Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: hcOEEkQqwpBO5hySKRr/Q/3CYxLzJUHf1MZ5bPHUVZc=
Subject key identifier: 18:0B:C0:4C:EB:28:17:9D:A4:74:3E:31:5B:F9:3D:E3:D4:BA:04:F4
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019D2997806F66CBC15B4D263AA41EC9BAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0FE2
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: RJEq5mYfAuV3MpHzJhdbxNThh9azdwtTxFQHLMhI+XQ=)
3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:80:6f:66:cb:c1:5b:4d:26:3a:a4:1e:c9:ba:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=180bc04ceb28179da4743e315bf93de3d4ba04f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:ac:bc:50:ee:c2:84:f3:44:40:ff:98:d2:
15:9b:45:6f:43:06:9e:d7:1d:ff:b3:f7:2b:1a:dd:
08:96:3b:d7:0b:c7:b4:c5:fc:0f:71:c0:52:42:f2:
69:3d:b8:bc:28:0a:04:b7:7f:32:33:7e:1b:bb:46:
d6:06:6d:ec:67:a7:0b:ae:0c:af:4e:eb:e7:87:4d:
08:a3:c0:ee:ef:0f:62:86:c2:ef:56:42:25:52:20:
0c:44:be:c0:4a:33:0a:81:5e:b6:76:60:87:b7:05:
ec:8c:7a:4f:d7:8c:b9:67:db:be:32:bc:df:59:bb:
37:fc:99:2d:d5:aa:d2:8c:db:b4:3f:98:d8:f4:00:
81:60:f3:1f:31:3d:c7:1f:ab:ea:17:e1:81:11:23:
0f:7a:be:5c:22:0d:ae:cd:4a:e8:61:f9:7d:ad:2f:
26:43:97:8d:b4:fa:cb:b0:05:d3:87:4d:ae:75:cb:
ac:42:4f:ff:00:0d:3d:fa:83:c8:87:28:e0:71:80:
41:55:62:8f:35:36:d1:fc:75:06:14:61:16:56:ea:
22:d3:ea:cf:1c:97:6c:5b:64:8b:90:d5:2d:e3:2f:
1d:16:16:ad:a5:fd:0b:7e:43:a6:69:ab:ee:e4:0f:
c6:ed:42:af:53:95:12:f0:35:f3:87:e7:a4:d6:42:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:C0:4C:EB:28:17:9D:A4:74:3E:31:5B:F9:3D:E3:D4:BA:04:F4
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:32:15:2f:d4:16:a8:ed:52:7d:ca:1d:55:2e:c2:f0:d2:
f8:fd:bf:cc:3c:4a:ab:2f:83:7a:30:30:0d:56:92:f1:6f:26:
52:72:5e:b8:9c:0b:61:c5:7d:9c:85:20:3c:97:b0:d1:e3:73:
43:7c:92:26:b9:95:d8:b9:cd:69:84:2f:84:ee:87:a3:fe:72:
b1:63:56:86:cf:7e:c3:9e:3a:55:57:00:14:c4:31:f5:94:c8:
03:e6:53:16:2c:ee:30:78:7b:2e:03:9f:c6:1d:c8:b4:17:b4:
dd:95:2c:9d:90:16:ca:3a:d5:4f:ea:29:27:c0:aa:47:aa:ff:
38:be:9e:87:c2:61:02:ed:ae:40:fa:eb:ad:34:ac:56:be:38:
f8:a7:93:ed:15:2c:4b:a3:e1:ca:2e:a7:9e:8d:70:8f:ac:62:
35:e3:9c:f0:16:30:57:83:45:0d:71:de:14:d0:47:51:c8:69:
16:02:9c:23:02:0e:f5:9f:4c:5b:e6:e5:8b:39:9e:f8:41:52:
46:b6:e1:e7:87:00:92:11:08:2b:a2:e1:37:5a:fc:51:dd:7f:
b6:52:5b:ae:33:af:f4:f1:3c:b0:06:26:db:e4:79:0d:ff:31:
68:68:cc:5b:bf:e9:55:83:76:20:fd:84:f0:fb:2c:a3:60:c5:
41:43:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:32 2026 by rpki-client