Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
File: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft (raw, json)
Hash identifier: gAT08nE3zh46FqeFDGRo9CpqEZuSqNABEoOAQN4olG4=
Subject key identifier: 64:13:32:41:D4:EF:ED:74:94:BF:DF:08:31:BD:3F:3B:82:98:53:A7
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 019D37C031AAFBCCC8F2594D5F1CF12C3D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
Manifest number: 108F
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: lV6fG7v-JYhWwetIbl-AbpN0MIU.roa (hash: dOBrOCMXoxUPk0ZtfpGogwfFIA0UzWIsAc21AeDfbNM=)
2: uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl (hash: lg06O0nxxNrE0bRERh6srA3ZlzYFMMSpJU7vdbaRbuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:31:aa:fb:cc:c8:f2:59:4d:5f:1c:f1:2c:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=64133241d4efed7494bfdf0831bd3f3b829853a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:c8:68:0c:fd:32:3c:13:a9:b2:ac:7c:91:
ee:df:f1:05:a7:1a:cf:48:80:bf:0f:e4:42:ea:69:
a2:e9:a6:64:7d:14:e6:8a:4b:cb:d0:d5:11:b9:26:
b9:fe:9e:b4:25:34:39:bb:6f:d2:d6:78:8b:0b:f0:
a7:4a:e9:31:41:de:9f:16:cb:86:ca:f3:3b:9e:9d:
c7:3d:75:fb:73:70:a9:03:5c:ab:1f:3f:b3:e5:01:
16:2f:08:eb:af:a9:8e:86:a5:31:e8:d1:03:42:ad:
35:b3:fb:c6:9e:dc:58:bf:c3:aa:61:d3:c6:91:38:
18:9a:1b:fc:6b:6c:bf:e0:01:41:35:54:32:71:72:
90:81:ea:e2:35:38:a6:c8:a7:f4:45:54:73:4e:3e:
35:db:07:a8:a7:c4:bc:67:90:f6:03:d8:37:62:f4:
9e:29:4f:cd:d0:3b:df:30:40:42:2c:37:2d:66:0c:
c0:5c:8b:b0:e2:0b:aa:f3:69:8d:f2:e3:01:58:6a:
cb:a1:00:f5:dd:dc:95:f3:4a:0a:41:81:02:cd:be:
91:ce:0c:8e:d2:b1:3f:7c:c7:d3:0c:33:ce:0e:6a:
4d:80:55:56:b4:a2:c9:94:78:35:a3:45:3b:ae:da:
b8:be:7d:1c:e8:2d:af:39:b5:5c:f9:e5:e7:d9:be:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:32:41:D4:EF:ED:74:94:BF:DF:08:31:BD:3F:3B:82:98:53:A7
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:a5:35:7f:27:47:3a:8b:dc:3b:7f:26:ec:9c:4a:5c:b3:
1a:a1:0f:3b:41:3c:a5:51:64:0f:6c:b1:dc:46:27:3e:d4:06:
e7:87:32:c7:47:f2:bf:19:e9:42:8b:52:b0:5f:75:72:f3:bb:
79:df:08:06:13:ff:c3:05:1c:a3:bc:49:88:5e:43:f0:e1:44:
2d:80:56:45:11:b4:e6:8f:57:b9:90:27:7f:cf:11:17:b6:a7:
48:3f:7e:37:18:1d:69:23:da:30:42:8d:dd:63:a2:93:02:49:
c2:ae:4e:1d:45:ca:39:13:59:09:ed:c1:8e:a1:c2:86:6b:21:
30:1e:25:54:26:1c:fc:81:cd:fa:63:80:58:b1:84:90:ce:ed:
ae:18:cb:c4:e3:e6:41:15:99:a2:f3:7d:2b:72:78:06:e8:3d:
d4:e9:df:28:d5:12:81:c9:07:87:04:2e:86:47:f0:84:74:40:
7d:6b:61:8d:68:4e:24:f3:0a:b6:89:dd:10:4c:e2:5d:fa:e0:
cd:38:84:c6:d7:3e:20:bb:5c:61:6a:f5:ef:6f:a6:65:65:ad:
27:b1:f1:4c:2f:da:1a:20:a5:4c:33:23:2f:88:ea:91:65:fc:
4b:dd:83:67:58:f3:ef:25:4b:b5:bc:e6:f4:56:57:c9:d7:31:
66:44:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:37 2026 by rpki-client