Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: XTiODhVBQofHwpfTA/1yBX7egFuGzZFcXny8uelw844=
Subject key identifier: C7:BA:45:1B:0F:33:D3:F3:10:5B:B3:0D:F2:E1:50:DB:71:F2:F4:6C
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 019CAA21914B1A3A177F21CB1DDEA1500725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 1320
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: nAv2hhv2MD6mSMQjv+zX5PLGOSVNPXLHwWNKPztWAuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:91:4b:1a:3a:17:7f:21:cb:1d:de:a1:50:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=c7ba451b0f33d3f3105bb30df2e150db71f2f46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:f0:1f:4a:01:e5:1b:47:9a:c1:56:f9:a1:
ba:cf:c6:3c:0b:f2:bd:f8:68:23:09:a3:bc:7b:fa:
8f:5b:38:fe:1b:da:73:d7:96:8e:48:c4:04:40:19:
74:a5:4b:30:8c:20:07:a4:16:78:ed:d9:83:3e:e0:
2c:6f:f4:0c:ca:d5:86:55:6c:2a:1b:fe:26:b4:ad:
9c:59:17:cd:7f:48:66:0a:d7:22:fd:ab:33:f9:e9:
74:e2:ee:fa:eb:bf:75:83:5c:83:fd:c0:c1:ad:80:
28:e3:48:7b:34:ba:8b:5a:32:7f:07:bf:bb:3d:1b:
f3:9f:16:f3:d4:bf:77:b0:4e:e2:72:30:f8:6f:b6:
c8:94:65:ad:9f:fb:03:d9:73:53:8c:93:37:16:ed:
1e:13:22:15:f5:89:56:fb:8e:f7:fb:42:33:0c:bd:
41:e5:ea:c3:49:ef:2c:f4:74:3b:57:c9:bd:bb:a3:
68:46:d7:b6:f1:84:a0:4e:9f:15:4f:b3:eb:24:41:
6d:5a:47:3a:b9:67:39:0c:93:e6:1d:42:5a:c3:86:
35:30:bb:1c:3a:5d:2d:29:55:c0:08:46:41:47:52:
44:e7:cc:32:3a:fe:3b:89:e9:15:4d:d4:c4:a1:21:
ae:a6:ce:b6:68:d7:7c:7a:29:54:ad:51:c6:22:eb:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BA:45:1B:0F:33:D3:F3:10:5B:B3:0D:F2:E1:50:DB:71:F2:F4:6C
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:17:90:2c:5c:82:33:b0:48:60:25:3c:9a:94:93:37:21:66:
dc:fb:2e:5b:66:62:1b:1e:35:42:d5:c7:2b:25:28:f0:d6:93:
f7:24:58:9d:f9:e8:20:94:11:80:69:79:b9:b4:64:eb:d1:d8:
22:3d:f3:b0:00:0e:4a:98:54:b4:2a:66:e2:49:6c:3b:b3:05:
ee:4e:b7:ce:88:a4:14:ad:7d:1a:d0:30:e5:d9:c7:2c:08:02:
c4:6c:c7:bc:2d:96:66:cc:e3:fe:ca:87:c0:2e:af:85:8c:ad:
fc:09:54:32:c4:e8:00:dc:a9:2c:ac:53:fb:31:01:c0:75:02:
c0:ba:ff:db:17:cb:5a:b9:e6:c4:6d:09:96:42:96:21:e3:0d:
f5:4a:66:44:65:68:8a:20:51:6b:5e:ec:2b:5c:3e:92:ff:1f:
46:f2:89:1f:80:7d:3f:fb:83:96:49:3a:f1:0f:6d:76:1a:e7:
b4:c9:15:8f:2b:9a:d9:e4:1b:da:34:ea:dd:52:a5:e6:e7:56:
78:0e:95:12:12:61:8c:cc:13:70:0e:3f:b0:85:da:88:58:d1:
20:f6:10:be:8d:af:9d:15:48:6a:62:76:d2:46:7e:f1:20:f8:
33:b9:c3:92:c5:52:da:4f:97:52:af:07:ce:d7:d1:47:38:20:
f7:36:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:04 2026 by rpki-client