
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier: ZsIfgoyFICjMVHlqIx/CYsAXARjI+wK4xQGCPnSreXU=
Subject key identifier: 6C:8A:CA:A1:47:89:D6:C8:00:A0:66:E7:55:86:41:8F:6C:61:EA:C1
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial: 019D37F6E821F4A8CF9A1918F409B79DF206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: dwIfNutOF5SxDnHE2ip0RRB0Wh0.roa (hash: gXhE8k/fw7vLGXFxBW+3kIf0O3u5m7PjyaKQg10z4O0=)
2: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: Ma20eXmpGAsVupqm9sFczmuYIqjIB6i65atxOunPch0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e8:21:f4:a8:cf:9a:19:18:f4:09:b7:9d:f2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=6c8acaa14789d6c800a066e75586418f6c61eac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5a:a2:54:c6:12:b5:27:49:3a:d9:48:9a:1c:
a3:20:ff:5b:59:64:4d:18:36:a6:86:fe:f4:8a:28:
85:27:ab:d5:a7:d5:48:d1:ed:be:da:f8:ca:d8:9e:
0d:99:a2:c4:11:5c:0d:3d:2b:c2:8e:c5:f3:75:82:
b8:e4:ae:1f:fa:e2:91:25:b6:10:72:f7:00:45:04:
09:39:d8:3b:07:44:c6:ae:3a:24:58:57:b9:08:b4:
b7:36:98:51:dd:ef:b5:a4:6c:14:eb:64:e3:c2:8a:
01:c1:3c:fc:ec:97:98:48:f6:a8:2e:ed:13:c2:7c:
d8:72:03:80:8a:30:c7:48:d3:77:5e:bd:72:87:ba:
b1:ba:ec:f4:9b:2a:3b:c4:2a:20:21:b3:82:66:87:
8e:e2:99:3c:27:0f:c8:6a:6e:1a:75:38:06:af:ba:
3e:3c:95:69:2c:5e:5d:4c:d3:bb:51:68:11:8b:4a:
bc:fb:a8:f2:10:45:fe:f5:53:f7:7e:9d:b1:75:31:
df:15:e6:1c:6e:cb:98:b6:54:89:d5:36:1d:7c:24:
07:4a:a6:e7:e9:da:71:de:71:84:f5:9d:6d:fd:06:
76:ba:b9:8f:f1:30:33:99:c2:a7:d7:30:19:41:23:
b3:ab:d8:d7:9f:68:2e:73:ba:bb:87:be:50:23:cf:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8A:CA:A1:47:89:D6:C8:00:A0:66:E7:55:86:41:8F:6C:61:EA:C1
X509v3 Authority Key Identifier:
keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:88:75:d0:b7:ab:92:7b:d0:45:7c:8c:b0:71:e9:c1:89:04:
f8:3e:c7:97:11:de:77:f8:1c:2b:20:40:03:b4:a1:23:c3:c4:
03:a7:9c:90:3d:0a:b2:28:66:29:12:a2:d0:19:32:52:ef:8d:
4f:8a:06:74:48:e6:d1:07:1a:b1:70:c0:6d:81:12:6b:08:0f:
80:75:5b:11:b1:27:9d:38:4c:b2:38:ce:c3:9f:36:a7:cf:d3:
a2:7a:4c:5d:a6:6c:ef:23:fe:ed:a0:f1:e3:1b:0a:0d:67:84:
8b:6c:a4:fd:61:b8:99:94:7a:ee:45:8b:ef:4d:2a:d6:11:9d:
ea:17:44:f5:2f:18:5a:87:71:02:9f:69:3e:00:6c:de:97:af:
be:17:e7:8b:c1:99:01:17:0c:f4:e7:46:27:06:cf:44:c3:75:
5f:75:47:e5:e5:92:2b:4e:8d:60:c5:96:18:5f:a7:04:2c:88:
7f:48:fb:dd:b1:d8:6c:e9:3f:8d:2f:1f:fe:51:11:ad:d8:42:
3b:00:c7:5b:d5:76:3f:2d:7f:4b:88:1f:f1:f4:6c:ed:ed:32:
0b:b6:b7:68:2f:87:d3:61:42:4f:5a:1f:2c:6f:e0:80:ef:83:
ff:3a:aa:46:4d:2a:1e:65:1e:cc:7c:a6:c8:e0:1b:99:66:09:
d2:91:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:03 2026 by rpki-client