Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
File: uaoBqzUmuOu4r7F7mKcSfw9UykU.mft (raw, json)
Hash identifier: TJpUSRTxLvbPwlu7C6kcbgWoqE9U5qLuJpsHUfZckCg=
Subject key identifier: FA:1A:D9:48:8D:6F:42:1F:1D:87:78:8A:F9:C3:0A:62:26:EA:3D:68
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 019D3A8A78FBBDFBE4DF6DF3CE2039EBBBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
Manifest number: 1673
Signing time: Sun 29 Mar 2026 17:00:46 +0000
Manifest this update: Sun 29 Mar 2026 17:00:46 +0000
Manifest next update: Mon 30 Mar 2026 17:00:46 +0000
Files and hashes: 1: N3jaze7YJRe2qAy_Yl4PgjOPV78.roa (hash: J9hAHBk9hnYVFJwAFN6kZ7iaHqqOjhd7Ue4bGVAtGs4=)
2: uaoBqzUmuOu4r7F7mKcSfw9UykU.crl (hash: 5PGqM3MzDZnOO36/+0iNJjHgiXMIY5L3o8OxYGzBxi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:78:fb:bd:fb:e4:df:6d:f3:ce:20:39:eb:bb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Mar 29 17:00:46 2026 GMT
Not After : Mar 30 17:00:46 2026 GMT
Subject: CN=fa1ad9488d6f421f1d87788af9c30a6226ea3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:bd:0f:73:65:88:fb:b5:89:e4:ef:fc:78:
bd:b7:b5:59:41:8a:31:a2:43:d2:a0:9b:ec:75:9b:
b7:a4:bc:9f:24:96:76:31:36:e9:9f:00:29:20:31:
70:50:6b:23:15:75:0b:b4:3c:ce:e8:b5:db:bf:0c:
f8:5d:1c:d3:47:00:05:92:bf:64:52:80:d3:ad:03:
14:ab:61:d6:cb:52:60:d0:11:2c:58:4d:18:0a:38:
85:83:14:4a:6a:1f:32:23:df:3c:5f:7c:c8:17:f6:
4b:a8:87:b1:c9:90:ce:ae:3a:42:cf:3d:7a:cf:59:
bf:b5:af:6a:4c:7e:40:2f:a2:1e:5a:13:e0:ca:9b:
bc:cf:59:0d:cc:94:c8:51:99:3e:87:70:b1:8a:b9:
fd:c6:e3:d6:d4:0f:84:97:3b:14:6f:19:d2:99:f1:
fa:70:d9:39:f2:78:ca:5f:81:1c:14:c9:ed:b2:45:
3d:a2:b5:21:22:da:3b:b5:e0:db:d7:69:31:ca:33:
90:dc:d0:b0:80:42:df:04:22:73:a5:24:31:33:0e:
e6:61:04:82:0e:63:0b:12:d4:41:6a:9f:80:ca:56:
93:aa:5b:52:30:cd:a0:81:ad:34:23:4a:51:1e:7e:
f8:71:7c:2d:69:db:94:84:ac:8d:42:5e:8d:38:bd:
ff:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:D9:48:8D:6F:42:1F:1D:87:78:8A:F9:C3:0A:62:26:EA:3D:68
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:28:ac:fb:22:6b:9c:3d:62:6f:03:70:92:86:e4:39:5b:41:
dd:5a:a2:c3:e4:41:45:6e:ec:82:70:81:6a:a9:35:51:3f:ff:
98:dd:4a:8e:b3:d4:1b:31:ca:52:d5:f7:5e:b6:9b:53:69:b1:
b6:c8:24:15:3e:33:1b:98:03:4f:18:47:59:63:39:f7:46:24:
d5:20:20:59:b2:21:29:04:55:a2:2f:1d:b5:1a:6b:75:5b:a9:
4a:c2:8d:9f:65:5a:b9:49:57:22:d5:86:f1:48:01:c0:7a:29:
1a:c6:e6:b0:dd:0e:3d:1c:3d:63:32:50:ac:1f:6a:e5:95:06:
4a:de:c5:9d:62:95:73:02:cf:dd:5d:dc:f4:1c:39:9b:25:e3:
3d:c0:bf:f8:64:dc:26:14:2a:57:b0:26:66:9b:3a:d1:96:86:
9b:2f:27:6b:1f:db:12:8a:77:a2:6e:60:77:88:c4:b7:3b:f1:
cd:71:5b:9e:eb:4e:1f:93:b6:37:91:5a:c2:e6:b5:20:84:00:
14:e6:4b:6c:7e:73:32:95:a7:5b:a9:37:0d:30:6c:8d:07:6e:
35:88:46:ba:d3:c4:f4:41:c1:b0:75:c4:24:b9:51:12:8d:ab:
ca:a4:8e:d9:3f:66:d0:ac:74:8d:10:f1:b4:78:b5:ef:a0:49:
3e:dc:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:20:52 2026 by rpki-client