Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
File: UuvM2QyKD8Eempj4VmboGDte-mw.mft (raw, json)
Hash identifier: r5Pay3y1USrfa4RaLzgBH4Rqp2hwMUN7saXKHKRD2dc=
Subject key identifier: 30:DE:0E:A2:AE:25:4D:60:73:0B:FE:4B:B7:B2:29:48:84:15:43:99
Authority key identifier: 52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C
Certificate issuer: /CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c
Certificate serial: 019D39099A032E583B3B831C2A1BD34AD540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
Manifest number: 021B
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: PGcm0CDeNWecP1jquZhLeuP7u_U.roa (hash: rZuBb7s0u0fbgFHXAnluNeY1vKsyUBBvaE5m7s/yw4c=)
2: UuvM2QyKD8Eempj4VmboGDte-mw.crl (hash: tqEC5PcLWtpis5/Cmhci0hRQV1fHpTg4kyM6RdAf3ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:9a:03:2e:58:3b:3b:83:1c:2a:1b:d3:4a:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ebccd90c8a0fc11e9a98f85666e8183b5efa6c
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=30de0ea2ae254d60730bfe4bb7b2294884154399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:a7:6e:9f:72:33:2f:9d:e3:1d:2b:39:99:
b9:2c:e1:3a:05:42:4d:66:a4:2f:57:3c:c6:94:11:
58:09:d8:f6:62:7d:36:75:02:68:68:4f:9a:a1:17:
42:fe:b7:2e:cd:7f:d9:09:59:f6:e0:8e:5f:98:2e:
06:92:53:fc:82:86:80:50:b5:19:52:35:2a:2f:89:
28:4c:6e:54:bc:8a:c2:19:00:9c:40:a2:38:e6:fd:
5b:c5:03:92:61:ef:31:9d:73:47:4e:56:aa:cb:91:
8a:61:c6:9f:d5:08:ed:c5:8b:1f:dc:39:27:d2:8c:
4a:c7:1c:ac:3d:68:7c:9c:90:4c:13:29:77:e4:71:
36:9e:cb:1e:33:09:e7:b2:f2:49:b6:e0:8f:c4:35:
ef:c2:b7:97:0e:e6:cf:cd:91:ba:f4:a3:77:02:ee:
f3:27:d5:8c:38:64:da:7e:36:51:ee:50:53:2c:36:
7c:3c:05:be:8f:cc:e2:df:e9:99:de:94:38:eb:d9:
a0:7f:3d:ba:73:81:e3:bf:57:b7:4a:35:c3:dd:fa:
c5:8c:26:fa:20:34:b6:70:b2:44:fe:14:e0:a3:22:
74:27:c6:b6:85:17:a8:37:b7:a6:df:0d:84:ea:cd:
7c:4a:f0:23:5f:e7:77:4d:bf:66:34:b8:6c:0a:fc:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:0E:A2:AE:25:4D:60:73:0B:FE:4B:B7:B2:29:48:84:15:43:99
X509v3 Authority Key Identifier:
keyid:52:EB:CC:D9:0C:8A:0F:C1:1E:9A:98:F8:56:66:E8:18:3B:5E:FA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuvM2QyKD8Eempj4VmboGDte-mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1cc85a-af77-45ed-b6cb-d97c8b56ae25/1/UuvM2QyKD8Eempj4VmboGDte-mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:49:6f:cc:d1:a2:fb:79:e9:37:98:1d:c5:d7:51:2a:7c:
5a:14:d4:f7:13:84:55:43:fa:d5:1c:3b:dd:52:55:65:05:e5:
56:9a:52:70:0f:ae:18:80:cb:fa:90:70:e8:3f:29:bb:e9:a9:
19:58:04:ac:41:de:e3:99:d2:57:e7:dd:12:a1:cf:d7:0a:5b:
b2:60:60:b0:e3:48:34:6e:79:f9:74:ae:b8:bc:4b:0e:4d:44:
3d:2a:0b:17:ce:7e:aa:4b:a3:d4:b8:11:35:e8:44:08:58:fd:
64:27:fb:6e:5a:d2:fc:12:d5:32:85:3b:7b:26:61:ef:22:65:
db:d9:03:73:95:4e:22:95:b3:16:c0:e3:96:4e:90:70:1d:19:
1a:5d:92:e9:ed:72:37:bf:e3:ae:dc:25:8e:8c:06:23:9f:d8:
07:f5:47:a5:ad:ab:ed:17:94:d0:0c:79:e2:4b:73:5d:c2:4c:
24:89:90:da:59:48:9e:52:1f:9e:14:51:c9:95:d0:ac:df:ce:
d6:ca:33:04:75:71:51:76:68:97:fc:10:35:94:11:05:cd:f5:
c3:3d:64:fd:ff:2e:b7:09:00:74:e9:d2:9c:b1:90:ed:04:8e:
48:97:09:a1:08:c4:ea:ec:7a:5a:3a:1c:46:db:b0:19:f2:9a:
70:a6:1c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:01 2026 by rpki-client