Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
File: uHk6g7BixN6WkELwnBcoBmY2_cM.mft (raw, json)
Hash identifier: sNTS7iUNpsnuVQYpI+RLCEfAQy0KVFMWOBsazgHjoo4=
Subject key identifier: 90:9B:04:0E:90:4D:0A:76:96:FD:C2:38:F5:85:47:BE:F2:9B:6E:AA
Authority key identifier: B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
Certificate issuer: /CN=b8793a83b062c4de969042f09c1728066636fdc3
Certificate serial: 019D389C493B369E9FB3D247353867B112C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
Manifest number: 08EF
Signing time: Sun 29 Mar 2026 08:00:59 +0000
Manifest this update: Sun 29 Mar 2026 08:00:59 +0000
Manifest next update: Mon 30 Mar 2026 08:00:59 +0000
Files and hashes: 1: 73yo1hBbnpG-KqrmwMRQGWnQVsc.roa (hash: RW+71Uv4a5/FINdlj+y0Wdwc6hifhlBtDx//ZdfSom8=)
2: uHk6g7BixN6WkELwnBcoBmY2_cM.crl (hash: w7tmlIlgzL+g+I7QsJJdtNaOgA2PPikAhJ7V2dA//as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:49:3b:36:9e:9f:b3:d2:47:35:38:67:b1:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8793a83b062c4de969042f09c1728066636fdc3
Validity
Not Before: Mar 29 08:00:59 2026 GMT
Not After : Mar 30 08:00:59 2026 GMT
Subject: CN=909b040e904d0a7696fdc238f58547bef29b6eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:49:f0:72:76:c1:dc:36:15:dc:85:bb:76:
29:b5:57:6d:94:53:05:e6:51:65:e3:0d:b9:b8:6f:
78:11:95:44:e5:97:fb:40:ea:58:b0:e4:da:1c:5f:
12:53:1d:c0:59:6f:2a:05:a5:a6:78:f1:40:70:3b:
35:4a:94:dd:70:07:16:fc:73:f8:7e:06:f2:8c:f8:
ed:0b:db:72:95:37:c4:4e:79:14:6c:16:97:14:85:
8b:4a:d4:f4:7c:92:31:2d:43:94:ea:71:98:16:16:
f4:3f:89:d8:44:d8:17:81:6c:b9:82:a0:44:76:fb:
e3:74:55:58:17:8d:6d:e9:02:9d:9a:fc:75:b9:ba:
4b:02:51:e3:56:16:0c:78:93:1f:a5:a6:a8:c3:f0:
52:54:89:b5:29:01:09:ab:28:02:1c:95:c3:d0:0b:
02:d6:29:5d:50:2b:03:28:56:50:4a:02:70:54:79:
1e:97:38:3e:3e:b0:09:7f:1b:ae:5f:60:08:d0:8f:
a9:dd:f2:59:0f:61:48:67:51:a6:85:bc:d1:b4:29:
c1:87:43:12:fa:6b:04:51:1d:0c:b7:5e:4d:49:2d:
a4:bc:d2:fb:53:18:0f:48:66:63:44:dc:88:8c:47:
4a:68:15:3f:27:63:f3:c8:5f:72:d6:2a:3e:50:cc:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9B:04:0E:90:4D:0A:76:96:FD:C2:38:F5:85:47:BE:F2:9B:6E:AA
X509v3 Authority Key Identifier:
keyid:B8:79:3A:83:B0:62:C4:DE:96:90:42:F0:9C:17:28:06:66:36:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHk6g7BixN6WkELwnBcoBmY2_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/79c741-6fea-4d3c-a840-5623f0c564bf/1/uHk6g7BixN6WkELwnBcoBmY2_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:bc:ba:0e:b9:dc:a8:ef:32:a0:de:ce:a4:ce:04:03:bf:
aa:aa:be:74:37:50:d8:a0:95:cb:cb:31:52:84:48:7e:56:c8:
1d:9f:21:5c:26:82:87:8d:16:05:e9:b2:0e:4b:5c:77:dd:a3:
64:e6:77:56:4d:6b:c9:25:c3:34:1a:b7:f8:4f:e5:f1:ba:3a:
7b:7f:47:7b:8b:1b:6a:13:d8:ea:c6:47:98:df:66:bc:fe:84:
eb:81:e0:f1:78:90:97:99:db:c0:84:a9:66:f3:49:a9:80:63:
06:a4:51:70:64:f1:b9:d1:a0:46:c1:4e:e6:a6:d5:45:d6:87:
0d:f1:13:9a:40:b9:09:21:bd:84:5c:89:df:a4:6d:59:9e:08:
02:83:3d:1a:03:bf:87:78:f7:f1:fa:37:84:ce:bc:f9:f9:de:
50:ab:86:2a:a7:7e:cf:08:4e:0c:da:cf:5a:bf:d9:4b:3f:ca:
d2:f3:91:11:b3:85:62:ad:4d:72:e0:c2:d4:f9:3d:64:40:09:
f4:1f:af:c7:85:49:02:f5:18:e2:a2:95:fc:95:f9:89:be:69:
08:1d:26:29:6c:8d:77:f8:b8:41:f4:13:a1:11:28:ae:02:5f:
35:8b:89:b0:96:3e:fc:4b:f8:8f:2f:10:92:b6:4a:7d:03:54:
04:f3:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:05 2026 by rpki-client