Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: aXJSBWyq8yOP5Gr6+o6WNOH2YDzABJoZMfOKo3Y9toQ=
Subject key identifier: F5:02:1D:37:74:AE:C7:67:6C:B9:E0:B0:D3:C8:4B:76:01:90:23:BF
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019CAAC627A5E6B9C09D56BA1A48609FB69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0C4C
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: yI2/PgOGxnQDUpjzbESRPaCwAan0ssfWdbSZlPvsFJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:27:a5:e6:b9:c0:9d:56:ba:1a:48:60:9f:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=f5021d3774aec7676cb9e0b0d3c84b76019023bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:37:0a:f9:06:d5:9c:6e:d7:b0:73:f7:5f:
89:88:35:df:7b:6b:fe:d1:f1:a9:57:5a:f3:6c:74:
ec:91:77:ed:e5:af:cc:99:96:15:66:2c:31:90:a7:
12:3d:f7:81:a1:70:d9:c4:1f:9a:00:81:1c:88:35:
c3:3f:bf:36:8c:f6:20:69:6b:39:7b:63:4c:85:4d:
ab:cb:c9:54:31:0d:a7:03:e1:4b:4e:ed:be:e0:ca:
11:96:f4:28:22:3a:09:b9:b2:0b:b3:a4:82:cc:21:
d6:7d:0d:69:79:42:ba:85:c3:5e:43:96:5d:a1:fb:
af:35:ff:0e:21:77:f8:1e:95:eb:12:2c:7a:98:a8:
e2:f3:da:95:39:a2:5f:23:a9:13:7a:b1:6a:4b:5e:
43:41:20:98:1c:65:4e:a6:76:e5:9e:8b:24:9e:fe:
cc:56:be:29:01:12:ce:24:c9:6f:9b:90:4c:3e:76:
83:2d:92:ee:8f:a3:62:28:ef:44:0a:e5:92:c1:7c:
fb:f1:ad:5e:8b:8a:12:6d:0b:23:0a:b6:6c:39:01:
84:bf:84:0b:c2:8d:fe:4e:ef:e6:90:0f:aa:f4:7c:
81:cc:7a:57:fa:e1:cd:1a:46:84:31:13:c6:91:ab:
7e:d1:5c:3f:74:d4:d6:ed:03:58:3c:10:04:59:d7:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:02:1D:37:74:AE:C7:67:6C:B9:E0:B0:D3:C8:4B:76:01:90:23:BF
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c2:4a:8d:5b:eb:b0:d8:5a:55:d7:ca:a5:cf:19:51:06:8f:
80:6f:08:9c:8c:8e:14:91:2a:50:96:8d:88:9e:ff:d1:17:e1:
8b:3e:58:ed:ef:d1:66:01:19:77:c9:4e:9d:89:1b:33:fc:c2:
64:b2:55:d7:69:21:f3:89:e0:2e:7a:ed:bf:37:69:77:fd:98:
51:f7:9c:41:aa:89:6f:b8:70:44:66:a1:5d:61:4b:a0:7e:76:
1e:18:15:dc:d6:51:94:bf:57:fd:ce:6b:b1:36:14:8f:9f:0b:
20:dc:65:9d:2c:d9:54:33:21:69:8e:2c:c0:b2:11:3a:f7:a4:
3f:ce:a1:db:9c:65:99:6a:3c:08:7c:0d:ad:24:88:98:89:76:
a4:e0:fb:55:90:d9:44:07:f2:42:ef:d7:b6:d1:93:03:c8:01:
e0:d9:01:b7:32:03:41:b1:d0:8f:1d:78:d5:9a:74:76:7f:6b:
31:f2:c2:70:5c:ec:67:a0:bd:27:3d:14:d5:2d:8a:47:3b:91:
81:9d:33:9a:f5:e8:81:f6:5d:82:c2:a9:27:05:0b:a0:81:20:
51:59:4d:9e:52:be:11:4d:ec:96:f5:3f:05:fc:ff:81:8f:2f:
24:f8:aa:c1:53:86:8b:08:e9:2d:8f:e0:ff:ed:50:51:4a:cb:
24:60:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:45 2026 by rpki-client