Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File: uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier: lmZdG/KyjLcdQ9pFdn0VG4j1AFZCRnUUFA8Qw0RaMtY=
Subject key identifier: AB:32:94:2F:46:0A:81:D3:BA:8F:70:F0:57:20:2B:ED:21:34:7F:B7
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial: 019D371B7F9C97EA091407941C8AE4437DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number: 0356
Signing time: Sun 29 Mar 2026 01:00:42 +0000
Manifest this update: Sun 29 Mar 2026 01:00:42 +0000
Manifest next update: Mon 30 Mar 2026 01:00:42 +0000
Files and hashes: 1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: BvWaDXiG3UYHH9H/WDtseUjTCqn731kv3nBD9mcMsu8=)
2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:7f:9c:97:ea:09:14:07:94:1c:8a:e4:43:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Validity
Not Before: Mar 29 01:00:42 2026 GMT
Not After : Mar 30 01:00:42 2026 GMT
Subject: CN=ab32942f460a81d3ba8f70f057202bed21347fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:61:c4:38:d8:af:00:97:9a:23:d1:5a:29:
df:3b:81:87:1e:bd:e1:38:f0:88:63:ff:b0:37:b0:
2d:24:cf:cd:25:a3:75:60:29:cb:92:c7:92:10:99:
1c:a1:cb:1a:c7:71:52:38:78:ba:a7:7a:05:ce:b3:
65:b1:ba:cd:38:b9:23:22:e8:d6:3c:0c:35:3f:05:
46:dc:94:2c:c7:75:cb:29:16:d7:5b:bf:a3:02:40:
c4:08:9c:af:a0:37:4b:e8:0f:b3:d6:04:71:20:32:
3c:a6:1a:2e:26:7b:c7:e8:3a:4c:8d:88:bd:9e:d6:
95:15:9a:bd:99:ed:c8:0b:aa:14:d1:a2:d7:8c:41:
59:2d:3a:ae:ed:f7:b3:0e:94:4e:f0:7b:e2:05:80:
33:1e:63:4a:0e:95:3c:ce:84:0a:60:a6:75:17:f8:
e4:8a:09:57:b1:59:0a:5c:5a:89:51:b3:11:fa:91:
fd:9e:42:e4:d9:e3:89:d0:b6:7b:3d:6d:b6:c7:ee:
f5:11:dd:c7:87:bf:08:67:7f:ab:9e:b9:68:2d:f6:
b1:09:49:94:42:b7:c0:b4:4f:a2:93:a6:65:68:35:
06:d3:68:7c:db:6e:3a:1f:30:ec:b0:7d:a1:5b:f4:
7f:c3:ef:44:2d:5d:df:3a:1f:31:4c:76:9e:f2:2e:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:94:2F:46:0A:81:D3:BA:8F:70:F0:57:20:2B:ED:21:34:7F:B7
X509v3 Authority Key Identifier:
keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:29:ba:3f:98:d6:d7:29:3b:8a:20:45:cc:a3:84:bc:b4:
e4:f4:5e:df:3b:e7:6a:e3:ec:11:6a:a4:d6:b4:c0:fe:81:22:
79:4a:87:8f:cb:84:9e:bc:4b:9d:39:de:13:f0:f1:4e:a5:3a:
a1:78:86:4b:44:9d:af:90:8a:9f:1d:a2:47:0c:4c:67:13:e6:
eb:9b:0a:1b:bc:5b:93:18:90:a6:2f:d8:fd:d9:fd:31:4d:54:
00:3b:7e:39:67:2e:d9:38:2e:34:6c:42:1c:5c:d6:ad:7a:53:
bc:66:ea:68:38:a7:11:46:0f:99:a7:95:4b:7c:14:56:0e:78:
eb:82:93:80:48:49:54:81:7b:09:cc:6d:45:b9:f2:32:ab:60:
b8:8c:05:95:15:7d:8b:bf:2b:16:63:fb:4a:17:d1:7f:0d:2a:
39:c9:e6:3b:11:9c:60:97:5d:cb:4d:cb:99:4f:73:e7:ef:6b:
22:3d:5a:47:11:10:7e:6e:32:71:e8:23:6a:25:a1:8d:f6:fe:
9a:ee:c5:cf:3e:2d:e0:2a:b7:1f:30:14:82:e4:79:b2:40:37:
a9:a0:af:a9:ea:ab:c6:95:97:5f:02:13:52:82:3d:a1:e9:c3:
a4:3f:3e:3c:6b:2f:25:b7:c6:3f:e6:77:d3:9e:b9:c8:ed:6b:
97:17:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:55 2026 by rpki-client