Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: H6R3vFxQG8tSNzClWLemkflSZZMRhCBcYOqbIzuPUKM=
Subject key identifier: 00:71:63:7C:A7:B1:62:5C:97:B3:4E:09:7C:18:6C:AE:57:E6:9E:9C
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019D98509F429BEAA582FB5992709A7DBBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 14DF
Signing time: Thu 16 Apr 2026 22:01:53 +0000
Manifest this update: Thu 16 Apr 2026 22:01:53 +0000
Manifest next update: Fri 17 Apr 2026 22:01:53 +0000
Files and hashes: 1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: pbumvxcF16LWq3l1tMUvcvRXw9fEt2L0TabXk52+OSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9f:42:9b:ea:a5:82:fb:59:92:70:9a:7d:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Apr 16 22:01:53 2026 GMT
Not After : Apr 17 22:01:53 2026 GMT
Subject: CN=0071637ca7b1625c97b34e097c186cae57e69e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:4d:a9:53:38:fb:2e:8d:53:1b:d9:f5:57:
45:d6:a3:43:60:fb:eb:3e:c0:88:6a:65:73:64:63:
45:97:76:ba:a3:00:9c:97:67:94:10:e3:3e:17:b2:
0e:e3:08:a8:c1:c7:ea:bd:7b:16:8e:ca:92:f8:34:
17:73:59:1f:fd:56:f1:c2:2c:46:47:2f:93:7f:2c:
1c:46:19:e9:08:f4:2a:90:e5:3f:a6:bf:b8:80:37:
6d:3a:c6:7a:be:d1:6e:f3:dd:4a:40:ee:46:b2:9a:
ea:48:26:48:58:c3:22:48:4e:b9:da:1b:68:4c:47:
aa:73:48:44:ec:6e:18:a1:10:7b:69:1b:23:2b:36:
12:d4:f5:d0:14:2b:00:3d:03:c5:2a:69:f7:61:9c:
c8:d3:f1:a2:a9:63:d7:e4:16:36:7c:be:49:3f:db:
c9:40:e5:66:44:c3:60:8e:a8:d7:6f:a5:71:10:30:
a9:d1:08:dc:c0:86:5f:72:02:80:22:f4:f3:bc:65:
55:f4:14:48:82:39:ef:34:a4:fa:6b:59:00:25:72:
95:7d:23:ab:15:c6:98:f1:7a:51:dc:d4:df:83:d3:
3b:8a:55:f0:2a:6f:ee:cb:94:6f:ad:fd:c4:99:0c:
29:07:6e:2e:36:a0:49:c7:af:75:f1:34:ff:72:e8:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:63:7C:A7:B1:62:5C:97:B3:4E:09:7C:18:6C:AE:57:E6:9E:9C
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:9d:64:b6:ab:fb:14:a5:bc:8c:d0:4d:24:2d:c6:e2:b3:
00:bf:79:a5:14:73:13:1f:88:e9:ca:da:07:21:42:d0:04:8c:
5b:9e:ac:ee:4a:b7:b2:9c:ca:a3:5c:b7:97:e7:59:ea:33:62:
5f:4b:88:ab:c1:a3:d3:19:85:1c:2f:9e:d7:ad:8d:1e:60:77:
40:ee:4f:17:91:56:51:2b:af:c6:a7:fa:09:da:e9:48:98:d8:
80:70:7b:64:de:37:48:6e:38:5f:4d:b5:51:cb:69:0d:43:1b:
46:b8:5f:54:89:be:0b:c9:3f:e1:53:8a:b7:ef:f4:0c:49:a2:
ce:c4:42:1a:cc:c6:c2:38:4c:2b:82:fa:83:2e:1d:18:7f:93:
3d:13:80:bb:36:ca:39:a5:9b:6d:1b:59:be:c4:38:dc:ba:c3:
6e:8a:1d:31:12:43:11:20:7a:e9:50:53:9d:aa:c5:1f:dc:92:
26:e0:3f:d7:c8:8b:8b:27:67:e6:e2:26:24:b3:aa:42:d3:e3:
58:7f:22:83:5c:5c:0b:2e:cd:d9:27:e4:4c:c5:89:8d:eb:1d:
ac:fe:fc:2d:fa:dd:f4:c8:31:31:ea:ea:19:6a:5d:a8:1e:a0:
50:d3:e3:da:5a:e1:05:fd:9c:d8:e3:fb:a2:f1:bf:07:b6:fe:
ba:60:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:16 2026 by rpki-client