
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: xccvCFImnpskaan4Rh1L5nTAeobGwszW2dV/JCgXsJU=
Subject key identifier: 17:09:AB:10:B2:79:DD:0C:31:2D:97:7A:8F:6C:03:38:A5:3D:34:43
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019D2695D23F3BA5628C564C3B4F92E7229C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 156A
Signing time: Wed 25 Mar 2026 20:00:45 +0000
Manifest this update: Wed 25 Mar 2026 20:00:45 +0000
Manifest next update: Thu 26 Mar 2026 20:00:45 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: Twadr+V78WQusPH9daZCzlYn5ZVPhdWqfr5b+D8tB5Y=)
2: fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa (hash: q8r4P3JkpztaMfofkjIYM4mXiBLUcbGTHnSsBJ/p6UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d2:3f:3b:a5:62:8c:56:4c:3b:4f:92:e7:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Mar 25 20:00:45 2026 GMT
Not After : Mar 26 20:00:45 2026 GMT
Subject: CN=1709ab10b279dd0c312d977a8f6c0338a53d3443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:88:cc:42:f2:3f:9c:a7:c1:5b:25:79:70:
e0:47:5c:1e:4c:2e:36:fc:24:8e:1e:1c:55:e8:0b:
ea:89:49:7b:6e:01:8b:d7:fa:69:22:93:22:0b:91:
2a:7e:2b:bd:82:b6:d4:37:a8:b9:dd:fc:ad:4a:eb:
ca:14:6a:0c:c7:4d:3b:e5:ea:fb:d4:2c:43:b7:c8:
58:ce:d8:d9:34:50:4c:65:db:ed:29:24:8c:5c:7b:
73:bd:5e:a4:fa:6c:cf:88:6d:3f:63:04:36:7e:11:
92:0a:25:db:e5:bc:61:a6:36:27:d7:6c:14:5a:fc:
d1:7d:c1:d2:4e:54:c4:71:f7:11:37:80:a8:46:cc:
ed:d8:f4:c4:35:19:29:cf:17:70:1f:92:07:a5:ba:
5a:fd:82:6a:7e:e7:cb:98:7e:3b:a0:2e:f0:92:a1:
3d:eb:de:81:34:e3:69:84:dd:d5:8d:70:27:d4:0c:
0d:29:fd:b8:c7:15:6e:e0:3a:76:37:75:7d:e6:19:
b3:65:e6:4a:d8:cc:7b:f9:a6:e1:b2:69:de:99:13:
06:b7:ce:61:fb:2b:91:c9:ce:cd:cc:cf:4f:c7:16:
f2:fd:c2:b8:61:3a:2d:a9:0a:3a:5f:10:3b:37:d2:
4e:30:68:c2:e4:0b:f6:4e:b1:96:f1:31:5d:38:05:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:09:AB:10:B2:79:DD:0C:31:2D:97:7A:8F:6C:03:38:A5:3D:34:43
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:a1:db:8b:1d:b7:fc:8a:26:16:42:7b:51:7a:7d:f1:ea:
73:7a:4d:36:dc:f0:13:3d:b2:20:d8:2d:d9:a9:a7:bb:2e:25:
13:43:0a:fd:d1:e1:16:9a:6c:f0:40:7f:9f:08:3b:2e:8c:a3:
fa:b6:8a:ad:ed:36:64:a5:c7:5c:41:48:08:03:a8:83:c8:8e:
96:b3:87:50:44:fb:ea:e8:dd:8f:8e:16:2e:a1:91:c4:e9:96:
bd:67:0d:13:27:9a:9d:b7:8a:c7:35:fd:c3:d1:f9:29:e2:18:
d0:f6:6a:bc:c4:57:82:f0:e9:a1:f7:e8:52:ca:18:ee:7c:88:
5c:f6:44:86:75:1a:1a:7c:0c:46:7e:e8:76:1d:de:8f:99:29:
c2:7a:d9:06:b8:0e:31:37:2f:0f:d8:29:f0:2f:de:71:7a:69:
f1:b6:19:a3:f2:b4:57:53:f7:83:5c:1e:5d:87:16:07:e9:a5:
32:54:1d:51:95:f4:52:bb:00:43:86:9e:17:5b:58:35:4a:d3:
b2:85:b4:46:44:ff:0f:71:8e:01:39:9c:8a:3d:ad:cb:70:b2:
4a:92:07:64:87:49:62:a8:5f:d5:a5:38:b0:91:84:44:d8:28:
16:41:d1:90:0b:f6:cf:f3:43:1b:9b:70:83:11:6f:71:49:53:
50:57:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:39 2026 by rpki-client