Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: r568Tx96yzyNaQaL1pTJSi7zqOuizO3PT6bkam5kULI=
Subject key identifier: CB:9B:2B:98:EC:4E:E2:6D:9A:E8:0C:A8:07:6D:4C:5C:EB:2E:8F:BE
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019CAD90999F979E184E566F7B6E738D601B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 1652
Signing time: Mon 02 Mar 2026 08:01:00 +0000
Manifest this update: Mon 02 Mar 2026 08:01:00 +0000
Manifest next update: Tue 03 Mar 2026 08:01:00 +0000
Files and hashes: 1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: Goyj30Z1eUX1hJCIcm/pf0XJf5mZWY8MirTfxx/5DPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:99:9f:97:9e:18:4e:56:6f:7b:6e:73:8d:60:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Mar 2 08:01:00 2026 GMT
Not After : Mar 3 08:01:00 2026 GMT
Subject: CN=cb9b2b98ec4ee26d9ae80ca8076d4c5ceb2e8fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:6f:3a:c4:27:c5:38:f5:a1:02:80:73:43:
b5:56:f3:be:04:6c:ba:af:19:8f:6b:20:30:c2:61:
96:21:79:6f:ee:a4:4a:00:a7:03:7c:79:6e:c0:00:
33:ac:d2:9f:eb:df:b2:b5:64:89:17:8f:09:fc:ca:
1d:0f:27:97:c0:6a:96:c1:c6:a4:10:db:c8:84:8c:
fb:7d:df:3f:04:e7:d3:85:5c:26:93:34:4b:99:21:
e1:72:3c:a2:b2:7a:75:e9:46:21:e9:8c:0e:3d:9e:
2f:8e:40:7d:52:fe:b3:e3:ac:f1:db:41:81:df:64:
92:a2:07:22:a0:0e:fb:64:7e:2a:7d:f8:d1:52:10:
d7:24:ca:8f:63:d5:e6:ce:d4:d2:01:17:66:e4:d5:
04:a3:22:cd:50:d7:da:6f:4a:36:36:8b:d4:6c:49:
57:bd:bb:43:07:81:67:72:f1:61:f4:8f:be:97:5f:
5e:49:82:92:32:3c:f1:cb:a3:ac:90:25:d4:8f:1f:
7e:03:22:78:c6:86:9e:59:18:1b:e9:39:a7:73:74:
9e:34:b2:47:1e:85:eb:8a:8c:37:cb:d2:b4:30:3d:
5c:a1:dd:c3:d5:6c:ca:8c:c4:47:02:36:14:02:00:
ce:f9:c8:82:e8:32:45:0f:af:ac:90:cd:8e:a7:37:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:2B:98:EC:4E:E2:6D:9A:E8:0C:A8:07:6D:4C:5C:EB:2E:8F:BE
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:b2:f8:ea:d3:96:8a:25:5f:49:88:c7:c4:ca:a6:81:74:
e3:3c:08:47:26:05:c6:77:ea:da:3b:20:75:b4:05:08:52:59:
54:3c:fd:a6:f4:11:64:dc:16:d0:d4:38:17:85:07:31:6a:4d:
82:dd:23:22:55:af:28:d3:68:6c:6c:bb:be:ee:ea:ad:28:43:
6d:2d:e8:cb:a2:42:cc:7f:72:b2:1d:8c:ee:99:94:ae:a2:fb:
e7:5c:5b:c1:bc:f9:a4:48:cd:d5:f0:fe:5a:88:ab:41:2f:e6:
da:d0:50:80:ca:8a:a6:49:5b:9c:0d:4e:81:4e:9a:bb:f5:ae:
89:c3:85:a7:86:88:f3:4d:c3:2b:58:0a:d9:9a:f8:e7:9a:dd:
dc:cb:52:ca:d1:9b:28:4e:74:15:86:1e:79:ad:31:2b:2a:e7:
be:9d:bb:ac:13:0b:01:78:1a:4f:d1:9c:4f:da:c8:c9:c2:1e:
80:ae:de:aa:eb:d1:b1:fc:8c:c3:a5:17:7f:b4:3d:dc:83:dd:
fa:6f:81:82:bd:c2:8b:3a:8d:1d:4f:ec:02:38:10:4c:cb:cf:
04:10:ae:fb:96:19:ad:df:db:06:82:8a:0f:d0:bc:43:fa:22:
75:30:e5:12:4a:b6:98:a1:43:08:75:01:bc:2c:5f:68:ae:52:
32:19:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:14 2026 by rpki-client