Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
File: uah5UDfdQPAYNz9HxZ4EohL1oFU.mft (raw, json)
Hash identifier: ucy+wAtmPJZLcoePu3v3njd0a9x3MvyxAThjjw3oRmE=
Subject key identifier: AD:9E:34:55:B9:4C:A2:0E:25:E3:45:B2:68:11:E6:12:5E:E7:3F:81
Authority key identifier: B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
Certificate issuer: /CN=b9a8795037dd40f018373f47c59e04a212f5a055
Certificate serial: 019D390A1D7D3B93053F16ECCAF489CD0814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
Manifest number: 1383
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: JGRc8gWxsOVbOpLY1p0YvVJjb3A.roa (hash: Wj8ZnZcpmyQBFn1WIawrKmviMNPdyAHSA5qDhEVw6AY=)
2: uah5UDfdQPAYNz9HxZ4EohL1oFU.crl (hash: XsKwkuQaNTndqrbRlpvppPOimrXVUzNd3yN9rcgAo8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1d:7d:3b:93:05:3f:16:ec:ca:f4:89:cd:08:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a8795037dd40f018373f47c59e04a212f5a055
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=ad9e3455b94ca20e25e345b26811e6125ee73f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:45:6c:da:4e:b0:b2:24:6f:52:25:09:4e:
b1:ef:37:06:db:ae:a2:05:b3:98:ce:66:6a:0c:79:
ed:b1:4f:20:d3:27:9c:79:98:c4:d6:f4:7e:f8:82:
0e:c0:89:7e:bf:3a:fa:2c:cf:9e:c9:db:db:cc:a9:
e2:dd:84:25:cf:8f:28:d1:99:a1:e7:09:a2:85:ca:
6c:b5:b4:35:ca:b7:d7:b0:82:fe:e4:75:58:05:7a:
5c:54:bf:00:7c:ec:b7:94:77:9a:b1:eb:5a:34:26:
f0:6c:9e:f0:0b:3e:2f:3f:7d:5a:16:3b:aa:35:54:
7d:37:fd:7b:02:70:a1:fc:a5:6c:16:12:25:67:5d:
84:dc:4c:29:56:2d:a1:63:13:db:1f:d3:c5:b0:3b:
4c:7f:4c:f4:22:66:43:00:a6:0a:90:66:c3:bb:76:
f1:bf:92:86:80:6b:20:84:da:22:62:9d:07:89:62:
ad:01:d9:f6:e9:a9:dc:cc:f9:8d:7d:2c:22:37:d4:
3a:74:42:04:9a:bb:96:7d:fa:58:45:c1:6d:90:16:
b5:a7:ce:71:1f:09:c3:70:70:c1:ba:7f:1f:d4:34:
08:ea:ea:50:04:7d:65:d0:f0:7d:91:4f:3c:40:28:
2d:03:18:74:3a:21:ad:88:e3:fc:4c:83:eb:67:cc:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:34:55:B9:4C:A2:0E:25:E3:45:B2:68:11:E6:12:5E:E7:3F:81
X509v3 Authority Key Identifier:
keyid:B9:A8:79:50:37:DD:40:F0:18:37:3F:47:C5:9E:04:A2:12:F5:A0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uah5UDfdQPAYNz9HxZ4EohL1oFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f3d326-154e-412e-b344-7d22b7684479/1/uah5UDfdQPAYNz9HxZ4EohL1oFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c7:35:f9:e6:5c:40:f7:0e:b1:09:6c:f1:ac:c7:f0:97:9a:
94:40:fc:67:bd:81:f6:a5:d2:bc:0f:e9:a5:48:a4:62:e9:ae:
83:18:22:b2:ca:87:85:cb:77:ec:e6:de:2f:8e:1a:07:b4:66:
5e:0f:73:88:6b:1d:29:22:ae:18:70:9e:2e:f8:fd:92:a4:01:
92:46:73:2b:44:68:3f:9e:45:bf:0f:56:f7:37:3c:cb:70:44:
02:02:9a:ed:f5:21:21:51:c0:1a:11:dd:52:93:72:58:6b:af:
95:49:f2:27:1b:82:47:97:3a:7e:65:78:84:4b:d7:84:01:ac:
44:24:58:9e:8b:83:83:40:4a:6a:ca:dc:56:04:ec:c8:cf:80:
fd:da:dd:4d:02:e2:3f:96:5f:c2:e0:12:1d:22:2e:66:ea:19:
78:31:c4:ed:dc:89:1d:0e:e1:02:67:82:8f:90:b1:e8:88:9c:
84:a1:94:09:2a:c5:a7:6e:96:83:a0:9d:b2:12:88:27:82:64:
fa:ed:be:90:05:b5:51:02:fd:18:a4:6a:4d:5c:84:aa:6a:f6:
bf:68:06:fd:4f:2d:ba:62:cd:77:45:69:d7:99:c5:b0:11:1c:
ef:63:1e:55:45:5d:e4:1b:20:d8:7d:56:7a:6e:bb:58:c8:15:
63:bc:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:07 2026 by rpki-client