Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier: A5z8cwhijMBsCV0e0CRXsTYz5+IFmegZ08QGLsqeOP4=
Subject key identifier: 04:0E:57:14:B9:B0:3D:40:5C:7E:D3:24:49:2C:3C:18:BC:E2:61:F1
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 019DCCE1BB0416D946861AC68F77DAC2054A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 03:00:38 +0000
Manifest this update: Mon 27 Apr 2026 03:00:38 +0000
Manifest next update: Tue 28 Apr 2026 03:00:38 +0000
Files and hashes: 1: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: kR2TWh0DOV5lsE7W8GLHE3ss1ahVVG/01CGB+H7SM/k=)
2: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (hash: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:bb:04:16:d9:46:86:1a:c6:8f:77:da:c2:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Apr 27 03:00:38 2026 GMT
Not After : Apr 28 03:00:38 2026 GMT
Subject: CN=040e5714b9b03d405c7ed324492c3c18bce261f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:ba:d5:3c:fd:fb:bb:67:77:50:63:25:35:
4c:29:a3:67:22:b2:4a:db:66:37:7d:ab:dc:98:d4:
84:78:a8:3b:41:45:f5:3b:b8:52:fc:f0:14:90:4a:
2b:67:1d:4f:b1:5f:31:7e:f4:dc:4a:ea:0c:4d:80:
00:29:7a:ac:2f:b3:31:70:aa:e3:28:74:31:1d:28:
0c:bb:63:28:d3:f5:8f:a9:2a:49:e1:63:de:21:5f:
a1:b0:27:48:47:c2:a0:35:be:a9:b9:8f:b2:41:c2:
3f:b0:f6:11:3e:de:6d:f2:c2:6f:77:9a:7e:79:f5:
22:0d:ed:7f:d0:d6:d8:63:1f:40:2a:84:a5:7b:55:
15:4f:e8:3b:e5:cd:fb:3c:10:08:e7:f5:52:bc:b1:
5e:f3:0d:bb:4b:c1:10:46:c1:9a:ba:0b:39:fe:9f:
29:07:ba:9d:e9:7e:64:9d:b8:74:7a:ef:97:5e:a2:
ed:69:08:50:fa:52:44:6a:00:fb:39:52:e6:a1:80:
a8:90:90:7b:f3:6f:f4:12:91:7d:0a:05:41:e2:b3:
88:1b:ec:34:a5:12:e5:d5:5b:8d:0d:c1:10:21:f0:
c4:11:80:46:7d:03:59:93:cd:f4:a8:2f:18:e8:77:
ea:ce:c4:1d:b6:59:9c:e2:1a:d8:fb:7e:8a:c6:b8:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:57:14:B9:B0:3D:40:5C:7E:D3:24:49:2C:3C:18:BC:E2:61:F1
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3a:44:6b:8e:a2:86:5e:74:89:98:b8:c9:6f:a9:62:0f:dc:
4a:58:b7:ab:bc:68:88:f4:44:f6:a3:42:8e:dc:8d:69:d6:a4:
8e:c1:9a:37:f9:59:89:ce:9f:65:5c:f3:fd:96:ff:07:2e:97:
7b:d6:42:44:47:53:59:1a:ed:f9:dc:2c:f5:4c:20:0a:9c:c2:
14:a2:d2:0d:37:8f:ff:47:7a:fd:e3:15:e9:fe:cc:a1:83:8b:
46:2b:cf:e3:d4:41:03:22:16:42:e3:be:ce:ad:1c:c3:20:94:
5b:c8:b6:eb:aa:8c:5d:fd:9c:36:c7:3e:c8:f7:08:47:5e:8e:
ad:41:08:c1:8a:a5:32:1b:f1:34:53:09:3e:50:09:1a:99:bc:
af:b0:92:6e:cd:a5:68:06:78:67:1d:9f:a0:8f:7e:b0:18:45:
1a:50:d4:67:c2:99:78:a4:ed:5d:4c:06:65:79:10:f0:71:7f:
34:c5:23:ca:a7:b1:ba:59:91:63:09:66:0d:9f:54:e4:6b:34:
3f:fd:0b:25:a5:d8:17:22:4b:f6:74:84:ee:55:a6:87:14:1c:
68:5d:93:05:f3:90:11:fe:35:b5:4c:c3:5e:d0:3e:e3:18:f7:
9b:33:38:43:f2:0a:c5:a5:a1:d4:39:8e:e6:49:6c:5e:a3:2f:
86:7c:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:30 2026 by rpki-client