Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
File: uBsD4ih1uwcLG3xY6touS7Gqvn8.mft (raw, json)
Hash identifier: uYioaB2TU0yNaelESRFcdwg69vMzSUCVvSh5365Y430=
Subject key identifier: 3D:52:FD:64:F9:B1:89:27:AA:82:52:EB:2F:41:79:BE:77:48:06:EA
Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Certificate serial: 019D37892824C867C434AFDB74E29930E302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
Manifest number: 165F
Signing time: Sun 29 Mar 2026 03:00:28 +0000
Manifest this update: Sun 29 Mar 2026 03:00:28 +0000
Manifest next update: Mon 30 Mar 2026 03:00:28 +0000
Files and hashes: 1: ehhS-PlShngxUe_B1uzjREBHyds.roa (hash: wXojw0rsAtH+WtMEf5EbeLc9pSbiMo3/LWAM/pzQOy0=)
2: uBsD4ih1uwcLG3xY6touS7Gqvn8.crl (hash: KD3WALhCvqZDLwxc5JrQDZd9rWPZQBTZlSsZMp2cQ90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:28:24:c8:67:c4:34:af:db:74:e2:99:30:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f
Validity
Not Before: Mar 29 03:00:28 2026 GMT
Not After : Mar 30 03:00:28 2026 GMT
Subject: CN=3d52fd64f9b18927aa8252eb2f4179be774806ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:d2:16:af:cf:d1:af:10:74:d8:f7:aa:79:
b0:8e:a6:40:13:d4:03:1e:a3:da:db:e1:85:95:41:
8f:4f:e7:af:87:0a:d6:c6:cb:57:d4:96:80:eb:28:
d3:46:9f:e3:30:8c:77:04:78:f6:df:a5:7b:46:1c:
cc:31:a9:fa:04:99:87:91:2f:0b:c7:e8:10:18:1e:
91:93:db:b2:ba:64:9a:21:e3:69:cb:4e:b9:0f:89:
d1:bd:62:6c:ef:66:ae:76:e5:1c:a3:04:05:03:42:
dd:22:63:04:5d:32:f3:f9:c0:75:09:db:9f:4d:c3:
9c:82:c1:8a:17:20:ef:20:4b:b4:8f:d3:21:73:e3:
54:1b:e1:16:27:00:dd:a2:e6:6d:7b:cb:34:b2:b0:
1f:b5:31:c5:99:3b:8c:55:cf:3e:2c:e6:fe:60:26:
da:b1:38:01:97:5c:b6:b0:b4:77:09:ba:c0:89:17:
27:b5:39:88:98:0e:27:64:3a:74:70:43:36:d2:53:
45:1b:ff:5d:a5:e9:90:9f:ac:66:b3:77:9f:54:35:
da:3c:d8:d6:fe:60:47:33:1a:45:c0:eb:fa:91:76:
1d:06:31:a4:b4:05:ec:6d:2d:50:d2:dc:bc:f8:78:
25:af:73:04:7c:0d:d9:9b:72:9c:fb:cf:7b:04:bc:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:FD:64:F9:B1:89:27:AA:82:52:EB:2F:41:79:BE:77:48:06:EA
X509v3 Authority Key Identifier:
keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7b:41:c7:db:4e:0a:27:fb:a4:67:fe:43:a8:3a:87:bd:2c:
27:fb:96:9b:bf:a0:f6:ab:20:19:06:b8:71:ee:69:01:dd:63:
76:22:62:5d:d0:83:bb:17:03:a2:22:05:f5:25:88:2e:25:07:
bc:ef:ae:da:3e:68:0a:3d:46:e5:da:02:0a:6c:33:10:2a:a5:
97:b8:a8:62:49:d9:9b:6d:9a:8c:6b:e4:47:a8:36:1f:45:95:
5f:28:cc:ae:66:cb:93:98:08:94:61:b6:06:38:fc:bc:74:88:
bc:ff:e1:00:18:eb:eb:d5:15:68:d4:0a:a0:83:38:97:ac:49:
55:be:c0:0c:5a:56:62:73:a1:42:0f:7a:34:95:53:f2:a4:de:
66:21:57:dc:e3:13:61:94:18:8d:f6:fc:06:9e:45:df:b3:80:
42:06:91:9f:20:8b:7a:be:1a:a3:46:3a:c1:6a:f9:3b:e8:ff:
43:6b:79:8a:bd:7b:b9:10:5a:b7:7b:13:32:71:7a:dd:48:50:
6f:70:99:72:e6:4b:9f:89:2b:b0:a1:51:8c:59:a3:e3:2e:f5:
ec:6d:ef:05:a8:2f:2d:c7:bc:f0:65:5c:2f:de:a1:bc:38:c5:
8a:e3:a3:8e:0d:fa:d3:d2:d5:4f:fc:2a:ec:50:a6:b3:82:ca:
06:65:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:16 2026 by rpki-client