Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: E43D+F7Cq10z1jG/aomHEyhC2AS34OygqhSWPm25KRY=
Subject key identifier: 80:88:EF:DA:CD:01:78:8B:F8:DD:E8:F9:D4:F3:D4:E3:5E:60:10:D8
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019D390A153A7B799D5C6551D24BFF1C28E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0F0D
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: 3cg9wd3IT0upXqpMeAKPTE2gYPCSMQulEgRvUHVfQkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:15:3a:7b:79:9d:5c:65:51:d2:4b:ff:1c:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=8088efdacd01788bf8dde8f9d4f3d4e35e6010d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:44:60:7c:d7:97:06:b6:f4:71:6f:96:14:
2c:57:b5:df:d9:19:ea:e0:24:5f:91:97:94:8f:7a:
be:22:20:51:03:52:a8:d5:36:bf:f7:e6:69:73:a9:
92:68:66:d8:a1:7e:b1:42:38:12:84:16:41:4b:53:
96:27:99:9e:80:5b:bc:f8:0b:ac:92:7e:f9:6d:f7:
15:1f:14:20:49:13:16:e1:c3:1e:e1:67:bf:c9:2e:
59:08:88:6d:67:83:49:27:2f:08:3f:bd:79:70:7c:
fa:49:11:f4:91:d9:3d:dc:33:38:19:24:1c:56:06:
5c:9e:0c:ed:98:75:48:39:76:57:fd:39:4a:bf:97:
19:9b:0f:3e:04:ee:c4:82:5c:4b:7c:6d:d8:7a:14:
6b:14:d3:9c:dc:e4:62:87:11:6d:62:85:5c:6b:38:
8e:2a:28:a7:ed:a7:96:28:a9:ac:fe:1f:83:e8:85:
a0:fb:dd:06:a4:49:fb:60:e0:11:66:1c:42:3a:0a:
a5:9b:7f:82:b7:d0:93:72:50:55:d3:d2:c1:fe:47:
b3:93:d2:ed:4e:71:de:40:9d:71:33:6d:f1:eb:ea:
2a:c1:95:07:a4:f5:fb:66:c9:98:65:d2:51:e3:d9:
61:97:84:3b:88:64:fc:7d:12:7a:8f:87:74:f1:89:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:EF:DA:CD:01:78:8B:F8:DD:E8:F9:D4:F3:D4:E3:5E:60:10:D8
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:db:4b:02:fb:39:e9:ae:f2:65:f6:37:a8:a8:4c:51:3a:26:
9b:09:f3:3b:30:8e:cf:cd:b4:7c:3d:76:e2:3f:1d:8b:7c:59:
f7:76:e5:65:1d:29:16:b4:7c:54:e9:37:dc:0d:3e:08:2d:8d:
d4:17:7f:3e:d2:38:1b:39:9a:a1:2a:11:54:69:55:65:2e:4e:
0b:e8:a6:16:b8:28:12:2f:f2:91:5e:dd:64:ba:df:b0:41:05:
45:69:83:c4:16:c9:51:32:6a:39:04:8c:5b:16:83:f6:ce:8a:
b6:9b:25:aa:6b:71:c1:81:a9:76:74:31:06:bc:df:ee:24:75:
38:00:bb:4c:a0:0f:02:05:08:3d:70:a7:32:e5:81:23:ef:52:
a7:89:76:b0:7e:58:77:c9:aa:2e:54:fc:7b:c7:32:42:01:2b:
63:b1:ea:3a:1d:c8:cf:fd:a1:e3:56:e7:95:4b:12:04:59:97:
8c:71:3d:03:3c:3d:05:31:d6:5a:7d:d6:46:83:ef:54:6a:1c:
88:74:56:49:d3:6c:5f:05:bb:96:b8:b7:4b:c1:30:07:ba:82:
37:62:e1:43:f3:f5:d3:db:0d:19:7d:13:d7:7a:a9:9c:d6:a6:
07:32:47:be:ec:98:9e:91:67:5d:1e:98:fe:99:4f:f1:ca:04:
9e:de:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:57 2026 by rpki-client