Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: ifNpL0TJ0jaYx2+sAozgjNkTRleW4z87djWZ77Wkr5c=
Subject key identifier: D4:51:7E:8E:A7:AB:3F:70:87:84:6C:A7:7C:CB:B1:7A:D3:FD:9D:C8
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 019CADC8077C985E6C8A48405337D214505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0F7E
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa (hash: toz7u9OavVUGLaYysHXeqXBkXKxUrSmYpku7Siccj48=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: s732klvpUtcc70x+QLiuC/uxCPfoeHpKgx2tIqFjR/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:07:7c:98:5e:6c:8a:48:40:53:37:d2:14:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=d4517e8ea7ab3f7087846ca77ccbb17ad3fd9dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4a:87:fb:37:c9:d0:8b:7a:9a:9a:b3:df:10:
1d:54:90:b4:d4:62:c0:15:bc:02:ab:6b:ee:36:46:
cc:2a:41:c6:6c:f6:80:c0:fc:e1:97:c2:aa:2a:aa:
ea:99:aa:7c:e7:c8:4a:a1:ba:ca:ec:00:0d:65:5a:
25:f5:de:55:e2:63:bd:2c:ed:3f:18:20:71:40:49:
08:7f:37:85:c0:b2:3e:ed:92:fb:4e:14:2a:ba:cd:
3b:fd:c4:00:6b:58:ef:1f:01:b6:55:6e:b8:9a:6c:
1c:91:89:d6:da:c0:00:93:77:37:fb:e3:70:ac:03:
c7:89:0b:c0:da:dd:69:a2:60:87:bb:13:30:6d:4c:
9e:6b:e4:35:da:08:48:72:de:06:8f:9d:74:2d:8d:
43:57:11:06:82:13:02:0f:ba:52:2e:05:16:02:80:
ff:8e:f9:31:1b:4d:6d:52:f7:62:52:b1:ef:ff:b7:
0b:37:d7:99:be:ad:6a:24:98:39:af:27:9a:28:74:
73:d1:2c:5e:56:32:3f:c7:b9:50:0b:05:9b:23:cc:
c0:12:3b:32:b0:26:cc:26:b3:3f:f6:5d:23:37:2f:
76:4b:ad:fa:96:4c:bb:8d:b4:99:a7:6f:93:ce:76:
62:5a:70:d5:c5:1e:e1:ad:d1:f7:98:ad:69:0b:c5:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:51:7E:8E:A7:AB:3F:70:87:84:6C:A7:7C:CB:B1:7A:D3:FD:9D:C8
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:a5:9d:01:06:aa:8a:ba:ce:d7:1f:8b:d4:27:65:aa:a6:
f2:84:0f:9b:1e:17:7f:c6:5a:a0:53:d9:3d:cb:bb:63:9f:b4:
e3:ff:4c:0b:74:cf:bf:b8:f6:82:24:d4:6d:4a:24:23:72:19:
15:2b:ec:d2:d0:61:60:08:e8:0e:04:45:bc:3e:d6:d5:66:5f:
46:f2:56:92:a4:f0:3a:f9:be:6e:d0:1c:51:0c:df:6c:c4:0c:
d8:72:25:63:70:e0:5d:39:f6:2f:15:c4:1e:40:b9:1b:d0:74:
50:f2:2e:65:9d:9d:f2:88:a8:6a:b4:13:e6:e9:94:7b:88:38:
91:c8:e8:e9:24:a4:1d:a5:03:07:f4:c8:1c:23:dd:fd:bf:80:
ec:d7:d3:15:11:b6:e4:85:fc:35:5f:a0:18:4d:fb:17:bd:fa:
66:1b:14:88:ba:a9:b8:3b:41:75:a1:31:8e:bc:eb:81:aa:b2:
07:59:9b:38:c5:4b:2c:9f:75:f5:c5:6f:27:e1:86:98:13:4d:
f5:28:23:8c:10:b4:db:ac:ba:f3:8d:fc:da:fc:ab:43:db:e4:
c2:89:86:89:bd:0e:bf:cb:f6:91:7b:44:50:8f:c7:d6:17:ca:
b9:bb:2f:5c:5a:60:20:8f:d6:7d:69:59:cf:90:04:1f:9d:18:
e3:8f:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:52 2026 by rpki-client