Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: d3mLXT8xPn/Mhj44zwx4bndM3L/56kdS3zyFyvmlWh0=
Subject key identifier: 6D:A4:59:39:CE:9A:A9:04:75:53:13:AB:8D:A4:67:7F:5D:11:2F:B3
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019CE222731FC40B43992CF66F1EB8CC7EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 0133
Signing time: Thu 12 Mar 2026 13:00:34 +0000
Manifest this update: Thu 12 Mar 2026 13:00:34 +0000
Manifest next update: Fri 13 Mar 2026 13:00:34 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: RnFJJh0x/u5Q8XglYSCkiRcEJEnKhu50r+MSazrD510=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:73:1f:c4:0b:43:99:2c:f6:6f:1e:b8:cc:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: Mar 12 13:00:34 2026 GMT
Not After : Mar 13 13:00:34 2026 GMT
Subject: CN=6da45939ce9aa904755313ab8da4677f5d112fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:23:c1:2b:01:5b:1f:1d:92:4b:f7:1f:c7:
54:5c:9b:8e:b4:d9:e4:f8:c5:af:b0:d1:09:cb:25:
37:9f:9e:4f:a1:23:41:a0:9f:06:6c:08:7b:99:2b:
b3:65:9c:c9:5e:35:30:ea:1d:eb:69:fc:bb:63:9a:
0c:0c:d0:9b:6c:78:ff:df:23:cf:1c:eb:f1:00:67:
e6:44:bc:90:62:70:22:61:8b:09:3c:c3:0c:3f:dd:
e9:2a:08:24:c9:17:83:fc:33:b0:9d:7f:58:1d:1a:
56:1f:65:01:22:c8:7a:5f:29:5a:4c:61:7f:87:17:
aa:96:e1:ad:39:87:bf:71:89:29:3b:88:93:6a:2e:
64:3d:ed:ec:74:e3:c1:bc:b1:4b:c1:a4:a7:fe:ef:
01:64:f3:4e:90:0c:88:08:6c:d6:7c:fa:67:3f:28:
be:25:9e:aa:0e:d7:f9:38:17:6d:4d:ee:e8:d6:00:
6f:f8:27:26:7b:68:21:5a:c2:de:e0:40:16:9f:c7:
76:7f:f4:cc:d3:74:8f:e1:db:8f:2b:25:1d:57:72:
0d:cd:6e:94:45:bc:00:5b:33:d6:1d:a6:68:1c:3d:
0c:c8:7e:21:24:79:b4:cb:b5:a0:e0:d1:91:e8:07:
34:89:8d:ea:8f:14:6e:5f:4d:c3:5d:2f:09:53:fd:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:59:39:CE:9A:A9:04:75:53:13:AB:8D:A4:67:7F:5D:11:2F:B3
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d5:3b:5d:2a:1d:4b:7e:a4:87:d5:b1:82:cc:11:97:81:65:
6d:e5:a1:c5:80:93:fd:cf:9d:df:a1:52:2b:32:df:b8:c2:b1:
e7:5e:2a:f6:d9:fd:97:4d:e8:8a:98:40:54:c8:0b:d6:3a:e2:
f8:0d:05:df:a7:9c:dd:ee:7c:75:5c:77:ae:e6:90:51:f5:74:
d1:1a:69:f3:13:72:f4:59:1f:6f:e3:a2:70:64:c1:f0:d1:d2:
fe:e1:7d:23:b6:ec:8d:50:39:5b:e3:79:75:06:87:bc:7e:32:
2c:ab:4a:14:4d:29:5a:7a:6a:3b:8c:9e:33:b3:2f:1a:64:25:
98:05:37:5c:2b:29:34:7d:30:e3:26:38:e5:7b:ac:8e:86:44:
3f:5a:6d:25:b7:21:21:a4:f0:ff:ed:8e:ba:b4:a4:de:c6:7d:
cb:6e:c9:14:74:b1:94:50:70:c7:fd:c8:77:09:c8:3c:7f:e5:
11:72:6d:87:90:c1:a3:82:cd:7f:4a:2a:3d:1a:3a:aa:7d:3a:
7e:d3:c1:c2:2b:7a:5f:c8:36:34:a3:3f:6e:a3:bd:f0:8a:9f:
98:fc:84:2e:89:b0:e7:d2:95:82:26:a6:f2:b5:cb:3a:d2:50:
d7:52:4a:0c:07:92:c5:8a:18:ad:17:3e:f9:dd:47:d9:35:99:
2d:a0:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:31 2026 by rpki-client