Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: jtSF6aKmIuuyXrcbAQ+MLSHmL7dbihEQj9g1zfy1ip4=
Subject key identifier: 49:DD:A4:4D:38:0C:E7:80:ED:33:FA:E4:D9:23:3E:AD:9B:FB:E5:FD
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01A0D4CB8ACABCD48C2C5A8DB734455BE238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0E74
Signing time: Thu 24 Sep 2026 19:01:44 +0000
Manifest this update: Thu 24 Sep 2026 19:01:44 +0000
Manifest next update: Fri 25 Sep 2026 19:01:44 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: ir7HDZvqsVszWGShHdWO0mBQJehc0C6HqUmeFyG0NQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:8a:ca:bc:d4:8c:2c:5a:8d:b7:34:45:5b:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Sep 24 19:01:44 2026 GMT
Not After : Sep 25 19:01:44 2026 GMT
Subject: CN=49dda44d380ce780ed33fae4d9233ead9bfbe5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:68:64:a0:ca:00:cf:7f:25:51:cc:dd:5f:
9a:d0:3e:d4:39:97:b9:5c:f4:2a:fa:ca:b1:94:e3:
3b:b4:a4:c3:3c:53:d2:5d:25:70:0d:9f:7b:50:ac:
b0:fa:9c:c4:85:7a:aa:14:01:19:50:eb:e8:08:d9:
ea:4a:c7:6c:ef:74:5a:f2:3f:fe:68:32:e5:28:1d:
ab:e1:b8:60:22:5a:48:5b:e0:e2:6a:0e:de:12:72:
db:6e:14:cc:2e:c5:2b:cb:ba:7f:2a:b3:a9:33:18:
37:6d:ce:a3:a2:d4:00:ee:45:64:64:64:60:7e:fe:
27:8b:01:7f:fd:7a:7a:0b:6f:1f:56:04:20:0c:d7:
49:b5:73:6f:b7:49:ea:d4:58:ad:18:a8:e6:7d:9d:
bf:54:14:e6:0b:dc:b6:6c:e3:bb:b4:13:fa:1a:0a:
68:19:3b:27:3f:38:52:5c:04:1a:5c:27:1d:7d:80:
ce:64:89:39:f8:e8:6e:ae:ec:f7:96:a6:e6:85:9a:
ad:ea:f7:28:4d:4e:2d:1d:7f:f6:b7:1b:58:df:ab:
43:f7:f5:58:52:5e:9e:e4:c8:72:30:f1:6b:19:bb:
9b:d6:2b:92:60:ca:95:53:cd:d0:67:2e:d0:37:0b:
88:03:fe:79:00:d5:e0:28:05:e6:a1:64:cf:53:db:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:A4:4D:38:0C:E7:80:ED:33:FA:E4:D9:23:3E:AD:9B:FB:E5:FD
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4d:7c:f3:e9:70:b0:b1:f1:57:3d:fa:06:c8:a6:3c:28:d6:
07:47:aa:eb:79:0d:d5:85:80:3f:62:29:c1:fb:c6:53:42:a6:
f0:da:0b:44:ff:ef:2b:e2:47:41:3d:f7:ea:72:29:bb:35:4e:
1b:cf:27:a0:74:64:e8:78:af:48:22:4d:16:fc:84:76:de:e8:
a0:dd:e7:2d:b9:a1:35:ff:ae:fe:a2:14:43:2d:ac:05:c0:5d:
f0:cd:0a:b2:0c:f7:82:72:83:e0:a9:4b:79:f6:ef:0d:ad:e9:
44:39:c6:67:a9:04:8c:83:19:e1:4a:48:de:cc:d4:14:23:74:
24:a0:de:44:4d:bd:86:4e:23:36:3d:a2:ad:06:b8:03:24:fe:
d3:44:9f:10:ae:c0:c2:8f:1e:9f:8b:a1:a2:87:15:68:d8:fa:
25:e7:b9:04:b3:5d:6f:90:29:91:bf:98:30:0d:b0:11:0d:92:
5c:8f:c9:52:8b:05:d3:a2:34:da:43:e2:34:2f:0f:55:ca:e8:
6f:71:02:5e:c7:a8:ad:57:db:35:cf:66:c7:df:d0:9b:e8:3c:
ab:0c:ad:cf:6d:27:67:4b:35:99:ed:a3:15:74:bd:a1:21:01:
06:9c:3f:b6:72:98:8a:bf:d7:bb:57:33:7f:09:a2:b5:f6:8c:
da:46:74:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:21:03 2026 by rpki-client