Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File: uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier: qXYcvLEdkW85I8l+GmUvn9IsTsBMwlqYc5RTKjRtmFA=
Subject key identifier: AB:9F:5C:0E:63:CC:9E:D9:4F:50:80:01:7A:7B:5E:D5:FA:DE:7A:D4
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 019D38D331773F56541C6AC9F54A59FCBD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number: 0F96
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: TSmkEZq1s4JhgnGrVpGYTe9i5hM.roa (hash: vB+j/jUyEh0/4hWABQTMGfScyt4CG7R/SgKDOFAehts=)
2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: falrScbk15eQoHpHX4sYGnSOEmLeKsfyGlAsTMOlEcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:31:77:3f:56:54:1c:6a:c9:f5:4a:59:fc:bd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=ab9f5c0e63cc9ed94f5080017a7b5ed5fade7ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:ce:bf:ec:11:cc:26:4c:05:a7:70:67:20:
42:d6:63:35:48:f1:89:6d:bb:5e:97:48:7d:70:4d:
f2:05:8b:c5:52:b9:ed:3c:59:32:c2:3d:7b:87:e7:
0b:0b:d1:e6:3f:3c:8e:e7:3e:1f:71:8f:16:d4:6e:
f5:1c:05:4a:d3:9d:ed:da:e6:5c:c9:df:00:4d:03:
e6:50:00:e2:ea:e9:c7:4d:1c:d2:e9:5a:65:b1:5a:
27:88:95:98:66:74:3b:42:cc:0f:73:47:a4:fb:b6:
a7:ad:ec:a0:ce:c1:81:d4:2f:cf:99:90:27:61:68:
0b:34:15:f6:10:03:8c:9b:36:a0:f0:4c:d1:f6:a9:
c0:46:a3:e3:09:91:94:20:79:35:ac:56:7f:7a:6e:
a3:86:cc:f0:ba:a4:81:90:d3:0a:ae:2b:a8:97:e4:
71:10:06:fb:48:85:04:af:22:58:cb:5e:82:55:e3:
ea:8f:21:bf:8f:a2:d4:c1:42:4d:a8:4a:9e:c4:ef:
65:37:9a:1c:37:ee:04:a5:a5:3e:a7:c2:03:5e:14:
6e:f2:1e:71:5d:5b:4a:2d:d4:49:c0:23:b8:2a:9b:
c4:50:09:5c:ae:c8:d3:4a:10:37:57:8a:3e:05:dd:
1d:3e:9f:b0:c1:ba:ca:8b:11:35:40:40:a0:27:3f:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9F:5C:0E:63:CC:9E:D9:4F:50:80:01:7A:7B:5E:D5:FA:DE:7A:D4
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:71:a6:7f:15:d3:6d:db:f5:79:ec:b3:3c:3f:0c:fc:15:
24:42:ea:d1:d0:6d:9e:43:79:46:fd:28:04:2e:60:73:e2:aa:
68:68:f3:cc:70:44:8d:df:b2:63:3f:fe:c5:16:13:50:d8:7c:
86:96:48:eb:fc:6b:62:c2:cb:c0:cf:c8:b6:e0:d6:c8:52:47:
44:38:f8:9d:99:0c:38:d3:52:0c:2e:3f:43:b1:68:71:da:02:
39:ab:66:99:6e:bc:53:20:d4:21:ee:d0:d5:20:fb:20:f4:c1:
f6:1a:d2:36:29:8b:35:f0:72:1c:8f:b3:dd:c2:5a:b9:66:7f:
c8:40:8a:30:ab:79:eb:60:96:32:60:62:69:7a:31:65:5f:51:
d4:87:80:3e:93:98:03:8f:11:39:e3:0b:d6:64:49:13:8b:0a:
a7:49:11:80:b1:bf:22:f1:bd:b9:74:52:fd:f7:62:57:a7:2f:
bc:9d:52:22:53:9e:8e:e3:d8:88:b5:be:c7:4d:5c:93:55:89:
12:76:a6:30:0e:28:ae:64:de:6b:5f:2a:ce:77:a9:99:67:9e:
67:8c:5f:32:f4:3c:7e:df:58:b1:e3:15:aa:1b:e8:5e:9f:8d:
73:30:b1:03:c2:1c:b5:6b:ae:c0:a5:db:ad:bc:40:7e:a3:fb:
fa:2e:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:57 2026 by rpki-client