
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier: Fkre3zaS+s8YU2XdWaB58QalrYCWDs9XhbHFswWd4YQ=
Subject key identifier: 71:6B:DA:23:88:0C:CF:9A:05:BC:6D:8B:A0:5A:45:4F:DD:5A:69:2A
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial: 019CAAFCFEF9332D20C334C6FE32F4EB9D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: dwIfNutOF5SxDnHE2ip0RRB0Wh0.roa (hash: gXhE8k/fw7vLGXFxBW+3kIf0O3u5m7PjyaKQg10z4O0=)
2: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: 91eZ+79VxH8gZKTMM+gU6gMfAT2gAu5jIHcA8Gr/hNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:f9:33:2d:20:c3:34:c6:fe:32:f4:eb:9d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=716bda23880ccf9a05bc6d8ba05a454fdd5a692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:a3:ab:60:57:8f:b3:b9:7a:44:ac:02:7a:
69:d6:f3:4b:02:59:c6:f7:67:20:85:56:72:3d:07:
84:1f:34:d0:9b:53:65:94:ab:07:2f:54:52:20:09:
88:ba:63:d2:6b:3c:25:49:43:3d:aa:28:db:1a:12:
2c:fc:9b:1e:f8:98:bc:35:7b:76:bf:89:ab:8f:e9:
29:6c:26:dc:d8:bc:37:9f:9d:24:5c:d5:99:f1:61:
c5:fe:af:99:93:2a:c8:e0:e7:8c:1b:01:9c:eb:ff:
4c:a7:93:29:ec:a1:2b:c5:69:4d:83:18:3d:93:12:
51:d8:10:2c:4a:ec:cc:a7:65:2c:94:39:82:ee:a6:
5a:e0:4d:62:48:80:c8:f2:3e:df:33:fa:b9:2e:e7:
51:06:30:c4:8a:5a:68:3b:67:e6:28:0c:3d:e3:84:
27:7e:2d:c8:4b:d5:7d:ad:e6:0f:8b:1d:18:45:be:
a8:64:5c:65:e4:0d:a0:bb:23:00:79:e3:a2:7f:22:
95:bf:20:88:8f:6e:2d:73:b0:67:cd:d5:3f:25:1f:
72:22:ea:e9:95:06:f6:b7:a0:e9:68:d5:1b:2e:3c:
c5:f4:18:ab:7d:31:1e:0f:78:af:8a:6b:90:e6:11:
dd:da:6d:80:eb:68:f5:f2:b4:ee:78:04:e6:00:d2:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6B:DA:23:88:0C:CF:9A:05:BC:6D:8B:A0:5A:45:4F:DD:5A:69:2A
X509v3 Authority Key Identifier:
keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:ef:a4:bd:7d:ca:aa:11:2b:9c:a3:31:f6:e4:1e:22:b4:
e3:dc:bf:f1:9a:8e:f7:09:bc:e7:85:69:e3:2d:48:5e:60:47:
ab:71:18:b1:3e:c2:7b:9d:0b:ad:1b:78:26:aa:09:8d:4e:88:
fd:24:50:88:9d:20:53:62:dd:e9:75:7e:2b:ba:ba:5b:b1:7a:
b9:e0:ed:b7:44:7c:cd:e6:eb:fe:3e:29:21:5c:eb:06:c3:e2:
fd:f1:fd:2b:53:f8:03:c5:0e:5a:b1:72:1f:92:18:49:fb:e3:
30:3c:29:c9:0f:56:e4:bc:29:8c:1e:09:b3:da:2c:cb:79:62:
cf:82:a2:4b:84:47:8d:ed:c3:4a:a3:3f:4b:7a:d6:35:11:cd:
98:0f:aa:d1:ad:2d:52:84:a3:50:3c:57:0e:86:73:63:75:77:
76:01:94:13:b6:8c:be:ad:fe:d5:9b:b0:4b:e1:3b:28:cb:e1:
f0:40:32:61:95:29:61:dc:93:f4:82:56:f1:ee:87:8d:ad:45:
91:3f:12:d2:76:41:93:8b:50:2b:67:55:29:44:1b:81:4e:ff:
09:63:9f:73:61:7c:b1:2e:9d:74:7b:76:50:1e:b4:7f:29:0d:
71:31:c2:9e:de:46:b3:4a:1a:80:5e:1b:34:47:d4:0a:0d:ec:
da:e4:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:19 2026 by rpki-client