Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: yasv4XWi9XscKQAdtkHvH/cqRBk9CqYDb7+4l6tKmiI=
Subject key identifier: 9B:8A:82:93:21:75:0A:C7:B2:75:E0:54:4F:88:D4:02:AF:16:5D:C0
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019D3752B66CF375707C80ADC2F16FF25A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 1769
Signing time: Sun 29 Mar 2026 02:01:00 +0000
Manifest this update: Sun 29 Mar 2026 02:01:00 +0000
Manifest next update: Mon 30 Mar 2026 02:01:00 +0000
Files and hashes: 1: 0ucWFZcFyD58o8zTdzJyfEAC5zk.roa (hash: lMcCuoQ+b6EBN3pFu3tzR6OUCs2zcvSlVr6M8lwbMuU=)
2: bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa (hash: it3vJQNoSAFPdXxbk0rvKR5rwALiR1gzaPHvmGFvmfg=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: oD7+0L8TuUEssK6je9vRXuZqd5YznS45v6cIyprqH4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b6:6c:f3:75:70:7c:80:ad:c2:f1:6f:f2:5a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Mar 29 02:01:00 2026 GMT
Not After : Mar 30 02:01:00 2026 GMT
Subject: CN=9b8a829321750ac7b275e0544f88d402af165dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:1a:04:d9:28:d3:ae:92:17:7d:70:9d:0c:
ac:05:41:80:3d:82:a9:47:87:a6:6d:59:dd:5f:de:
5c:af:53:89:cb:fb:77:c2:bf:0f:66:2e:8f:52:0d:
6e:71:d1:19:b7:55:c1:02:66:58:56:32:b0:28:79:
a5:af:4a:06:06:46:eb:1f:6f:2d:3b:ba:c4:40:1d:
a3:7e:ae:a0:f9:06:ba:8f:02:f9:fc:36:cf:c4:4b:
f9:76:66:7e:44:5a:bc:83:41:62:9f:d8:d5:d3:57:
93:47:d2:7a:9c:b8:fb:da:39:68:a8:14:ba:75:da:
32:9d:10:9c:26:28:ab:94:39:da:9f:6d:da:d3:6b:
79:05:7c:db:99:07:f9:86:5a:90:c8:ae:bc:77:6e:
5d:82:b9:85:86:5f:cd:b1:f5:a6:75:cc:50:59:1b:
ee:1e:f6:f2:f0:4e:32:c1:05:44:6c:9f:9f:9a:ad:
8e:95:6c:03:5e:67:a4:70:5e:7a:58:9b:7a:7a:07:
67:e6:d7:4d:f7:0a:d0:29:6d:97:fd:7e:22:03:4f:
14:66:54:2a:c0:85:f4:13:d2:c2:45:e0:b1:88:46:
d3:fc:43:12:0d:22:59:b4:b7:c6:a4:41:4b:c4:9d:
dd:af:a8:3c:6a:ab:1b:69:f9:ec:af:49:13:1b:c7:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8A:82:93:21:75:0A:C7:B2:75:E0:54:4F:88:D4:02:AF:16:5D:C0
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:80:6e:fc:a3:04:c0:70:89:31:b2:19:0e:34:cf:06:df:f3:
92:99:2c:1b:fb:42:38:1b:99:98:70:44:cc:69:0a:1e:95:04:
36:72:c6:e4:81:c9:d3:96:17:0c:e5:70:f6:15:ab:fc:d5:4c:
53:45:13:7b:31:b6:4e:4b:24:8b:d7:6d:55:20:71:16:f7:9a:
1b:69:a2:86:32:2b:e8:e0:f1:25:c3:d9:dd:97:ee:01:c7:aa:
3e:3c:6c:e2:47:f4:db:c8:2c:3e:52:d8:7f:97:52:41:e3:9d:
dd:40:90:6e:a9:bb:84:44:99:0c:5d:06:79:7c:a5:b8:81:94:
a8:02:c2:f0:1b:71:0b:09:fa:1a:9b:51:70:e7:da:29:3a:10:
45:2a:45:2e:b5:9e:76:d3:a6:e2:c4:01:44:a0:00:01:e6:31:
14:7d:86:01:c5:dc:5e:e5:8b:db:44:36:1a:12:37:7c:d5:89:
6b:14:74:c0:6e:38:fb:e4:80:3f:57:56:14:b8:0a:86:90:a0:
29:e6:7a:46:ec:c1:36:d9:62:ce:1f:ce:d4:78:06:1c:f4:84:
1a:9c:3e:09:86:2b:4a:32:a6:40:d7:fe:80:95:1d:d3:b2:66:
c7:1c:1e:e2:fd:25:66:6f:55:db:53:5d:bc:6d:f3:7a:e6:88:
b0:e1:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:44 2026 by rpki-client