Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: tGMe2FwiayvE3eerxF3n78pNWLGFTn8y3zS4QkUeM2Y=
Subject key identifier: F5:9B:43:3E:CF:A5:41:4D:F9:ED:F2:E3:92:75:78:59:1C:8B:10:5A
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 019D3941632D9E090BCF3115BDCF87C76807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: 1_5h2ktiO2Us-d9_9EOFV58PYPA.roa (hash: sd6598E1QU/JTbPf14WQIor/gpE3yNeo7WtwXbLKg9Y=)
2: czO6xgkAci50_TFJzcGjRe13r4g.roa (hash: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: yvLUxeUsdscII6QbgY/2t0iNyXYh6xY2jRJzB+W1NlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:63:2d:9e:09:0b:cf:31:15:bd:cf:87:c7:68:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=f59b433ecfa5414df9edf2e3927578591c8b105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:e8:a1:b7:e4:32:ef:ea:df:6c:37:c4:2d:
15:91:9c:9d:40:2b:77:99:a5:c7:13:7d:e4:c3:44:
fd:9f:dc:1c:ce:8d:b7:33:3f:1e:d3:4f:c4:01:12:
64:05:bb:05:bc:89:3d:a3:45:6d:f3:b7:5a:28:e2:
a5:d0:79:b2:cd:2e:80:ed:8f:61:fc:8f:50:48:40:
82:bb:5d:65:79:b9:1e:84:85:7c:57:a6:64:c8:dd:
9b:20:05:ca:48:47:45:55:f6:93:41:40:7a:a5:61:
48:77:2b:a9:aa:c5:7b:e2:32:a3:7e:a8:fb:c9:54:
64:83:e1:33:5e:d2:83:04:dd:bd:c8:ca:b9:ef:a0:
4c:70:29:4a:1e:25:af:62:4e:fd:56:fa:71:be:82:
29:06:61:6a:ca:77:59:d3:b6:32:05:79:5e:7c:77:
b1:3a:86:08:11:3a:8b:30:e2:27:55:a0:d7:5e:7d:
9d:e7:28:41:b0:b7:e0:8c:3e:9d:f2:9f:e4:7f:58:
25:0b:18:fe:fa:cd:1f:49:6f:cf:3f:ea:06:16:37:
47:88:ef:b8:c2:8a:ee:ec:77:25:d3:d4:d2:53:47:
98:1f:dd:07:05:8c:5b:89:5f:ec:46:5a:2d:db:a9:
92:48:6c:16:0f:bc:31:7f:bd:e6:da:75:58:42:ce:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:43:3E:CF:A5:41:4D:F9:ED:F2:E3:92:75:78:59:1C:8B:10:5A
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:b2:e3:36:ad:5b:20:a9:95:4f:65:da:03:f5:33:5f:15:
96:82:d7:bd:ae:3b:ce:39:09:81:c5:25:23:21:c5:8e:3e:d6:
5a:02:d8:d4:cb:55:47:6c:2f:ff:f0:65:70:37:b9:28:7a:26:
fb:0a:e8:97:d2:02:b6:d8:31:f2:93:9c:b5:31:01:c8:1d:0d:
49:08:58:a4:1e:18:36:e9:51:f7:70:bb:48:bc:27:ca:11:61:
8c:29:c4:64:e6:a0:77:ec:4a:90:4c:5f:93:6a:f9:4c:52:5c:
f0:97:f3:7b:95:4e:6e:20:6d:a0:db:39:6a:c9:71:8e:ac:27:
ee:a4:6f:eb:9d:1c:cc:13:bf:4f:fb:7e:c3:d9:b0:db:00:5f:
b4:61:64:e1:87:83:e2:40:58:b5:9f:b0:0b:ba:0b:a5:ab:0c:
b7:cb:20:3c:5a:be:41:73:a8:4e:e2:e5:2b:a5:38:04:61:62:
d5:3a:85:73:18:b8:2e:28:bf:ba:bb:7f:f3:78:08:37:4b:b8:
53:23:b5:27:b5:0b:da:1f:62:e2:69:95:98:1a:09:fb:72:8f:
83:42:4f:e3:a4:f6:c2:be:49:73:ce:d9:d0:36:e7:7f:d7:ca:
9f:40:f0:00:74:30:09:9c:f6:c1:6e:2c:e2:78:3f:36:25:ca:
6d:7d:9e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:45 2026 by rpki-client