Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
File: uDtc22Xsxb10bYt0mCgxptjcEFM.mft (raw, json)
Hash identifier: C1zIBGENm41psz2T8VyM0WErxIZSd0Y43tTIIzCPIXE=
Subject key identifier: 17:18:AB:DC:B4:0A:AA:D1:02:95:C3:E7:21:80:06:EA:F9:B3:17:EE
Authority key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
Certificate issuer: /CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Certificate serial: 019D3A1C491FBA034C98E9506D8659C317CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
Manifest number: 110E
Signing time: Sun 29 Mar 2026 15:00:25 +0000
Manifest this update: Sun 29 Mar 2026 15:00:25 +0000
Manifest next update: Mon 30 Mar 2026 15:00:25 +0000
Files and hashes: 1: lfLo0D5ENgt6llv50YfdmRFAQiw.roa (hash: hkIz4lm2sH7tAlv2qyrzV3aAv7hwXQo0U1p5z28Zvks=)
2: uDtc22Xsxb10bYt0mCgxptjcEFM.crl (hash: 0BeH+tA+O0ysLY9hSB1WndxI4Yj6mUB4au3/LdCwkNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:49:1f:ba:03:4c:98:e9:50:6d:86:59:c3:17:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053
Validity
Not Before: Mar 29 15:00:25 2026 GMT
Not After : Mar 30 15:00:25 2026 GMT
Subject: CN=1718abdcb40aaad10295c3e7218006eaf9b317ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:42:dc:10:94:3f:7b:87:71:22:47:3f:c4:
18:a9:95:ee:f0:ff:61:7c:4d:ed:90:af:24:5d:d1:
33:e9:8e:51:d0:1b:a3:99:11:9a:5f:be:82:07:dd:
3d:8d:86:e0:fa:15:aa:1d:0a:c9:88:01:c9:e7:b5:
f1:07:8b:20:f4:5a:4c:d4:64:b0:c7:a4:00:53:e3:
72:fc:d8:77:db:c9:24:1c:b0:5a:a4:a5:a3:9c:88:
74:1f:c8:45:52:93:59:cb:10:95:45:37:11:78:84:
f1:cf:6a:a6:f2:e5:2b:83:73:13:b2:da:36:b5:c8:
9a:74:c1:5d:da:4b:79:06:10:91:f0:5a:6c:57:ae:
84:a9:24:0c:6e:fd:a7:0e:ec:60:5f:e6:d1:89:39:
ea:b6:07:5f:10:4e:78:3e:6f:e7:c2:9b:2c:15:e6:
4d:62:de:2b:11:2b:bc:45:3e:d8:85:9b:e0:0b:0a:
0b:5c:de:f8:98:a4:a3:61:6b:c3:11:7c:09:4a:bf:
54:cd:d3:e3:29:68:37:e8:e0:cd:dc:5d:8e:ce:7e:
bf:21:cb:03:c3:75:52:ae:87:42:f8:db:16:03:0d:
6a:ad:ed:75:12:b4:ff:2d:43:03:93:fd:8b:79:66:
f3:f0:fb:01:82:ec:d6:54:85:b1:90:5e:1d:7f:7f:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:AB:DC:B4:0A:AA:D1:02:95:C3:E7:21:80:06:EA:F9:B3:17:EE
X509v3 Authority Key Identifier:
keyid:B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:43:00:92:b4:6b:2a:4d:91:90:06:06:d2:d0:3b:08:a7:47:
20:db:7a:5a:0e:53:7d:f4:6e:a2:42:25:eb:7c:b8:59:25:08:
3d:d3:37:0e:ef:fd:a7:48:41:11:aa:7b:81:29:24:56:db:3c:
f8:81:99:ef:b0:60:60:d2:a7:56:c1:1d:b0:35:91:34:94:a5:
af:99:1a:5c:63:40:1b:5b:fe:ce:23:3a:1f:c4:03:e7:5f:71:
59:c8:90:78:7e:7a:84:33:ad:80:c6:48:98:b9:6e:ac:b0:a6:
37:6c:30:7f:76:48:a9:28:05:d3:5a:8b:db:98:5f:f0:2a:af:
ba:c8:f1:5d:b5:ce:94:ab:74:76:7a:be:cb:cc:c7:02:33:d6:
0a:8e:91:55:94:46:36:be:59:1a:1d:4f:b2:cb:e5:a8:8d:8f:
fa:2f:d9:1b:11:bb:5d:60:3e:e1:2e:83:31:5f:5d:ee:59:d1:
81:6c:f4:33:5f:cd:59:72:f4:15:37:7e:c2:ed:3d:c3:88:5e:
c0:21:40:ca:8f:0f:12:97:38:ba:ff:98:4c:78:a5:45:37:08:
f7:a3:09:87:e0:29:9f:92:a0:5b:5b:a9:9d:0f:61:20:c4:8a:
90:15:a4:59:bc:bc:80:6b:4c:6c:92:aa:ee:ea:a4:85:da:15:
60:88:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:25 2026 by rpki-client