Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: zrmF88tKY2kxZCJBD22XdAGPUaW/iUlxXt82qnRgA5U=
Subject key identifier: 3F:0B:D2:82:6B:52:7B:5B:26:7E:F6:49:3D:47:6D:C5:26:58:CD:47
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 019D39E54B20B0586F62D520717872BA2AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 01DF
Signing time: Sun 29 Mar 2026 14:00:21 +0000
Manifest this update: Sun 29 Mar 2026 14:00:21 +0000
Manifest next update: Mon 30 Mar 2026 14:00:21 +0000
Files and hashes: 1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: 5RPMZ0fHlAf0jpg3/fNlHLYhwpjh9EgE2M095LQFiGM=)
2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:4b:20:b0:58:6f:62:d5:20:71:78:72:ba:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Mar 29 14:00:21 2026 GMT
Not After : Mar 30 14:00:21 2026 GMT
Subject: CN=3f0bd2826b527b5b267ef6493d476dc52658cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:99:ab:9d:19:80:e9:a6:2e:15:42:26:e8:96:
fb:fe:a0:6f:14:ab:5b:59:80:5b:6b:e1:0e:0c:60:
78:d6:24:81:16:03:2b:e0:e7:53:27:31:4f:50:9a:
74:ab:8f:d0:e7:75:77:0b:6a:bc:50:16:25:07:96:
71:81:7a:d5:ea:a1:38:45:fc:d5:3f:9f:44:5a:48:
4b:2f:c8:6a:0c:a8:19:39:3a:d9:c9:b7:d1:06:0d:
99:5a:77:47:db:0c:3c:23:9a:9a:1a:79:c4:a0:4f:
07:3f:8b:3e:d0:3b:a8:fc:1a:e7:ad:fb:11:d8:3e:
bc:35:5b:e3:e8:3b:af:50:a7:d9:2e:6c:a3:ef:9f:
50:e3:6f:f4:d2:70:10:d3:69:02:d5:26:b9:09:8b:
d7:92:bb:cc:2a:51:f6:d5:b9:5f:09:3b:93:60:8f:
1e:da:07:5a:d8:99:46:6d:02:9c:19:46:f1:20:1d:
00:13:16:60:12:29:cf:b2:3a:bc:28:7f:5b:3c:64:
d3:bd:95:30:80:52:43:2f:2a:86:06:de:62:3b:72:
58:c4:0c:e4:9f:6a:fe:88:ce:bc:4e:5a:5a:5f:95:
3e:65:eb:e1:01:1c:51:cb:79:a7:b4:9a:91:81:c6:
23:d3:16:71:e8:54:90:cf:f1:d5:6a:29:d0:1f:96:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:D2:82:6B:52:7B:5B:26:7E:F6:49:3D:47:6D:C5:26:58:CD:47
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9a:d6:51:8f:67:6f:20:cf:97:d0:d0:f7:de:56:b3:2c:99:
48:7d:82:a3:b2:bd:bd:a7:21:8e:99:cf:43:c3:b3:79:20:a3:
2a:80:a2:c2:c1:aa:12:6f:23:b9:79:f9:61:9b:2c:5a:7b:be:
c2:b4:04:1b:3d:0f:90:ec:75:0f:74:5a:06:e4:5a:62:dd:1f:
34:28:47:47:bf:1a:13:82:14:2e:e7:d7:82:ca:c9:4e:90:ed:
30:e5:3a:8c:5f:67:6e:95:75:a0:1d:fa:8f:80:fb:62:4c:3e:
a3:60:e7:1f:79:24:fa:15:77:43:86:59:cf:c0:f2:b6:1e:8d:
1e:d2:e3:2a:07:4d:00:63:eb:89:c9:fe:3e:f9:78:c4:cc:28:
74:ce:51:1c:fb:d0:7b:4c:1a:36:63:79:29:1a:72:8f:4c:6f:
f2:9f:3b:bd:71:5b:60:90:d9:5e:90:8a:49:6d:e3:93:9f:1c:
12:2a:db:19:a7:37:63:96:01:3c:9a:81:45:3b:1a:d6:a9:53:
78:b8:d5:a1:0d:3d:ed:ad:e1:8c:95:41:9d:d4:6e:5e:35:67:
29:04:15:3e:80:dd:87:28:67:1a:d7:d7:a8:30:42:40:a4:04:
3b:43:24:c2:8e:42:8a:40:0c:65:54:d0:1d:41:ba:42:ff:6f:
bf:ba:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:05:48 2026 by rpki-client