Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: p1lXl9Og2NVxFi2CIxovYu8t8bjLbFW+CptKHo3jR9Q=
Subject key identifier: 23:3B:4B:37:21:33:87:3D:D3:FF:8A:E1:DC:62:F6:10:78:15:26:15
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 019D265F701D95A4FF61AE433AA48E5F2FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 0B52
Signing time: Wed 25 Mar 2026 19:01:21 +0000
Manifest this update: Wed 25 Mar 2026 19:01:21 +0000
Manifest next update: Thu 26 Mar 2026 19:01:21 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: LCh2gmxwWsyyen6Mfup3bZmCCgvr2vpJKl6d1WXSjUE=)
2: jmPiqOSodqrdA8k4949EnF32jqs.roa (hash: m6Q9/wIpIS6OjtKLHT/2uqXxN+T3zmjZa4o1CBlJhOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:70:1d:95:a4:ff:61:ae:43:3a:a4:8e:5f:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Mar 25 19:01:21 2026 GMT
Not After : Mar 26 19:01:21 2026 GMT
Subject: CN=233b4b372133873dd3ff8ae1dc62f61078152615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:38:2d:0b:16:6b:20:f2:96:bd:d3:59:36:
cf:6e:18:6c:1b:e5:6f:b4:cf:fe:3d:e5:9a:56:a6:
1e:5c:7f:aa:34:e5:6e:8c:a9:bc:ee:f8:95:fb:66:
24:9a:ac:f1:68:a6:a1:00:52:a0:d6:bb:5a:27:90:
ab:4a:a4:b2:45:84:a2:3a:98:bd:ab:38:2c:d0:33:
a5:65:49:e9:6b:c9:1b:20:a4:6f:4f:28:38:0e:47:
2a:08:15:79:c1:29:e3:ad:7c:d5:3a:95:d0:db:bc:
69:3a:4b:89:30:e7:97:ed:c6:0e:8a:fa:cc:fa:63:
66:c8:b4:fd:f7:5b:2b:ab:d1:ca:d6:70:82:4b:39:
e3:ef:51:05:a1:9f:33:cb:65:b8:d8:60:2a:53:44:
dd:56:79:a5:00:91:c2:dd:d2:e0:cf:ed:6e:6c:50:
65:f0:13:c2:ea:0d:1b:21:65:4e:18:7c:67:63:49:
48:11:85:af:86:30:42:29:cc:c7:70:12:76:15:75:
b8:e2:2e:56:d7:27:e8:18:21:7d:f9:61:fc:86:7b:
75:fd:f2:99:db:7c:ed:96:3b:24:4a:66:c5:6a:42:
36:c3:ad:d2:d7:cf:2e:ba:f8:e3:a2:84:1b:fc:db:
68:d2:3c:3d:7f:86:06:ae:30:87:d2:10:1c:57:d3:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3B:4B:37:21:33:87:3D:D3:FF:8A:E1:DC:62:F6:10:78:15:26:15
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:66:23:bc:58:7b:70:fc:67:45:94:71:eb:71:4d:03:76:00:
cd:c8:f8:09:ee:bc:2d:40:4a:4a:24:83:1b:24:aa:bd:31:e3:
fc:e8:56:6e:00:7c:f0:8b:c8:db:bb:69:7a:cf:f8:f7:f4:75:
4d:20:5f:6a:96:61:69:eb:4b:76:37:e2:00:5b:97:be:66:b1:
97:8c:d3:02:08:6c:41:da:c1:14:1e:ee:c3:b0:7e:a9:18:a0:
d2:67:b5:17:1b:d2:94:33:73:29:16:55:2b:15:6a:ce:7e:a3:
e4:05:92:d4:58:6f:6b:6e:f9:88:60:0f:dc:c1:15:80:76:b5:
99:a9:84:27:50:e1:67:31:cb:4e:6a:4c:ea:fd:72:dd:d3:3e:
98:b2:77:8c:8d:46:2a:a7:38:48:4f:c9:fb:65:5b:b1:b6:2f:
4f:88:43:8f:89:b2:4b:07:25:78:7b:d7:a7:7f:b5:f9:5f:10:
2f:c0:7e:ae:87:ac:cb:d9:4b:61:b0:64:a2:0f:70:a7:1e:81:
a8:2d:a4:80:bf:3f:d3:3e:bb:8a:29:48:0c:fa:df:38:88:ac:
ff:04:a3:ed:bd:7c:8b:4d:9a:c4:d6:06:17:f4:d4:8d:18:b9:
4a:97:2c:3e:d6:5f:20:8f:43:57:70:49:e5:e9:a8:ff:39:f7:
8d:d9:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:29 2026 by rpki-client