Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: JRFAN7EFn7EXWpMaWcWbHisdRhtyFBpvI4kIips+/+Y=
Subject key identifier: BD:A7:20:17:BD:92:D9:F9:AA:96:FF:0A:58:58:55:27:AF:0F:0A:86
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 019D3977912F3028CC944AECDFD552D7478D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 18A0
Signing time: Sun 29 Mar 2026 12:00:30 +0000
Manifest this update: Sun 29 Mar 2026 12:00:30 +0000
Manifest next update: Mon 30 Mar 2026 12:00:30 +0000
Files and hashes: 1: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (hash: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI=)
2: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: 4zMgoplbwmp53TExBqDVoNcfWYiaJp3ZbmJAxH2bbLg=)
3: zEeP9jNbHcrziM4NoTdt_uL6054.roa (hash: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:91:2f:30:28:cc:94:4a:ec:df:d5:52:d7:47:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 29 12:00:30 2026 GMT
Not After : Mar 30 12:00:30 2026 GMT
Subject: CN=bda72017bd92d9f9aa96ff0a58585527af0f0a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:a4:81:e3:8f:7e:fc:cf:39:19:47:65:a0:
fc:53:70:43:ed:83:60:4b:e6:62:ea:34:8a:16:4f:
d3:a9:16:8e:e1:21:7f:1f:00:38:f9:34:0e:b5:19:
8d:7b:e5:f9:18:08:cb:1f:43:10:11:cc:c9:b0:25:
dd:29:32:43:e5:13:ab:93:c0:18:b0:05:1b:a3:54:
e6:3c:71:cc:ed:f1:a1:ef:87:a2:89:51:e0:47:68:
e7:51:99:44:22:ee:12:df:5e:6c:d1:3b:4c:3d:84:
5f:09:02:8c:83:6e:6d:b7:0d:78:a2:9c:08:7c:47:
bd:49:46:b1:4d:9e:6c:25:50:83:86:1e:71:61:b4:
82:c0:9b:2c:99:24:75:d7:60:e5:7f:59:5e:58:d2:
be:8d:1a:4d:f0:1a:9f:f0:a1:bf:30:83:c5:c9:9d:
45:b4:c7:a8:d5:f7:44:36:cf:c8:b0:6c:97:b9:8c:
fc:f3:4b:b2:07:72:9d:30:84:1b:6b:eb:7c:0e:05:
d5:d0:dc:5e:90:57:9a:f8:ea:4f:21:0f:34:ef:31:
67:0f:67:1c:7c:13:c0:81:49:21:50:1f:9a:0c:d5:
e9:3c:2c:5c:95:e5:8f:4d:20:af:b8:f8:63:ee:14:
f7:58:c3:f8:32:8d:18:75:59:87:69:fe:cf:04:cb:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:20:17:BD:92:D9:F9:AA:96:FF:0A:58:58:55:27:AF:0F:0A:86
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:b4:01:8c:8d:6f:87:0e:e0:a5:3c:11:60:a8:31:94:50:14:
79:d8:b1:cb:9f:74:bb:19:a4:04:14:1a:01:5b:db:f9:72:21:
de:8b:1f:39:47:51:d7:93:62:38:5e:e5:65:f8:06:0f:e8:51:
42:9c:ac:52:7f:1f:14:bd:f3:96:b0:91:bb:01:b6:95:8e:7c:
b9:ad:55:c8:52:cb:c1:7c:62:8a:a2:5a:25:73:6f:96:b4:78:
9b:80:11:b4:88:59:c9:db:78:cd:a0:b7:b7:e7:08:9b:f1:f2:
30:cb:91:30:27:97:e9:97:5a:0a:40:83:3a:23:95:5e:74:1f:
08:cc:eb:69:53:5f:3b:c9:4d:f9:ea:31:b3:dd:bf:73:60:69:
b3:45:2e:ac:0d:de:98:0b:27:30:d5:88:12:fc:9e:87:98:b5:
2b:a6:24:3c:f2:89:c4:66:9a:cb:22:b2:5b:ac:25:11:c1:9e:
51:7b:bc:6f:75:c2:93:de:ed:2a:a2:c9:93:14:80:ec:0b:bb:
54:ad:b5:c4:e1:91:b3:87:d1:de:49:28:54:7d:de:bd:6f:0a:
b9:b1:5c:cf:73:ec:4e:fc:47:b2:c9:c1:03:7f:77:83:ab:7b:
21:f0:1b:21:ab:d4:7d:90:5a:38:00:f6:9f:a6:67:cc:62:a2:
d6:9d:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:25 2026 by rpki-client