Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: EPS1Sx+qe86+c81WOuI6UedhsGJORkQC2QzhgnDbdu8=
Subject key identifier: E8:86:B4:0E:9E:04:1C:06:EF:C3:38:A1:29:BE:08:B2:D5:7E:28:7A
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019D28169B06ACD803D0445D39F15B77BAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 119B
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: dORvQtWTQdr8h4TA8APfndNIMcL3ftbmn0r6JmSuZVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9b:06:ac:d8:03:d0:44:5d:39:f1:5b:77:ba:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=e886b40e9e041c06efc338a129be08b2d57e287a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:25:2a:dc:d4:1a:cf:d4:31:4a:96:ce:1a:
03:19:94:92:7a:75:28:01:57:6f:18:dc:e1:77:1d:
77:10:93:dd:57:7b:c6:f0:ac:73:cd:d5:52:4d:d1:
7e:2a:ce:a1:22:37:8e:b0:e6:23:96:d2:fc:a3:b1:
d1:aa:8b:9a:5e:fe:c1:51:4d:99:a9:22:66:04:17:
44:87:93:d0:1f:27:5a:0e:22:e0:c1:8d:f0:48:fe:
ca:30:6e:8c:f5:95:95:42:4f:f5:8c:59:46:3a:29:
19:1b:bd:5a:eb:da:d4:ea:03:d3:a9:97:f2:8a:f6:
5f:00:22:e9:54:30:c4:07:d5:24:0d:db:44:50:7c:
96:7e:73:25:41:29:ce:af:bf:d5:a0:a1:19:63:dd:
c6:f7:c8:7e:56:e6:cc:78:dc:4d:44:12:ae:a1:b4:
fb:0a:e4:29:c4:18:e5:21:0d:54:d2:a3:15:a3:97:
6f:03:03:16:0c:a2:c9:55:cd:ea:c4:9a:21:da:79:
12:f3:60:81:73:5c:bd:00:7d:04:c5:4d:06:19:8a:
3c:3f:75:3c:dc:88:41:6a:ad:08:40:45:2c:e1:b7:
3d:5b:c0:74:28:a8:3b:4e:da:81:7b:0b:50:3f:fc:
12:e9:6e:49:19:0f:5a:ee:9c:dd:d3:f2:4d:e9:16:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:B4:0E:9E:04:1C:06:EF:C3:38:A1:29:BE:08:B2:D5:7E:28:7A
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:0f:13:8c:d6:38:74:1b:7e:34:0b:29:80:73:31:4a:74:
b0:81:22:1f:c0:b3:17:c0:55:0f:44:9f:ad:72:15:db:55:04:
2c:1f:eb:8e:74:0b:81:52:fa:e0:ad:14:ff:44:23:e8:70:34:
23:9c:b6:f7:9d:00:ae:0e:66:34:37:75:b8:36:2e:9a:1f:0b:
8f:f5:f6:3d:98:48:fe:13:c9:1c:a7:70:4d:40:01:f4:90:8b:
10:2e:e3:4a:9f:67:5d:d2:fc:7e:2a:79:71:05:e8:57:dd:e3:
8f:71:42:59:1f:c2:55:e8:6f:09:17:f7:65:db:d4:07:74:dd:
28:cb:ae:df:38:4c:19:1e:f3:f5:c8:f5:dc:98:02:3a:c6:30:
51:3d:97:50:cf:e2:87:06:98:5d:ee:61:41:6e:84:ab:0f:fc:
a7:d8:b4:5f:20:1d:4e:d5:5d:15:a9:b9:eb:8a:40:6e:ac:81:
17:76:40:c4:5e:97:e7:61:b4:a6:e3:fb:c6:f1:cb:af:e0:57:
03:ed:b9:d2:2f:5d:10:8a:da:4e:77:75:a8:35:2c:b0:04:13:
62:08:c0:cd:1e:e2:36:94:14:d7:d0:13:04:ef:0c:29:41:b7:
10:7b:02:3d:be:70:c1:f3:ce:99:0f:e8:9e:00:62:c0:a6:e4:
56:41:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:55 2026 by rpki-client