Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: qERuOGigD/PWkwoEzvzOnIOoLegY6XH+rPWYakFrsV0=
Subject key identifier: 9C:49:B9:B0:FD:C5:0E:60:52:49:73:40:A2:8E:57:84:3F:F1:76:55
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019D3A8A889E29D4AD32C7808F910C66A05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 169B
Signing time: Sun 29 Mar 2026 17:00:50 +0000
Manifest this update: Sun 29 Mar 2026 17:00:50 +0000
Manifest next update: Mon 30 Mar 2026 17:00:50 +0000
Files and hashes: 1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: b9syf1f9SSwR1vBN8AyvJBCiCscRHqiWMfqotqcPiFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:88:9e:29:d4:ad:32:c7:80:8f:91:0c:66:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Mar 29 17:00:50 2026 GMT
Not After : Mar 30 17:00:50 2026 GMT
Subject: CN=9c49b9b0fdc50e6052497340a28e57843ff17655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:e5:d2:a0:86:93:54:15:32:47:02:94:1e:
28:f6:a0:f6:71:89:0e:2c:1b:12:cb:dd:82:83:a6:
4d:c8:1a:94:04:d4:45:04:96:70:c9:ff:05:bc:8d:
42:6f:2e:f6:bc:e4:73:ad:a0:f8:dc:80:50:ba:c9:
dc:c6:c1:07:81:12:e0:f2:8c:1a:fc:d6:6c:a9:6a:
e1:7a:d9:19:c6:a4:83:1d:7a:28:ee:02:23:1f:67:
4d:70:3f:c5:08:fc:59:71:c9:ca:e8:a8:8a:d0:4f:
10:8d:27:75:50:29:b6:ef:86:30:f6:f9:1f:f9:61:
3a:a8:8b:40:7a:f1:bf:b2:1f:27:96:bc:48:81:e6:
8c:fc:20:09:4e:f4:98:cd:34:a1:70:27:d2:a7:5f:
4d:e3:00:cf:69:2d:8e:1a:eb:08:6b:46:9a:da:ed:
bb:4f:ac:7d:98:93:4e:d5:a1:71:7a:bf:16:4f:50:
bd:7b:36:a6:a9:7c:0f:9a:4c:59:a9:a2:1b:e5:98:
93:77:47:4c:06:53:c1:af:aa:78:32:c0:de:dc:7c:
d5:6d:61:b2:a9:20:f7:c4:1a:82:b0:ae:ee:c8:f4:
29:38:10:e5:e6:22:30:b0:97:6e:fb:2e:03:40:e5:
f0:b4:d9:a3:98:80:3f:d8:68:05:cf:8f:c1:55:6d:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:B9:B0:FD:C5:0E:60:52:49:73:40:A2:8E:57:84:3F:F1:76:55
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:8f:03:20:6e:fb:f9:44:f4:6a:e4:e7:1f:f7:d0:0a:e3:
d3:fe:e5:47:a1:c8:38:b0:92:fe:6c:f1:6d:07:85:49:79:41:
6a:6a:85:90:b2:ca:c5:7b:29:e6:63:87:74:fb:b8:b7:7b:e4:
c5:ae:7f:8b:25:ac:4a:35:07:80:e8:15:39:88:7a:00:e8:83:
5d:a5:50:aa:f0:9d:4e:16:f0:8e:b8:b3:33:b3:d9:20:a2:36:
fd:af:1d:1a:57:89:51:6a:6a:ef:0e:26:3f:f5:c6:67:d9:99:
9d:ca:34:8e:e6:90:2a:99:53:fc:7b:14:07:83:1b:9b:d2:ff:
58:2f:05:b1:e3:bc:11:ad:05:68:08:9d:44:95:34:ca:fa:59:
94:75:28:fd:5f:81:d5:41:c4:ab:84:c8:0e:2a:8c:32:7b:45:
47:e3:ee:b8:9f:b6:8f:b3:49:5c:00:e2:8b:bc:5c:c1:d4:c8:
01:16:44:ed:02:1f:fa:a1:44:9a:fb:86:80:61:c9:a0:de:15:
cb:37:95:a0:ca:89:54:3e:0b:dd:a6:8c:e4:5f:af:8b:68:42:
3a:f1:fd:79:fc:3a:fd:dd:87:f6:b7:35:e7:0f:42:23:d4:23:
e0:8a:ec:f7:3c:eb:82:1d:06:f2:cd:dd:4d:84:23:88:00:fd:
16:a0:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:51 2026 by rpki-client