:ec:71:87:
07:de:cc:7d:b0:6d:16:58:32:ea:86:3c:1c:c4:54:8a:06:7c:
c3:5b:9e:64:4b:c4:33:52:aa:55:18:02:5a:2f:f9:3d:14:66:
d4:77:29:cb:0b:73:38:39:ac:e8:9d:29:c0:37:e2:33:ea:b0:
4d:11:17:70:b0:c0:62:90:a5:75:3f:97:a7:20:dd:20:97:bf:
cd:8f:f2:34:a3:33:3d:cd:94:3b:a6:c8:fe:9e:9c:07:0e:60:
ee:9f:6a:f5:e1:6c:f8:23:61:9a:a1:e1:18:2a:c1:8d:9b:ae:
03:11:23:d9:59:31:ae:c7:93:37:77:6c:2c:fa:f0:a6:2a:7a:
33:25:4d:0f:b6:23:1c:04:65:60:a5:c7:6c:df:37:38:dc:5b:
83:f2:2a:95:7b:b6:35:3c:4d:09:7a:29:ba:d4:e1:53:12:cd:
9b:e7:c1:bb:48:17:3f:cf:b6:f6:e7:d9:1c:24:8e:07:00:a0:
3a:b9:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:20 2026 by rpki-client