Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: YSxx/+y5DG3IWgV9L6cbjCC5d5GshqJuF9EfLKxrBuc=
Subject key identifier: D9:CB:1A:64:8B:FA:CB:08:76:21:0F:88:4B:D9:39:29:68:F0:FF:9A
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 019DA4C20A1D268EEA687B70C6F7059F42F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 08:01:13 +0000
Manifest this update: Sun 19 Apr 2026 08:01:13 +0000
Manifest next update: Mon 20 Apr 2026 08:01:13 +0000
Files and hashes: 1: k8cdudOxt-UXEB9vti7Ssvsk5vU.roa (hash: Is0dEg8TeiJuTJaXHNZDTXw2F+T/OPQFA/UKJWJv0ys=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: BeB5RrCmR5R9qa5Y3HsNgOoi9VmO2xdEXcJfPzuXHnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c2:0a:1d:26:8e:ea:68:7b:70:c6:f7:05:9f:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: Apr 19 08:01:13 2026 GMT
Not After : Apr 20 08:01:13 2026 GMT
Subject: CN=d9cb1a648bfacb0876210f884bd9392968f0ff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:1d:7b:c8:65:fa:b5:c0:ba:eb:59:40:b5:
a5:05:bb:f5:90:ed:82:ca:dc:01:c3:d4:a2:6e:02:
bf:7d:8e:dc:21:ab:c5:14:b9:1e:97:d8:4a:02:71:
9e:70:2e:1c:fa:cc:cb:3e:b2:2f:0d:c3:14:94:33:
7a:35:7a:59:ac:30:3f:22:36:e9:9f:74:f5:f4:5e:
b0:17:e1:8a:0e:80:a9:59:5c:67:fa:e4:b1:e8:cd:
f9:d6:a7:85:bc:f4:fc:11:22:dc:77:a2:8c:89:dc:
44:84:85:ea:f9:e6:6f:63:2d:f2:ec:3f:c5:20:84:
75:ba:73:4e:1d:70:04:4f:08:e0:08:60:e0:51:80:
58:77:a1:2d:bd:3f:10:d6:ae:cf:4f:1f:2d:65:37:
13:a5:71:03:85:cd:26:ee:9a:60:2e:f9:c2:e1:a8:
63:3f:e4:40:44:bd:c9:ae:ed:41:2d:7b:c2:22:11:
f2:50:74:11:66:a5:68:26:c7:23:4f:71:e0:ba:20:
aa:3e:c3:45:1d:68:88:aa:8f:d3:b0:da:62:98:4a:
bf:6f:a8:e8:79:f5:ec:8b:43:cb:ab:5a:9a:ca:24:
17:ef:45:54:c0:89:c9:3f:6f:a6:12:d0:f9:a7:2e:
39:8f:5b:10:2f:2b:aa:45:83:3b:0a:52:7b:6b:9b:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:1A:64:8B:FA:CB:08:76:21:0F:88:4B:D9:39:29:68:F0:FF:9A
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:0b:ed:f0:f6:1b:29:66:9a:fc:52:f9:7a:af:ba:13:2e:
75:2f:63:88:68:f3:c0:57:e2:98:72:df:10:b1:fa:7b:a0:7d:
8e:f5:90:79:3d:a2:38:32:40:ba:1d:9b:c0:2c:76:d3:36:8a:
fb:7e:ef:5f:4c:87:c8:cd:5e:eb:49:6e:23:6d:8d:4a:39:f6:
e5:52:62:fc:08:6f:d1:85:93:0d:be:47:91:d8:70:59:1f:19:
32:ba:26:ea:75:d4:0d:dd:b8:ec:d4:2e:2f:eb:09:5e:3f:07:
44:27:1f:8e:35:cf:81:7d:a3:30:26:92:49:02:00:62:8c:d8:
6d:60:bd:09:c4:3b:81:c5:f4:fb:e1:c9:53:d1:1c:8f:f9:73:
8a:82:e0:d5:64:3e:8e:4c:67:e5:36:e7:a3:ff:79:4c:75:f6:
4a:6f:cf:f8:54:a0:e6:64:d9:5e:89:9c:47:b2:1a:27:3c:33:
1f:27:04:73:7d:bc:ec:bc:d8:5d:77:48:dc:25:8e:67:4d:bb:
9d:89:90:ac:09:57:18:a0:ea:44:ba:4b:c6:fd:77:d7:53:59:
9d:e9:18:3f:3d:4e:90:99:86:6a:d9:69:1c:5c:3f:a8:2b:e4:
21:a5:bb:49:3e:61:5c:ee:95:90:be:d5:99:e6:80:08:18:1e:
01:99:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:25 2026 by rpki-client