Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft (raw, json)
Hash identifier: Aj4KOluLjNcn1rwpO3xRN3yLcr0MRX9kqwZuXJmpaiM=
Subject key identifier: 72:84:FF:B5:AC:F3:B6:DA:FC:B4:00:2B:76:FD:47:6A:3B:73:38:BD
Authority key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
Certificate issuer: /CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c
Certificate serial: 019D38D2A2F76F37ABAA673CDE6AEB654D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
Manifest number: 013D
Signing time: Sun 29 Mar 2026 09:00:21 +0000
Manifest this update: Sun 29 Mar 2026 09:00:21 +0000
Manifest next update: Mon 30 Mar 2026 09:00:21 +0000
Files and hashes: 1: uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl (hash: zwrY3OU3SEbrO2D+JfzCV6R+ejMIIDmACv4Npn6MoSM=)
2: zd2YY232foFztKAVe_hqygCGOBs.roa (hash: WYlwfqh2Q7yj5vEWYIxMIxEey2q+2TK2T+nh6BP9btI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a2:f7:6f:37:ab:aa:67:3c:de:6a:eb:65:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c
Validity
Not Before: Mar 29 09:00:21 2026 GMT
Not After : Mar 30 09:00:21 2026 GMT
Subject: CN=7284ffb5acf3b6dafcb4002b76fd476a3b7338bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:30:8a:7f:f8:37:1a:0e:5e:10:9f:7b:ce:
40:1f:cd:4a:9f:f2:b5:45:69:19:e7:60:31:cf:44:
7c:fd:d9:bf:47:fd:f8:3f:bb:b5:59:86:0f:f0:a8:
c0:dd:dd:ed:6b:d0:c2:ec:74:46:e2:ae:36:16:8d:
60:af:cd:2a:23:7c:22:ea:9a:a0:c7:b5:fb:2c:cd:
a0:c3:54:ff:af:b0:8b:ec:c7:88:2a:37:64:78:87:
e1:e9:9e:63:a5:e5:24:e7:fb:a5:8f:b3:ca:d0:7a:
7f:c7:78:9a:7b:0f:55:c9:b3:17:8a:92:19:79:3d:
b1:16:00:c4:11:c3:ed:e3:09:ac:10:15:37:b6:ca:
92:c0:94:55:c1:6d:d0:a8:a4:5d:c8:9f:fa:33:59:
17:cb:35:1e:52:7b:40:3c:12:49:c0:e9:24:f5:c8:
2e:fb:82:97:d6:2d:0d:b8:6f:ca:81:d8:85:77:53:
41:19:2d:d8:b3:da:0f:5a:6a:a6:20:40:83:8d:4e:
e1:c7:2a:11:53:6f:76:2a:53:83:ae:56:e3:6f:55:
ca:a9:34:7e:92:67:68:24:06:68:55:b2:14:e2:3c:
11:02:8f:f3:d4:78:93:36:fe:bc:38:90:bd:fa:b9:
0d:64:9c:b9:0e:3c:a1:12:d0:55:fe:d0:cd:31:9b:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:FF:B5:AC:F3:B6:DA:FC:B4:00:2B:76:FD:47:6A:3B:73:38:BD
X509v3 Authority Key Identifier:
keyid:B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a6:dd:d9:54:da:dd:88:9c:b5:04:ee:9f:03:70:8b:a1:c3:
6c:fd:d7:e3:a8:54:7c:d5:48:5f:96:20:03:a6:74:22:ab:0a:
d1:d2:14:d3:6a:cf:e4:d4:fd:e8:19:28:f7:9d:e7:34:8d:cf:
22:b0:2d:81:5d:a7:c1:2c:6b:d2:12:bc:76:44:1e:bb:10:0a:
b5:d0:5d:aa:8e:09:a2:1d:8c:e3:3e:42:de:3c:d7:1f:1e:e4:
d9:bc:46:73:03:31:9d:20:5d:28:64:cf:d2:0a:56:e1:4f:3d:
6d:95:21:d2:82:02:d7:c6:5d:cd:10:45:48:5c:f7:20:b0:75:
51:10:ac:32:25:b8:83:50:13:ef:95:b6:75:6a:5e:4d:ea:58:
03:fd:6c:07:ed:98:cd:96:e8:92:d1:59:7e:b8:41:ca:4d:75:
c4:09:e5:11:78:59:e1:44:88:bb:20:d8:19:8b:c0:da:a0:73:
63:a3:5c:cc:c5:4d:28:8d:77:62:57:df:f4:30:ac:1a:6f:95:
27:d5:cf:bc:a1:0e:92:de:fc:d7:09:b6:b5:74:8b:75:93:f4:
51:e7:57:67:77:3d:6e:13:68:4b:57:28:40:83:42:95:d0:b9:
89:1f:da:1b:5f:0e:97:b5:8c:72:66:1d:b5:e1:7f:74:26:9b:
78:c7:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:08 2026 by rpki-client