Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: kVUhH+OKRr+MNA4wqc/AN6PNrjU8bZlr992ct3gbj5Q=
Subject key identifier: 68:B8:56:0A:64:56:CD:D3:FE:D3:EA:E1:2B:AD:2F:69:ED:55:08:22
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 019D38665893AB0B574947EAABF7A7787345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:02:04 +0000
Manifest this update: Sun 29 Mar 2026 07:02:04 +0000
Manifest next update: Mon 30 Mar 2026 07:02:04 +0000
Files and hashes: 1: CQOdCpBLSHHQ6AramZa1bXJe9DA.roa (hash: XyLg4h/oghxr7miII9KG3Zvqwxb2XQxtLrLG6x3uqBI=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: gD90a94bLq486O3GSVHDfPRkf5mezfcrO7MoleYhiT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:58:93:ab:0b:57:49:47:ea:ab:f7:a7:78:73:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: Mar 29 07:02:04 2026 GMT
Not After : Mar 30 07:02:04 2026 GMT
Subject: CN=68b8560a6456cdd3fed3eae12bad2f69ed550822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:32:1d:dd:1b:2a:ad:7e:3b:68:5a:1c:66:
b4:f7:49:fc:54:e5:3e:8a:92:89:82:6c:13:75:3f:
9e:7f:b5:bf:99:18:e0:35:5f:3e:3e:df:e5:3a:33:
38:6d:42:14:3a:71:31:fd:41:5b:3b:51:d9:f6:d8:
da:3c:ed:a7:6a:a4:f1:ee:11:87:c4:30:44:88:9e:
93:53:ea:7a:12:79:24:ef:40:04:14:c7:ce:b2:8c:
41:3e:81:5b:9d:6a:6a:e9:54:f1:b8:51:13:84:98:
eb:af:ed:5b:7c:7d:f7:89:cc:fa:27:cb:1f:5d:96:
a4:1d:53:21:77:f9:6f:1d:55:a0:0e:a9:e2:0d:70:
e2:44:c8:dc:bc:45:b2:1e:db:d1:77:52:54:ba:77:
38:12:f7:91:91:03:c5:fe:60:b5:64:4c:3f:60:c3:
91:43:42:bb:ff:82:51:a3:0c:70:43:08:1f:9f:d6:
bd:e2:6b:6a:c7:fe:34:9e:f9:ce:45:27:90:db:50:
96:87:94:b2:11:4c:c0:bf:28:75:92:e7:43:a4:52:
92:f9:4b:22:f0:43:82:05:53:4a:9f:d5:be:2e:10:
68:a1:be:83:95:ab:bb:be:da:d8:ca:82:ae:ab:03:
57:ef:01:ea:d4:fc:2c:77:12:26:de:56:e7:f9:0f:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:56:0A:64:56:CD:D3:FE:D3:EA:E1:2B:AD:2F:69:ED:55:08:22
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:4d:96:c0:34:84:fc:2f:07:4a:cd:cf:46:c8:ce:fe:c8:
74:d9:b4:36:ba:d6:57:7d:59:b4:23:25:13:da:82:05:27:41:
4c:ee:43:0b:48:d9:f2:98:b1:86:8a:15:6e:e0:e0:c0:52:78:
3f:66:83:c7:f3:b5:b8:42:fd:0e:ec:90:d3:37:20:70:e4:6f:
60:0b:05:80:51:0c:10:4d:12:65:71:27:b4:1d:ca:24:a1:9e:
ed:67:32:ba:34:e2:61:b1:5d:9f:17:fa:0d:3c:b4:eb:d6:05:
06:25:89:55:2f:82:15:e1:34:58:f9:57:d8:3f:25:fa:30:36:
c6:aa:60:18:5d:f9:a3:6d:7b:f8:bb:6c:64:af:38:06:a8:d9:
0a:15:67:4b:28:05:0b:00:ab:54:bf:9d:37:46:ec:08:18:fa:
21:44:1a:39:dc:84:5c:32:0b:73:c8:3a:c3:ba:5f:a7:d4:78:
fb:ad:f2:19:37:fe:68:50:22:96:a3:04:5b:31:87:87:a2:90:
16:2f:35:3a:9d:58:6e:9a:d7:1a:06:82:d3:0b:f4:2e:f5:62:
89:d6:a5:54:e0:ca:86:c2:ad:67:1c:f5:67:3d:dc:f3:49:94:
da:01:47:90:c4:80:d5:93:a6:fa:d3:11:09:2e:62:e2:b4:45:
17:79:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:46 2026 by rpki-client