Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: Fpft3qcq0v8H8dhgtjPrpeu8pNR4d705tekYKneQYgs=
Subject key identifier: D0:A8:EE:BC:F4:98:AC:07:3C:17:16:93:AD:BE:B8:2D:75:99:6C:3B
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019D39AF788ADF087BEAD6F1E55400E388AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 183D
Signing time: Sun 29 Mar 2026 13:01:34 +0000
Manifest this update: Sun 29 Mar 2026 13:01:34 +0000
Manifest next update: Mon 30 Mar 2026 13:01:34 +0000
Files and hashes: 1: gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa (hash: IMKFdbmtSocn1WUlnnsI4QXTF0mL0Cdjvv03Eim+48U=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: HmwX4xSD8Xp+2bhsHRG1/k+3OkP4u+VZwCHCkzzf3/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:78:8a:df:08:7b:ea:d6:f1:e5:54:00:e3:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Mar 29 13:01:34 2026 GMT
Not After : Mar 30 13:01:34 2026 GMT
Subject: CN=d0a8eebcf498ac073c171693adbeb82d75996c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:13:0f:ba:1a:2a:37:48:06:7f:a9:87:04:
f1:9c:28:aa:82:a4:65:0a:ad:94:b9:62:fb:c2:5e:
77:0c:65:f8:e2:62:f1:50:62:3a:b0:fc:4e:21:a8:
50:76:4f:a7:cc:1f:2c:84:7e:b5:fa:24:e3:4e:67:
b0:ce:ae:80:cf:8a:59:99:63:2b:10:aa:ec:3a:dc:
a8:ce:88:63:76:e0:66:1f:0d:2a:be:13:3f:5d:c3:
3d:0c:0c:ff:06:b9:d3:e2:01:2b:cd:a4:e0:3b:ae:
a3:89:6f:10:7e:70:d4:dc:37:b0:87:0b:1d:86:12:
63:16:96:ea:29:35:73:fa:32:e1:fa:8f:ef:d2:35:
ec:72:1b:6d:02:7b:2c:c0:9d:89:ff:e4:a0:75:6b:
b5:ac:53:76:6e:a6:bd:71:65:42:0f:55:3d:4d:f2:
d6:da:7f:13:ab:91:81:4a:72:85:fa:ee:75:40:4c:
f6:23:53:78:55:fb:49:26:e6:7f:f6:98:c8:aa:3d:
f8:29:8c:06:14:83:74:cc:f7:4f:db:e8:49:19:98:
fa:d2:e7:dd:9d:0a:7c:c8:10:45:16:c0:2a:39:ef:
28:84:79:7d:4a:d3:87:ab:83:f0:8b:61:7e:b6:cb:
09:6d:69:15:19:11:e5:36:18:56:74:4b:54:4c:b5:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:EE:BC:F4:98:AC:07:3C:17:16:93:AD:BE:B8:2D:75:99:6C:3B
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:da:cd:1b:88:e4:0d:12:5c:b0:1c:13:c8:4c:cd:46:bd:01:
9e:f0:86:32:4a:2b:60:1c:b8:63:3d:bc:5d:5a:10:b1:0a:91:
27:bd:5c:6d:6f:a6:64:98:b6:91:02:04:f0:04:84:15:6e:13:
40:ae:52:c5:05:da:ec:72:80:31:fd:25:a1:ee:ff:b7:48:36:
08:41:e2:5a:51:46:e0:78:d8:23:80:9d:71:b3:a6:c4:8a:f0:
cb:5a:7f:86:7e:4c:01:53:80:2e:b2:0a:8a:1f:c5:7a:c6:ba:
09:23:19:48:65:a5:46:44:83:ed:54:cb:66:f6:70:ee:7d:5d:
d6:87:ca:24:ca:5c:74:d6:91:46:13:ba:42:f4:a4:ec:5f:30:
8d:be:d0:b3:87:d8:d9:a0:07:15:bd:0a:9f:4e:37:5b:76:79:
b4:ef:aa:1d:0d:28:0f:39:ce:34:2e:39:5d:a1:c4:61:b5:50:
b5:3d:8a:e0:89:8f:ad:bb:5a:f2:7c:a6:02:b2:b8:96:ee:08:
33:aa:e9:d1:e4:75:76:84:20:55:38:e4:a4:9c:f0:58:1b:0e:
37:81:19:dd:38:ff:44:cb:9b:d3:71:d6:44:71:57:8a:dd:ac:
81:b9:43:ca:58:1a:51:48:a2:23:bf:b7:45:f5:15:bb:3f:5e:
e7:5e:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:17 2026 by rpki-client