Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: 0nrXFrm2A8zRr25wHTeHyJH6Qu2uT+n4DWoZ9+/Voso=
Subject key identifier: 0B:18:F7:71:BD:B0:E1:DF:FC:69:EB:AC:CD:1C:24:67:37:19:37:BD
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019D38D34667AAB7D85E728351DA7308451D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0C67
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 9Azpi45nzAtyvLowuj0+n2mamnlIp49CVaA9OSAGy5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:46:67:aa:b7:d8:5e:72:83:51:da:73:08:45:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=0b18f771bdb0e1dffc69ebaccd1c2467371937bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:51:1b:db:af:39:f5:97:36:f8:0c:4e:36:
fc:dd:b0:31:2d:5b:55:3f:27:43:94:bf:f6:e4:1f:
34:81:1e:69:c1:1e:19:08:74:6a:de:2a:13:23:e6:
2a:db:49:a8:ad:ed:24:2d:b8:ac:53:1b:96:e6:ed:
5c:88:c1:69:78:bb:fb:81:ba:47:b3:eb:14:0e:a6:
b8:6a:86:fa:87:8a:f1:b3:54:c0:5d:ad:39:53:67:
e3:0d:06:3b:6e:af:03:2f:89:1e:5e:9a:78:ce:b4:
e4:17:cc:07:1c:16:49:e9:d9:72:d0:9e:ce:23:7a:
62:87:52:01:7c:a3:e1:76:8a:07:04:10:d8:c3:7b:
d4:5c:65:2f:10:6c:1c:45:30:8b:75:81:bb:c5:b0:
54:01:89:3e:e6:22:4d:5a:a8:be:57:94:0b:ae:bd:
2a:14:66:9d:ef:99:23:04:b5:bb:8f:80:e4:23:eb:
74:ce:f9:e9:bd:c0:5d:aa:18:b7:bb:53:2c:c1:d5:
0f:d1:82:e1:43:b1:08:ee:5d:00:6f:ff:82:f8:ac:
9c:e7:bd:b7:dc:2c:c3:37:98:3d:cc:8e:9d:6e:0c:
31:3d:f7:19:17:85:e4:e0:d1:c3:02:b6:fd:51:6b:
90:e1:ed:6c:15:ed:99:62:5f:e0:53:85:10:fc:56:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:F7:71:BD:B0:E1:DF:FC:69:EB:AC:CD:1C:24:67:37:19:37:BD
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:df:a1:2c:a1:2b:1a:d6:57:f0:90:8c:f7:cb:b5:77:7e:e3:
20:8e:d4:7a:8b:d7:10:56:67:37:30:5a:0a:e0:a2:07:47:22:
61:f3:c9:a5:cf:d1:03:0e:f9:5f:88:06:cb:ab:f0:83:53:14:
ee:18:98:40:0f:c9:c8:56:f1:ca:db:17:90:01:9d:6a:e0:f3:
fb:47:3c:56:eb:24:e9:33:5a:5f:7f:77:a9:a7:50:b5:68:24:
9e:61:fe:77:b4:e3:96:b4:1f:bc:02:0b:ba:23:59:18:ee:e7:
49:c0:52:9e:bd:7d:a5:c2:14:6b:96:ca:10:04:23:5d:34:09:
aa:f7:a9:18:57:35:0c:68:42:64:2a:2a:97:9c:6c:b7:95:38:
5d:d5:00:a9:54:71:9b:f8:d7:05:8d:f0:00:f8:85:ea:c7:21:
79:32:b2:45:99:f1:8c:d3:dc:55:d0:a7:b0:ba:0f:d7:39:9a:
20:68:65:cf:6b:7e:c2:1d:ff:a5:3c:45:9f:eb:b2:90:c0:13:
ea:f0:1e:9c:88:ef:7d:1d:bf:ca:48:b8:ec:7e:64:15:97:bf:
e9:28:c8:25:2b:6c:0a:e1:67:29:e9:0b:c6:29:69:e7:a7:13:
5d:ad:0f:39:34:72:2d:12:7b:76:e4:f2:2d:aa:fd:60:12:a6:
92:1f:2b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:00 2026 by rpki-client