Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: LN3is3Lg8F3SxI4+Rot+TOMD+Gx/yUKpQEudkRyzURw=
Subject key identifier: 49:DA:C9:11:3C:CF:D2:16:72:C7:27:65:B0:1C:39:BC:B9:DB:04:BA
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019D389C1F7DC0ECD993B10022DBEDD3210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: GWE48yzN0j4WK/aenqhmQw+cQKoKT1YXGG7NVRNVC3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:7d:c0:ec:d9:93:b1:00:22:db:ed:d3:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=49dac9113ccfd21672c72765b01c39bcb9db04ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:01:c8:10:66:1a:71:56:48:e9:6b:62:f3:
d5:e2:53:b0:1b:22:f6:24:af:97:81:36:04:2d:50:
9e:a4:b8:93:e6:d6:f9:e7:5c:6e:c0:f9:b3:9b:4f:
04:88:96:c3:12:41:74:15:3c:02:6a:27:aa:76:2e:
70:63:c3:71:39:20:c4:a1:af:2c:42:cb:94:3e:52:
6b:db:33:34:b6:ba:f4:7c:21:59:2b:1f:c3:b1:5d:
54:87:4b:db:a8:3c:21:cf:94:cb:0c:be:d6:5e:59:
1f:94:eb:7d:5d:8e:6c:5c:23:3b:24:99:33:82:8f:
aa:04:93:17:87:1b:d4:8e:dd:fd:20:5b:fa:9e:2d:
c4:bc:1f:32:7e:35:f9:dd:89:53:9b:63:25:b7:c8:
7b:98:e3:ae:e7:f4:ac:14:a6:d3:f5:55:5b:2e:b2:
54:5e:8d:44:72:17:97:86:0c:3a:7d:94:73:19:2e:
f6:1a:ef:a2:32:07:11:2b:8d:b9:64:c9:f5:22:2a:
20:07:87:fd:a3:ef:15:2a:87:0d:6b:54:02:a6:13:
d3:58:13:0b:c8:01:05:73:d6:cf:e8:c8:e9:bf:fb:
2b:ed:25:87:6d:7d:47:96:81:b2:83:f2:e7:89:8f:
6e:6e:c6:5f:c5:02:b5:cf:9b:bd:ba:69:2e:2b:46:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:C9:11:3C:CF:D2:16:72:C7:27:65:B0:1C:39:BC:B9:DB:04:BA
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c9:c7:11:0d:bc:11:a9:0f:91:47:94:a7:c2:33:24:38:a8:
55:cc:ca:8e:3a:5b:17:a1:64:67:b8:6e:ee:e8:e4:0f:92:fc:
b6:0a:93:0e:09:2a:14:2e:8c:60:76:a0:f5:da:0b:f3:c3:4e:
42:fd:12:c1:35:93:8b:12:be:90:66:f6:7d:df:cb:27:03:cc:
f3:0c:24:b7:ee:35:77:da:d8:2c:0e:7b:e6:44:c6:60:64:b5:
32:e2:88:fa:1c:1b:4e:7c:bb:2e:17:91:97:d9:79:2c:bd:27:
a5:f0:ef:68:8f:ff:c4:91:64:a7:95:63:fa:35:b8:79:87:6d:
00:f0:9c:fa:78:03:e2:a0:61:d3:09:96:ce:aa:1a:52:2b:3b:
18:94:65:cf:2c:e1:97:98:28:73:3b:e7:2e:c4:c9:85:42:64:
48:b2:f8:b9:97:8a:07:84:8b:38:9c:d4:4e:af:f6:b1:68:9d:
a1:ae:6d:4e:bd:3d:64:97:80:9c:79:d2:0c:c8:e9:2e:b6:f5:
a3:bf:93:8a:17:25:ec:d8:05:3e:be:48:10:47:e5:ee:c9:3b:
a5:de:38:ba:6a:bf:f2:5c:a1:a8:e1:51:91:d5:0f:2a:39:68:
7c:4f:1c:2e:f8:80:20:61:67:6f:b8:f0:52:65:5e:ab:04:f4:
d8:f2:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:36 2026 by rpki-client