Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: 2MBg7/2Izfgt1/NF+5dl1WaLDj503Au28vvY+PUZY/M=
Subject key identifier: E3:AE:7B:7D:2B:25:4B:B7:4C:47:D0:9B:C3:83:D7:5E:28:A6:5A:AB
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019E20912354F498090BBC5FAA424EFF5E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 11C3
Signing time: Wed 13 May 2026 09:00:43 +0000
Manifest this update: Wed 13 May 2026 09:00:43 +0000
Manifest next update: Thu 14 May 2026 09:00:43 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: 94250TW5lZtS14TYifmj1sW8N+6I/qZCaERNfjR1VkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:23:54:f4:98:09:0b:bc:5f:aa:42:4e:ff:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: May 13 09:00:43 2026 GMT
Not After : May 14 09:00:43 2026 GMT
Subject: CN=e3ae7b7d2b254bb74c47d09bc383d75e28a65aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:c5:86:7a:9f:7c:39:e8:d9:ee:78:44:33:
4e:65:3a:49:96:d9:28:32:84:84:8a:89:dc:6a:04:
c5:78:0c:0c:a4:d5:60:9a:01:85:d7:8d:69:1a:7d:
66:3a:43:e0:1f:af:c7:a1:63:c2:b3:92:79:ea:48:
9c:f6:8f:83:a1:76:ab:97:c1:e9:6e:6a:79:57:33:
36:f8:fb:08:17:f6:aa:eb:55:51:21:67:10:7e:f9:
ef:97:d7:d7:35:0e:04:ea:c4:45:91:96:08:4b:9f:
b5:f2:43:a1:2e:bc:1c:62:90:59:51:32:12:e1:04:
07:87:3d:5a:67:8b:2c:e2:91:2d:53:a8:e5:48:18:
34:73:a7:02:89:87:4b:e6:72:93:c2:9f:2b:4d:b4:
81:f4:7d:0d:89:74:b7:d5:1e:a2:4d:b6:0d:4a:98:
c9:62:e5:1c:6a:22:f5:f9:63:b6:4f:26:df:ec:d9:
9e:ee:81:14:38:e8:9f:dd:c9:38:f4:b0:af:4b:f3:
b5:9c:d6:59:53:31:3a:97:ff:68:bf:d2:e1:02:a3:
83:c4:75:7a:2b:2a:29:a0:24:b0:cc:91:57:8b:ad:
5e:29:52:7d:13:a6:b5:a7:69:6b:11:51:92:41:ba:
6a:df:a5:7d:54:58:03:f6:b9:00:1a:c2:e3:19:12:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:7B:7D:2B:25:4B:B7:4C:47:D0:9B:C3:83:D7:5E:28:A6:5A:AB
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:b7:de:3d:99:7f:9a:b6:6e:22:61:7a:e5:19:67:be:fb:
99:5a:70:4e:87:4b:b1:d5:0a:55:c8:32:07:e9:38:fb:bc:17:
ba:92:8f:3a:6f:99:19:ae:36:60:dd:0a:9b:d4:23:65:a4:30:
d2:38:24:97:e8:e7:a0:3a:3e:d4:ad:0f:63:d8:26:a3:b2:73:
e9:3b:90:97:90:8f:a8:ab:e4:13:1c:dd:9e:2f:34:fc:78:cb:
36:eb:00:3a:24:f8:e0:14:5a:c7:37:4d:7a:1c:dd:2b:72:9b:
e2:19:79:c6:a7:ea:be:76:7a:2e:24:a5:b8:b6:0f:56:ea:0b:
d0:bd:2e:50:72:a3:e1:68:80:3d:aa:af:65:ed:df:98:00:d0:
52:49:30:4a:f4:d4:1a:5e:78:52:7a:04:bc:94:06:93:f6:fd:
65:25:f7:e6:e8:02:75:c6:ea:4e:75:0b:0c:b3:1e:10:e6:03:
36:ad:3c:ad:69:12:cd:dd:3a:2b:97:3c:01:08:42:4e:30:50:
ed:c4:29:13:1b:f0:a3:c2:a8:70:7a:f4:03:b4:fc:0b:b0:b7:
a3:70:89:11:14:fb:72:c8:1b:02:5f:10:d9:12:10:c3:3d:b0:
86:41:8c:8e:4f:90:3f:32:6b:40:1b:1a:aa:da:e3:c0:43:01:
cb:b2:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:21 2026 by rpki-client