Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft (raw, json)
Hash identifier: +e04zQl3ekk/i0pexsxGddXXZjVEQIGGdmZrr3LwoKA=
Subject key identifier: 53:22:E6:30:84:F3:4A:16:5B:46:B2:9D:DB:24:04:DD:72:F4:5C:06
Authority key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
Certificate issuer: /CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Certificate serial: 019D37C0322D97613F6BF815A2B97605D068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
Manifest number: 0BC3
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: KP9ZK8Mm0n7oCIGFwbCMB_IJtD4.roa (hash: 9E7/dOsgEeSFLc8nXYfohFpko6PoMkA7jZYSR5wWOOU=)
2: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl (hash: B1oKuUjUNiVwk685adLyag1iobIFNZ9Qtc5InBKHJgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:32:2d:97:61:3f:6b:f8:15:a2:b9:76:05:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=5322e63084f34a165b46b29ddb2404dd72f45c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:5b:ea:a8:91:7d:7c:40:4a:6e:d5:27:e5:
48:7c:78:04:6e:da:a6:9a:b6:01:27:3a:ef:86:ba:
c3:ac:1e:6e:fc:1b:6f:b4:71:fb:a6:2c:67:0f:f1:
1e:48:74:83:4f:0a:ee:a9:7e:d7:78:98:cf:13:72:
5d:92:b9:04:ad:4d:23:4f:86:b5:81:24:6e:26:e5:
e0:ab:73:6e:3a:2b:76:cd:ca:5d:0a:62:46:12:ae:
1c:10:2f:c4:03:b6:bf:e4:9f:86:cc:00:7c:54:a9:
5b:39:4c:26:b4:04:7b:cc:c7:bd:cc:3a:40:95:5f:
fe:ce:35:fb:da:2c:db:e1:1a:23:8c:78:57:08:18:
97:7f:1e:9e:b6:82:7b:a3:a2:08:8e:86:6d:f4:3e:
e7:cd:5f:52:1c:77:df:ef:08:89:e8:13:e3:61:df:
91:4c:51:71:0e:e8:6d:27:b8:40:23:3c:57:db:1e:
4b:03:54:9c:f4:47:53:ed:7e:7a:e3:9c:83:b8:21:
26:e2:b7:9f:b0:df:cc:34:3e:77:7d:aa:9a:aa:04:
79:a1:ac:47:86:40:26:a0:0c:98:23:fe:ce:27:b1:
39:a1:de:fe:92:8b:e8:db:1a:1e:0b:6f:b1:63:e8:
28:af:34:3c:25:b8:0e:73:ce:b4:59:7e:5b:8f:51:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:E6:30:84:F3:4A:16:5B:46:B2:9D:DB:24:04:DD:72:F4:5C:06
X509v3 Authority Key Identifier:
keyid:BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:fc:55:b9:59:3a:00:22:0f:3b:a4:19:53:23:59:b1:b6:
bb:2b:0f:8f:06:e5:cf:d8:ee:3d:d5:d7:bd:51:73:d0:6d:a8:
a7:e6:d5:da:b6:46:78:78:19:11:4f:bf:cd:72:d8:78:3a:1c:
0a:a6:bd:1a:9d:d2:69:6c:db:3f:cc:ce:95:2e:22:6f:ba:03:
82:18:ee:82:30:f9:86:87:40:66:c5:9a:e6:8e:6c:6d:a0:c0:
38:0e:8b:b9:19:7a:33:ec:2b:db:35:a0:e9:95:a4:c2:91:38:
df:eb:e6:ae:28:ad:c1:27:3e:eb:a5:64:68:71:73:0b:04:74:
c0:9d:2e:a7:41:4c:de:1b:1b:8e:52:a0:b9:17:50:84:a5:ac:
6a:7a:fd:ae:a2:0f:02:47:71:95:4a:f0:63:d1:5a:06:d2:61:
88:d2:ec:c8:6c:b5:23:66:8c:88:5f:b3:bb:20:1f:cb:09:46:
a8:51:95:e5:50:55:b9:ec:0c:17:79:22:dc:bf:22:da:9e:a2:
79:6f:31:f0:17:ea:e5:78:7a:de:0a:14:01:7f:b5:e9:85:2d:
4d:2f:5c:56:42:80:da:80:77:54:f4:0d:e6:24:88:c4:dc:59:
30:b4:07:16:dd:f8:dc:a1:c0:96:96:33:95:12:67:f1:25:3b:
40:87:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client