Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: 2zur78B4MaSmOKIpoaz5d/BcZI0piSJkizde5Rp1RIc=
Subject key identifier: 64:A5:60:C1:BA:5D:B0:3A:47:94:63:7D:CE:2B:B5:F3:57:F3:33:DE
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 019D98F4006A30D92C7AA6E6AD4D363C4CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0E0B
Signing time: Fri 17 Apr 2026 01:00:20 +0000
Manifest this update: Fri 17 Apr 2026 01:00:20 +0000
Manifest next update: Sat 18 Apr 2026 01:00:20 +0000
Files and hashes: 1: DcsSJt8WjaMBs_rQ-GPKSk2rMV8.roa (hash: kONkryDJeTUuCH5Fe3xmEEAXi2nBdTccviaLlcLsCzE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: 2JFsZ/SQdZIn9hBOaXt8gmCcE2nHhsECN11FUOdaZqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:00:6a:30:d9:2c:7a:a6:e6:ad:4d:36:3c:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Apr 17 01:00:20 2026 GMT
Not After : Apr 18 01:00:20 2026 GMT
Subject: CN=64a560c1ba5db03a4794637dce2bb5f357f333de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:d0:b2:55:52:f4:da:a2:9a:c3:ac:0b:af:
e4:55:26:46:63:c9:31:c9:d6:92:aa:2c:3a:6c:a7:
43:6b:9c:cc:63:5b:5b:41:e3:a4:c8:50:3d:51:78:
4c:27:5a:08:d1:dd:d8:80:92:42:04:e4:a9:a7:c7:
e8:41:c5:c5:eb:25:5e:8e:70:6f:04:90:e2:fa:06:
d7:aa:c9:b5:22:4a:98:af:6a:6e:df:6c:b8:6e:90:
5d:f6:6b:22:2b:5e:b1:9f:f8:61:ed:da:1f:0c:86:
8c:3f:2b:6f:06:14:e8:71:07:41:28:d9:61:42:e1:
a2:68:4e:36:36:85:76:80:c0:76:e3:ea:ab:40:ee:
7b:02:a6:db:78:b3:88:f0:21:ec:b0:74:73:dd:21:
ed:f1:4f:bd:b1:84:e5:9b:53:87:48:f2:84:1f:f2:
ae:f5:ce:cc:44:73:28:42:72:3c:9b:08:05:aa:b5:
d4:a3:f0:b3:4e:95:72:38:df:84:8b:a1:77:33:e6:
de:3b:00:f4:4b:6d:02:16:f8:7c:30:09:ae:88:26:
a0:5a:af:8a:e1:bf:a0:0d:1a:a9:1e:fb:a3:c1:b3:
91:a1:dd:c6:04:cc:f1:da:87:0d:ba:f8:cb:89:48:
97:9a:ac:f6:e4:c1:7e:97:ee:6d:b4:ad:52:1d:31:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A5:60:C1:BA:5D:B0:3A:47:94:63:7D:CE:2B:B5:F3:57:F3:33:DE
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:66:54:17:0b:b2:0d:b2:3d:bc:fd:87:19:88:0d:16:96:
6b:2e:47:34:95:29:95:09:34:ab:6b:2a:dd:aa:11:6b:6f:f4:
c6:b8:14:0e:a2:8d:9f:09:de:05:68:58:fe:4e:0b:a0:63:fd:
a7:76:2a:26:77:d4:b5:16:68:5b:55:0d:d6:ca:72:f5:78:c4:
33:01:1a:26:11:aa:f7:65:ae:8e:25:b8:9f:f8:59:56:c4:3a:
59:f5:44:a6:9c:ba:af:45:b3:c6:69:26:29:05:94:15:12:aa:
6e:2c:be:38:4c:d5:ba:a2:df:a9:42:ab:3f:65:5f:a1:79:09:
ba:6d:b2:ad:4f:8c:16:9a:1a:08:71:00:c1:7b:f4:48:88:33:
e5:51:a8:ae:a3:96:be:1b:cd:80:9d:3d:eb:8f:f8:5b:4c:5c:
66:38:c2:b0:8f:13:f9:e2:e5:49:bc:38:fc:b4:98:94:50:ca:
ce:4b:86:e0:7d:8d:87:23:84:54:1a:e9:40:16:88:d8:51:24:
44:ca:4c:98:37:11:77:d1:2c:47:1a:b5:48:bb:c9:1b:f4:bc:
04:27:7d:4a:0b:f1:38:8b:1e:8b:c4:a3:c4:a3:a6:2d:c0:58:
50:60:e6:ef:b3:25:42:aa:72:d5:e8:b8:69:ac:52:24:da:4b:
b4:a1:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:12 2026 by rpki-client