Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
File: uTp0QF6_eyUcz7unwrIOwV-djkg.mft (raw, json)
Hash identifier: nO+wQ55oiPog2PNJelWozND2VVx4HA1OOx+iXLQBO1U=
Subject key identifier: 02:79:B6:6B:EA:71:C2:8F:20:53:20:DC:3B:B4:C5:71:47:98:BF:AD
Authority key identifier: B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
Certificate issuer: /CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Certificate serial: 019D38662B2768100F1681974875D4F32459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: 5IDTAUNYBa9GaRCcF0vtCC18VIA.roa (hash: QzvywvqILM8YjAB+vkAqO5QMbphjJfyMQHKh8+KGuQA=)
2: uTp0QF6_eyUcz7unwrIOwV-djkg.crl (hash: PjuN/7hOMnJDAfUm+YgziXw+JU54o8smuR+NVXtUt5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2b:27:68:10:0f:16:81:97:48:75:d4:f3:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a74405ebf7b251ccfbba7c2b20ec15f9d8e48
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=0279b66bea71c28f205320dc3bb4c5714798bfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:dc:4e:ac:ea:f3:6b:21:02:08:7b:5a:6c:
2e:a0:b5:3a:20:fc:fa:50:6e:8a:44:67:fd:5a:6c:
b2:11:75:bd:da:9a:91:ee:55:44:89:6e:28:40:c3:
93:80:9c:00:70:8f:7e:f6:7e:89:90:1c:b7:a2:f9:
b7:39:00:bb:fd:64:47:69:20:12:05:9f:2e:75:9f:
14:61:ef:99:67:d9:95:72:f8:e2:9e:9d:82:30:81:
ef:69:dc:5d:df:f1:37:ed:a1:0d:c3:1a:d7:3b:4e:
6b:9c:34:6a:9b:fd:e5:69:db:8b:52:74:40:ca:44:
d5:3f:e0:55:69:5c:59:2c:1f:e9:bf:1c:0b:9c:60:
31:96:ab:c9:93:55:5b:d7:99:d9:48:30:4a:72:5c:
c9:b1:1a:b1:21:24:18:c6:da:d5:d7:ae:14:6a:eb:
b4:74:a3:62:6d:24:02:f5:ef:02:b1:04:82:3d:40:
20:57:c7:07:6c:c1:5f:8a:b8:38:23:de:8a:b2:da:
f1:b0:3b:64:65:cd:77:25:c5:0b:cd:02:2e:4e:38:
b2:79:75:63:26:d2:b0:59:7d:6c:0b:68:59:9a:d8:
26:f4:e1:18:b1:ce:9b:f5:c9:01:47:0f:e0:f6:60:
ce:f9:60:f8:58:37:8e:f5:33:02:29:39:51:09:d8:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:B6:6B:EA:71:C2:8F:20:53:20:DC:3B:B4:C5:71:47:98:BF:AD
X509v3 Authority Key Identifier:
keyid:B9:3A:74:40:5E:BF:7B:25:1C:CF:BB:A7:C2:B2:0E:C1:5F:9D:8E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTp0QF6_eyUcz7unwrIOwV-djkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/682da0-d3ef-49f0-bea4-0a134b6535c4/1/uTp0QF6_eyUcz7unwrIOwV-djkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e2:3c:63:01:0e:3c:e4:53:32:0f:9e:e4:0c:b4:7b:41:02:
79:97:6a:3e:30:d7:34:b3:ae:82:a0:1f:84:fc:44:28:95:f9:
ef:86:bf:5c:f5:4b:34:ad:c5:74:aa:a2:4b:0c:dc:8a:ff:ba:
ff:2f:0d:eb:f7:eb:50:f6:61:f5:bc:d7:d4:12:df:0f:d1:10:
92:80:27:2f:91:8f:05:d0:eb:cb:98:f4:2f:d7:1c:01:dc:70:
aa:ba:c8:e9:21:d2:ed:d3:b6:d1:10:54:8f:52:b9:f1:e9:7d:
32:31:2a:77:76:a9:85:08:ad:73:93:55:ae:b4:87:ac:d5:17:
9b:5b:1b:d9:06:e9:62:5b:d2:38:a3:2d:6e:71:16:49:c5:d2:
93:14:b0:26:df:1b:55:e4:a3:da:92:81:a5:de:19:a3:5e:3a:
c9:66:87:2f:37:21:a9:6e:8b:e1:0f:27:89:a1:8a:ff:2d:39:
98:a1:d8:50:77:63:c2:33:c1:25:00:00:23:d4:c2:86:42:cd:
8d:59:d4:7c:23:5a:53:55:b8:a2:0f:48:d8:8c:42:8d:9f:f0:
3c:e6:15:6a:b8:31:8d:c4:01:de:ff:0d:54:bf:31:27:6c:47:
fd:79:d6:7b:e9:de:82:89:95:d4:9e:88:0b:11:b6:ee:61:88:
3d:e7:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client