Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: EbcxxXQQXPPU8BYWjZ0vcfp1EnWHEJhnsbxDOqce+2s=
Subject key identifier: CE:F9:05:D4:1F:5D:DD:D7:B8:78:CA:87:56:B5:78:5B:15:69:D1:E1
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 019CAC7DC9F2A737A47BDF2ABAA18F0B65EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 08D6
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: FxpOpLtK88tsOun050YE0ZfdIDo.roa (hash: +btXumZU2TUmANl1EByq4FAyXjWIcRex9I8hhT7VPvA=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: b3ITcNlgOzvPasDKm+0V5KabjiwyQX7la688LROULnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c9:f2:a7:37:a4:7b:df:2a:ba:a1:8f:0b:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=cef905d41f5dddd7b878ca8756b5785b1569d1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:43:9b:14:d4:46:20:22:2c:d3:80:2c:bc:
d9:25:4b:74:6d:9d:8a:36:d5:85:af:49:8b:4d:14:
57:af:9f:1e:14:d7:8c:44:ec:1e:97:00:d0:21:4f:
46:9a:c9:79:09:c3:57:2d:e6:88:ba:e5:2c:84:63:
d8:79:c9:c2:e5:ff:32:d1:f7:ff:9a:80:e1:79:ae:
08:0c:3c:b1:10:4a:3a:c0:bf:c0:30:fd:1b:a0:84:
13:c0:0a:75:a9:63:77:f0:88:e3:df:6d:3f:67:db:
96:55:e8:2f:33:e6:0c:f6:8e:66:e1:1f:b3:c2:23:
45:99:36:55:03:48:e5:51:23:ae:f8:4a:42:8b:c6:
15:a4:cd:72:89:70:ec:d9:06:64:84:fd:11:53:3c:
aa:5e:c1:6a:7f:93:0a:76:ae:5a:a4:99:79:41:78:
35:c4:b3:ac:23:76:cb:9c:06:69:fb:39:2a:e8:04:
e8:d2:29:39:c0:75:11:da:c0:31:79:5e:d8:95:db:
aa:ee:35:14:6c:27:f2:e2:30:91:6f:0f:6a:4e:83:
24:ce:bf:4d:fa:70:36:9a:33:8a:ee:86:16:0c:3a:
85:8b:b0:77:b7:88:3e:aa:c3:56:92:72:ec:e4:3f:
ac:49:d9:7c:b1:79:2e:e0:01:51:29:d9:ae:6f:05:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:05:D4:1F:5D:DD:D7:B8:78:CA:87:56:B5:78:5B:15:69:D1:E1
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a1:92:39:84:57:c3:98:a3:6f:6c:ec:19:8a:63:a3:32:78:
f8:72:de:6d:63:ee:81:5b:8b:f4:6f:19:e3:be:1b:56:c5:27:
b1:5f:67:a0:a0:3a:9c:f4:cc:9a:16:05:6c:c3:2a:a4:1d:e7:
a6:4e:ea:d0:d9:16:1c:a7:50:6b:ae:0f:01:e1:4a:18:3b:3f:
b0:81:16:1d:46:5b:a5:bd:d7:a7:95:57:df:f1:40:8f:74:e2:
92:32:79:88:14:b3:7c:11:95:85:8e:13:83:58:7d:0f:ae:da:
8e:11:4b:34:96:53:70:af:29:71:85:43:8c:2f:e6:1b:c4:3e:
a6:7a:00:7b:06:ef:6a:fa:69:42:35:22:46:84:19:aa:0c:7d:
c4:67:14:a1:62:47:ae:e6:c9:e4:7c:6c:53:5a:1d:43:77:16:
f9:a3:7b:ea:02:b5:d0:08:04:bb:98:fe:96:dd:ee:0f:d7:dc:
a9:36:8d:ff:71:d9:07:5b:56:e2:78:4d:39:27:ec:7f:58:d5:
7c:16:20:39:99:a8:a7:43:0a:b0:b6:2e:f8:b0:a9:0c:25:88:
6c:74:c4:33:1b:73:2d:38:b6:b7:25:3c:f4:08:82:90:e1:e5:
fe:0f:14:eb:8b:8c:f8:a5:0e:eb:92:74:83:f6:71:8b:fc:74:
9e:c8:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:25 2026 by rpki-client