Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: JQCmntZGfI4UzHTbYTN6bZW2w7Sr8SS0Nat7F3XV5ok=
Subject key identifier: 39:B6:CD:DF:EA:3F:B0:2B:A0:59:F8:85:00:83:32:FD:FE:AE:8B:A9
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 019D38657239CE9025FDD05CD4D666AA4A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 0AB7
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: cZxrzzOWBqysI6yO3rW2wnW+BiqQ7rm3E+L/XP5G8Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:72:39:ce:90:25:fd:d0:5c:d4:d6:66:aa:4a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=39b6cddfea3fb02ba059f885008332fdfeae8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:c9:e5:ad:32:c5:4c:0a:b3:77:87:32:d9:
85:6e:76:66:12:98:f6:aa:59:d7:92:7c:b7:73:93:
dd:32:83:c4:bf:7c:a6:5b:c8:ca:1c:4f:00:64:a8:
93:9b:3c:4e:db:cf:76:2b:ef:d6:a4:a4:8e:75:db:
9d:eb:02:0c:f5:26:f4:ce:ba:1d:17:33:0e:0c:bc:
56:de:f9:aa:e6:90:25:e6:1b:29:29:c9:fe:20:97:
a0:d3:35:2b:6b:7a:32:c3:32:3e:da:b3:75:40:24:
ba:ec:48:e8:77:57:80:71:70:1c:7c:e2:c7:d1:08:
26:72:b5:3e:ed:a2:c8:74:06:5c:7c:1f:e1:25:d3:
4c:04:2f:f4:cf:92:36:ee:45:a1:ba:fe:75:51:31:
27:34:2d:b5:92:00:01:c6:d3:b6:54:96:41:0d:07:
97:41:85:c7:5c:3a:20:f0:1d:9e:c8:ce:e4:e2:29:
a4:56:d9:56:ff:d1:88:d9:4c:1e:98:ce:16:2b:42:
9b:48:32:7e:c8:27:e8:06:61:c3:d2:c4:7f:cb:e8:
21:18:94:60:57:1e:03:01:bf:e7:ab:e1:6a:74:1c:
e0:64:52:0f:ff:11:e2:a1:80:9c:c7:a0:6e:40:c7:
1a:59:31:90:22:d4:8e:e5:ad:fb:85:11:51:70:33:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:CD:DF:EA:3F:B0:2B:A0:59:F8:85:00:83:32:FD:FE:AE:8B:A9
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:13:58:1a:55:7b:9d:bf:03:6c:66:dc:4d:f8:54:6d:eb:cb:
5f:33:15:82:59:7c:56:0d:9b:23:a2:c9:58:6c:10:f1:40:9c:
17:a8:76:2d:c3:ea:02:21:90:bb:c8:de:0c:e6:32:9e:58:79:
4a:c0:98:44:32:ea:8e:ef:40:17:74:af:7a:d6:15:e2:db:d5:
e2:98:cc:07:b5:19:10:e2:fe:92:75:e1:54:cb:ac:bb:c7:eb:
fc:dc:93:63:61:f8:8d:d6:d2:23:46:51:af:ea:b4:83:46:44:
95:a4:53:c0:90:0a:b4:25:73:97:cc:22:8a:bd:e1:b0:64:2d:
37:57:c9:39:6e:de:87:cc:52:28:9a:bf:51:f9:06:35:15:da:
75:16:48:51:76:ef:a6:42:38:c3:5d:f5:9e:5c:45:33:09:ec:
d5:9f:b0:f8:b6:51:3a:0d:d4:2e:c6:5f:77:7c:5e:26:da:2e:
cf:47:c6:92:73:8d:c5:13:76:eb:e2:a6:aa:1b:bb:cc:2f:6f:
7c:7e:64:af:b8:b0:6b:3c:20:2e:db:3e:99:79:02:91:b2:90:
de:e7:4d:81:f5:9e:96:a0:d3:6f:cd:3f:63:28:77:e2:66:a3:
3e:59:84:be:08:e7:a8:20:25:2b:ad:c4:6b:de:22:0a:bd:a2:
c5:36:ce:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXI5zpAl/dBc1NZmqkqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZWEyOTc3OGJlYjI4MDAxODI5NGUyMzk1Y2JmYTAwNDJj
OGY3OGEwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
EygzOWI2Y2RkZmVhM2ZiMDJiYTA1OWY4ODUwMDgzMzJmZGZlYWU4YmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIzJ5a0yxUwKs3eHMtmFbnZmEpj2
qlnXkny3c5PdMoPEv3ymW8jKHE8AZKiTmzxO2892K+/WpKSOddud6wIM9Sb0zrod
FzMODLxW3vmq5pAl5hspKcn+IJeg0zUra3oywzI+2rN1QCS67Ejod1eAcXAcfOLH
0QgmcrU+7aLIdAZcfB/hJdNMBC/0z5I27kWhuv51UTEnNC21kgABxtO2VJZBDQeX
QYXHXDog8B2eyM7k4imkVtlW/9GI2UwemM4WK0KbSDJ+yCfoBmHD0sR/y+ghGJRg
Vx4DAb/nq+FqdBzgZFIP/xHioYCcx6BuQMcaWTGQItSO5a37hRFRcDMQWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm2zd/qP7AroFn4hQCDMv3+roupMB8GA1UdIwQY
MBaAFFLqKXeL6ygAGClOI5XL+gBCyPeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUt
OWY5OTYxZGMzODUxLzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNzdjZjAtOTA1YS00YTg5LWE3NWUtOWY5OTYxZGMzODUx
LzEvVXVvcGQ0dnJLQUFZS1U0amxjdjZBRUxJOTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBNYGlV7
nb8DbGbcTfhUbevLXzMVgll8Vg2bI6LJWGwQ8UCcF6h2LcPqAiGQu8jeDOYynlh5
SsCYRDLqju9AF3SvetYV4tvV4pjMB7UZEOL+knXhVMusu8fr/NyTY2H4jdbSI0ZR
r+q0g0ZElaRTwJAKtCVzl8wiir3hsGQtN1fJOW7eh8xSKJq/UfkGNRXadRZIUXbv
pkI4w131nlxFMwns1Z+w+LZROg3ULsZfd3xeJtouz0fGknONxRN26+Kmqhu7zC9v
fH5kr7iwazwgLts+mXkCkbKQ3udNgfWelqDTb80/Yyh34majPlmEvgjnqCAlK63E
a94iCr2ixTbOmQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:57 2026 by rpki-client