Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: 7bIgS8X9FU/YB8/EyKx/AS5TtUv+/NH2Y3nH9Q2Pjsw=
Subject key identifier: 48:D5:FD:97:A9:7F:DA:AD:02:8B:57:41:16:EA:C9:EF:FE:D1:DE:DB
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019D37898102F764ED8F1CA1979AB60A2E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0FCE
Signing time: Sun 29 Mar 2026 03:00:51 +0000
Manifest this update: Sun 29 Mar 2026 03:00:51 +0000
Manifest next update: Mon 30 Mar 2026 03:00:51 +0000
Files and hashes: 1: HAQ7BpYeCI11Q-zB5s9xRmO_8cs.roa (hash: sU5/NOU5DiC1d86GQV5S1pOP7IqudYFu3QsJXwJrLGs=)
2: N9Rs24uFohaLWAJCS-MAHor3P7Y.roa (hash: nYmoydHMEGkT6vcK6CCR3HuAq2yH0sl4UOzgyYkInDo=)
3: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: 2oWwz5S05cEusxv5bQFGmXYxhN+I3fwLYq1Nf3xlto0=)
4: fVaeDUKHaAopAkHomZQbYf4AJtM.roa (hash: T2dAAHWB9yxMjJS01ysxnRUtaHL32j7N9lv//iEs+KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:81:02:f7:64:ed:8f:1c:a1:97:9a:b6:0a:2e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Mar 29 03:00:51 2026 GMT
Not After : Mar 30 03:00:51 2026 GMT
Subject: CN=48d5fd97a97fdaad028b574116eac9effed1dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:7b:04:70:28:df:1d:ea:7b:a8:f1:7d:4f:
14:56:54:34:3b:48:41:30:af:12:ee:94:3d:0a:6d:
b5:5a:97:b5:12:07:5c:d3:fe:fa:fd:01:df:73:50:
59:b6:4e:90:e8:b9:fb:ef:cf:26:dc:e5:ae:7d:1b:
30:ae:10:69:a5:98:80:25:6b:64:8b:f8:a0:a7:16:
66:51:3d:3d:34:4d:0e:bf:09:0d:d3:bc:2b:8c:ed:
e9:ec:fd:b6:f8:07:02:dd:41:24:56:f4:05:be:df:
80:f8:81:d0:6b:d1:e3:b8:1d:07:76:38:48:bf:aa:
32:95:7a:5e:ae:3f:a8:b8:e9:a1:57:1e:ab:06:e5:
a1:e7:8f:a5:72:4e:75:cf:1e:c4:a9:91:31:89:8a:
d7:e0:17:57:90:96:04:85:ea:49:e5:48:a2:12:a5:
7b:e7:fd:80:52:cd:82:fd:f2:6d:c4:63:3c:2a:22:
7e:f5:d9:47:37:c0:b3:ba:27:80:63:04:94:90:ce:
e3:c0:82:42:5e:a8:3a:85:13:49:f6:cb:fe:32:1f:
0d:ab:55:f6:6d:e9:87:77:40:6f:90:16:27:c9:93:
f8:da:c1:24:b6:28:41:43:37:d4:79:fc:fd:c8:e5:
4e:57:b3:8d:66:d6:53:7c:fa:b9:af:4e:f3:2c:39:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:FD:97:A9:7F:DA:AD:02:8B:57:41:16:EA:C9:EF:FE:D1:DE:DB
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:da:78:93:79:7c:f9:95:39:58:00:a4:93:d5:24:b2:a1:fd:
64:b4:3e:4c:1e:24:de:92:b0:3e:4b:99:76:0a:81:15:4a:6c:
5b:25:0a:92:82:cb:27:59:bc:96:93:09:72:3a:36:f3:a7:30:
3d:8c:b3:40:81:d1:3e:ab:8e:5e:b3:a9:76:9a:a4:d5:04:d8:
48:95:2a:af:65:4b:83:e8:54:f2:f3:0d:dd:05:d7:0d:58:2a:
dd:4c:5e:7d:80:25:b8:db:20:8b:02:4c:09:b1:cb:d5:45:cc:
9e:15:cb:aa:e8:34:c5:f0:10:05:ba:2d:00:70:06:22:10:dc:
65:ee:88:17:2e:74:15:7f:0a:77:2e:42:a6:f4:bc:c8:5f:52:
f4:c3:86:72:0f:8f:10:89:65:17:a0:43:f0:50:d4:fa:ef:36:
09:d8:ff:8c:c2:f3:b2:39:f1:8b:e3:0c:9f:ff:95:ee:6a:1c:
5a:e3:71:50:cf:7d:2e:cd:c7:be:f1:4b:c6:9b:3b:60:ce:04:
47:0a:66:3a:93:b6:cd:85:60:52:ac:2e:62:26:2c:f7:fb:0a:
bf:65:55:d8:b7:59:8e:14:60:a3:df:32:9b:c4:d6:ea:5d:8b:
74:6a:1f:39:40:bf:b4:ac:71:90:d1:84:de:bc:a0:bd:d3:51:
03:1b:3b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iYEC92Ttjxyhl5q2Ci4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMmQxZTQxNDI0ODE5YmNjMGNkNjM3ZDhlZTE0MWZlYTU4
NWQwMGQwHhcNMjYwMzI5MDMwMDUxWhcNMjYwMzMwMDMwMDUxWjAzMTEwLwYDVQQD
Eyg0OGQ1ZmQ5N2E5N2ZkYWFkMDI4YjU3NDExNmVhYzllZmZlZDFkZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq97BHAo3x3qe6jxfU8UVlQ0O0hB
MK8S7pQ9Cm21Wpe1Egdc0/76/QHfc1BZtk6Q6Ln7788m3OWufRswrhBppZiAJWtk
i/igpxZmUT09NE0OvwkN07wrjO3p7P22+AcC3UEkVvQFvt+A+IHQa9HjuB0HdjhI
v6oylXperj+ouOmhVx6rBuWh54+lck51zx7EqZExiYrX4BdXkJYEhepJ5UiiEqV7
5/2AUs2C/fJtxGM8KiJ+9dlHN8CzuieAYwSUkM7jwIJCXqg6hRNJ9sv+Mh8Nq1X2
bemHd0BvkBYnyZP42sEktihBQzfUefz9yOVOV7ONZtZTfPq5r07zLDntHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjV/Zepf9qtAotXQRbqye/+0d7bMB8GA1UdIwQY
MBaAFFMtHkFCSBm8wM1jfY7hQf6lhdANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQt
MTA3NzdmOWUzNjg1LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OGM1NzctOGY5OC00MGIyLWIwMWQtMTA3NzdmOWUzNjg1
LzEvVXkwZVFVSklHYnpBeldOOWp1RkJfcVdGMEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9p4k3l8
+ZU5WACkk9UksqH9ZLQ+TB4k3pKwPkuZdgqBFUpsWyUKkoLLJ1m8lpMJcjo286cw
PYyzQIHRPquOXrOpdpqk1QTYSJUqr2VLg+hU8vMN3QXXDVgq3UxefYAluNsgiwJM
CbHL1UXMnhXLqug0xfAQBbotAHAGIhDcZe6IFy50FX8Kdy5CpvS8yF9S9MOGcg+P
EIllF6BD8FDU+u82Cdj/jMLzsjnxi+MMn/+V7mocWuNxUM99Ls3HvvFLxps7YM4E
RwpmOpO2zYVgUqwuYiYs9/sKv2VV2LdZjhRgo98ym8TW6l2LdGofOUC/tKxxkNGE
3rygvdNRAxs7VA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:26 2026 by rpki-client