Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: xEtz/lipWrxanfuKs0SNvhDlZymGqtl8nopOHCZuOYQ=
Subject key identifier: D6:0E:ED:95:77:83:80:57:B2:07:54:5E:78:FB:AE:C7:54:DE:C3:6C
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019CA832E8BBCEBB1BC64708BF843FF9AA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 0115
Signing time: Sun 01 Mar 2026 07:00:34 +0000
Manifest this update: Sun 01 Mar 2026 07:00:34 +0000
Manifest next update: Mon 02 Mar 2026 07:00:34 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: 1o75/TyjgRsjF+r4fOJC4ntDZArcsldbvsj8uzbNQyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:e8:bb:ce:bb:1b:c6:47:08:bf:84:3f:f9:aa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: Mar 1 07:00:34 2026 GMT
Not After : Mar 2 07:00:34 2026 GMT
Subject: CN=d60eed9577838057b207545e78fbaec754dec36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:e2:d4:15:c0:d4:12:4a:41:14:bf:a7:77:
39:46:7e:30:e4:7a:e3:03:f9:67:86:42:09:05:88:
0e:51:58:39:fd:07:43:19:d6:3c:a7:6d:69:87:7a:
e7:e3:74:75:17:3a:e6:03:da:0a:13:5e:52:48:30:
60:38:34:da:12:55:a7:3f:85:bd:3a:54:9b:f6:1f:
cf:ca:c0:68:54:34:41:50:20:4c:28:bf:d3:11:68:
23:10:c8:57:30:a3:45:64:8d:93:da:62:10:5e:61:
d8:05:cb:2a:36:07:f6:8e:3e:88:d0:82:e1:30:eb:
ff:4a:98:23:6c:9c:13:a4:0f:dd:47:6d:10:80:67:
2a:c4:77:46:60:85:6b:45:e3:a7:54:63:23:f9:c7:
12:ff:05:e5:ea:97:ef:d2:fa:97:48:78:28:e2:eb:
d0:40:ea:5d:1f:d1:34:c3:9f:13:af:d9:0c:1b:53:
d7:9b:fb:14:ce:75:43:21:e7:87:93:eb:a5:e1:af:
ce:a3:92:17:ff:4c:92:a7:c4:e4:56:45:2f:5c:1e:
ce:08:e4:ef:39:4c:f3:c2:68:84:18:1d:78:84:35:
c4:f5:8d:73:dd:e6:d1:8c:e8:13:1d:b6:ef:5d:79:
bb:84:cc:ce:da:20:80:ed:03:75:32:ba:ea:7e:9e:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:ED:95:77:83:80:57:B2:07:54:5E:78:FB:AE:C7:54:DE:C3:6C
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ed:03:5e:30:8a:18:db:35:fc:3b:95:05:a3:d7:09:84:b4:
fb:6e:7f:5f:2b:97:00:ec:f3:ef:87:a0:a6:fc:dd:41:50:d2:
e7:73:22:e8:ce:97:94:e7:90:6f:dd:c6:ad:46:34:51:f4:f9:
82:f1:4d:b9:b5:7a:d6:bd:21:79:5a:0c:61:44:86:e1:40:1c:
fa:b3:e5:4a:c7:72:9d:5b:7e:c9:6d:36:83:28:c3:cb:3e:68:
0e:20:ce:96:60:90:04:c9:88:73:ed:a6:f9:17:cf:47:98:2c:
da:f1:3a:f2:df:37:77:f7:56:b1:aa:f4:12:a5:b0:cd:05:38:
07:a3:0d:37:2a:db:4f:c4:28:bb:6c:31:82:91:b9:6b:e3:b9:
db:5f:23:93:7b:a4:41:a9:89:57:1e:4f:8d:10:f6:41:6f:45:
11:ea:c3:03:00:8b:b1:5e:ad:28:b8:aa:ee:9b:2a:ba:1e:e6:
7e:f6:02:bc:0c:1f:8e:ef:1f:1a:d7:e6:84:e6:cd:ab:51:27:
f5:2e:3e:e5:6a:d8:99:d9:26:c4:d5:d8:7d:3d:b6:86:90:fc:
da:e2:17:f2:41:5b:ec:2f:6a:57:48:f4:58:9a:31:5a:b9:c5:
7c:bd:a8:b3:6a:18:96:64:fb:55:ed:17:c8:c7:b5:07:f1:9a:
24:63:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:36 2026 by rpki-client