Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: G3F6OxctXjQdfALOMxeurwLRxPX+Plw4qpEPbmAPzsQ=
Subject key identifier: 0A:A4:0A:79:34:57:93:DD:8B:1E:A1:A7:C5:5E:CE:54:A9:65:84:EA
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 019D389BD2418106ADEEE1C892EA4901D16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: bNRuTlB0fzyI9CGmSgXBXA-B5so.roa (hash: 3U824o26TdTCJO0oNfs1eyzOIoGDTofZcJsuKnrhEM0=)
2: kBUNjbSsmm7Mn3Q5G8pHzfSdrJM.roa (hash: btnz9PZAp3acMBNeW36Iy/hL1kzMf0nqH+ga7/me2mw=)
3: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: P2tD6dRtARuOqCV+3ZzI56JY90uJje1qOgV8qCzBl8A=)
4: ykMOxNfjS-vqAEial74o856O6c0.roa (hash: VC7AcuplTftdX1hkRufVprbTyDIhwpVO8tWKCFEqnPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d2:41:81:06:ad:ee:e1:c8:92:ea:49:01:d1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=0aa40a79345793dd8b1ea1a7c55ece54a96584ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:d8:fb:76:a5:b4:f9:52:32:69:66:34:1c:
16:0c:22:4d:cc:fb:1e:23:1a:4f:96:94:7a:01:b9:
c4:de:c3:53:f6:4b:23:c5:03:2d:73:2d:90:08:09:
76:75:77:cf:5e:eb:1a:ce:f9:5e:dd:de:c7:d2:d6:
15:61:0f:0f:d8:f7:cc:94:0f:3c:5a:20:48:23:10:
11:6e:45:df:5d:c7:fa:b4:9f:43:34:1f:e2:83:29:
d5:c0:d5:4b:47:dd:7f:d2:1c:ba:0a:c1:cb:7a:63:
b4:8b:b0:d4:37:ef:cb:e2:63:5f:f6:3f:d8:76:ba:
4f:7d:42:b6:8e:fc:1e:23:9b:db:b3:7d:c1:bb:7e:
7a:40:5d:48:38:e0:c3:ca:f0:6c:13:f4:9e:69:b6:
3d:a9:8f:c7:62:7d:f6:62:69:06:79:58:12:9b:de:
54:d2:ad:39:95:df:79:1d:3b:20:4f:b2:fb:e7:82:
a0:53:8d:32:4a:8b:f7:51:5e:ad:94:f8:cc:fe:7c:
4d:2a:52:71:ef:3d:d1:67:fe:83:bb:9f:a2:93:46:
f2:82:c3:34:73:f3:16:e5:5e:ca:e3:ff:2d:51:4b:
dd:2e:14:8f:b1:10:db:16:34:93:c6:3c:9f:50:b1:
0e:fc:11:aa:58:28:00:b7:29:da:a5:d2:a8:10:e4:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:0A:79:34:57:93:DD:8B:1E:A1:A7:C5:5E:CE:54:A9:65:84:EA
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1d:7d:2c:66:36:19:ae:1a:39:cf:ae:a0:53:e0:9a:b4:8b:
b9:a9:c9:82:19:4a:26:dd:8b:25:64:f0:83:ab:fe:cd:3f:33:
2e:d9:b2:b9:dc:3a:15:fd:1d:98:b1:1e:b8:99:aa:34:d6:2d:
3a:e5:a2:65:99:34:98:c7:7a:32:63:f6:31:1a:a1:10:76:fe:
9d:01:0d:a6:72:01:d3:b9:4e:89:4e:3c:fe:77:d0:ba:d7:77:
e6:d0:02:f4:96:03:fe:e5:a9:ea:dc:d7:42:d5:bb:c0:28:4c:
1a:94:96:ba:ba:0c:3e:67:aa:ba:db:65:c2:af:fb:41:11:6e:
1e:93:49:7c:f8:54:7a:51:86:08:bd:8a:a4:2b:31:06:74:2a:
59:c0:b8:77:18:86:79:43:a5:e0:ff:77:2f:93:bb:6b:f7:8d:
ab:94:d1:74:b7:b5:41:2b:6a:cd:1c:7c:d8:4e:40:6a:dd:02:
b0:67:30:75:f7:da:08:19:ba:a5:4e:02:ea:d2:d2:06:a1:1b:
58:f5:3e:a6:96:06:c7:11:aa:bc:64:62:6f:d6:0a:1a:c1:b7:
1f:76:b8:2e:36:e7:f5:9d:94:8b:00:c5:9f:fa:f6:f7:46:e1:
30:4f:5b:0b:63:f7:d3:b7:c4:cb:15:a5:b2:82:c1:4d:90:5f:
8a:25:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:36 2026 by rpki-client