Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
File: uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft (raw, json)
Hash identifier: g3kWt1UqhAi040VP7MfkyKx1oNy84NEXQCr15cMwKSs=
Subject key identifier: 32:EB:2A:0B:5F:EE:7A:8D:A5:F7:1C:6D:19:E4:73:1F:3C:09:D0:53
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Certificate issuer: /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial: 019D389BE78BEE77CA51313369F60A0E1787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: NK7cFKYMK_Qez5H6Ab99v18EXKw.roa (hash: Sy/Cc4qG/1KQp17eadKsXuNu4rKNRwOKSF7+JL5tyF4=)
2: WSF63vx3-3kzV57SCYN5uxEsnh4.roa (hash: Y5dUR1knuXpFVT1JaRCk2XwHEZb4ddAQx+uv00b5po4=)
3: uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl (hash: 3REph2nxSxAquFzWBwzAiZLyRrDrUwghTKp0W9JFX58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e7:8b:ee:77:ca:51:31:33:69:f6:0a:0e:17:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=32eb2a0b5fee7a8da5f71c6d19e4731f3c09d053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:45:67:b7:3b:27:ec:be:e4:b2:a6:00:47:
67:ef:f0:97:80:48:d3:ad:d8:59:45:4e:3e:d0:c7:
fd:25:ae:6f:f9:e8:dc:55:45:a9:e3:52:70:63:fb:
61:ab:18:44:62:ec:db:ec:42:f0:c3:55:50:9e:6b:
46:a6:70:e6:e6:ef:75:e2:b3:98:e1:5b:16:42:cf:
7d:ea:6b:57:ea:e9:20:6d:9f:66:86:32:8f:13:6d:
d5:83:9d:39:a6:a3:06:9b:d6:50:0b:8a:7d:7b:c4:
e8:f6:56:40:2d:96:0b:eb:6d:0f:3b:ed:f9:d2:28:
65:f9:b0:52:25:9c:3e:85:40:0f:d6:b7:c3:67:a4:
c9:f3:75:f2:cf:25:4a:5f:b3:e0:21:b8:ef:55:e8:
f3:82:52:e7:96:ec:bc:55:02:e9:ec:98:c0:4d:49:
ff:fd:4d:94:00:2a:c8:6f:94:95:d5:f7:c2:7c:25:
8b:ac:f2:19:03:d7:b8:90:44:c1:c5:0d:e7:bd:87:
f8:0c:c3:d8:9a:cd:a9:c1:f0:f0:4a:c2:69:98:39:
7a:80:00:0d:c1:5a:31:22:58:59:49:6b:e2:86:b6:
d4:ff:9a:ec:c2:ec:dc:05:3d:4a:a3:6e:c9:3c:73:
ea:c8:6a:d6:8c:ab:40:13:33:f3:b9:72:4c:d3:bd:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:2A:0B:5F:EE:7A:8D:A5:F7:1C:6D:19:E4:73:1F:3C:09:D0:53
X509v3 Authority Key Identifier:
keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:04:43:60:cc:17:07:68:ff:63:fb:0e:13:a3:6d:39:77:a8:
30:46:45:b1:29:f4:24:e2:92:5d:5f:23:71:6c:93:aa:cf:b5:
b3:15:c7:8d:f1:91:42:ae:c5:aa:d0:f8:37:52:40:60:ac:9f:
7e:33:33:54:c5:dd:38:90:5a:0a:54:1a:11:b9:11:a9:f3:1c:
eb:4c:ba:5d:42:d0:b4:41:c2:fc:a3:60:06:29:00:f0:9a:f6:
67:0b:2e:fd:b7:4c:58:03:5e:6d:fe:ad:3f:b4:56:49:d9:5f:
e0:9a:77:c8:0a:7f:e6:13:18:20:ea:dd:32:27:b4:73:de:6f:
84:93:7b:04:a9:68:13:a1:98:2e:53:81:55:1d:0a:75:a9:ed:
f4:0e:7b:03:94:40:5d:75:f2:3d:5a:46:97:d2:5e:64:58:9c:
ce:f2:ed:78:dc:cf:ae:f1:f6:db:6e:23:e3:85:a1:1e:71:9b:
c1:d0:2e:0a:be:0c:41:f1:5c:e0:cc:49:66:32:81:5b:5b:f6:
b0:c3:35:14:ab:6f:5a:d3:58:96:6c:49:76:8e:18:1c:93:39:
19:a3:65:d8:32:23:1f:98:db:3c:a9:0a:66:72:7b:83:81:9e:
99:3c:b6:88:5b:ce:39:24:b3:7d:a5:d3:29:be:b0:d7:f3:2d:
ad:3d:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client