Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: WirLtzd21q488TqcokHpzpEwUjG8gUlfTM54n5KUJpk=
Subject key identifier: 60:B3:7A:36:00:1C:A3:DF:AB:97:63:22:A9:E0:D5:51:09:DB:94:D8
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019D25F14C055CCDA991535D530214EE0821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 108D
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa (hash: ArSk8FNvQG5dEX1fm0nCfGPhiKh2s1aLul9gIYaDXF8=)
2: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: F7NDpSiFyhcYmcm0q+fWi/eVau80jCn6hevE8fPg0JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4c:05:5c:cd:a9:91:53:5d:53:02:14:ee:08:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=60b37a36001ca3dfab976322a9e0d55109db94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:b9:97:8b:7b:32:dc:13:18:ea:50:f6:8f:
c7:61:b3:6f:ad:55:82:7b:1c:1a:58:db:2b:99:8d:
0f:9e:8a:ab:8f:5a:eb:84:23:f5:7b:55:f9:1c:6f:
71:7a:95:84:58:db:14:a9:30:7f:7a:d1:61:6d:20:
07:70:5f:23:11:14:1f:5d:a9:92:43:99:0f:af:12:
7f:78:7e:68:0f:7b:6e:c0:bd:e5:0f:50:ce:e0:d2:
e1:fa:b0:92:f3:d9:33:db:49:03:c7:3e:5d:15:21:
3d:a4:aa:50:fd:07:bc:d5:9a:9f:02:70:b3:d6:f7:
3a:57:bf:2c:3e:ce:e8:1a:53:99:56:d1:7a:98:21:
b7:b4:a2:97:d6:9c:94:cb:54:ad:1f:c2:39:5f:51:
35:61:ff:95:95:4c:a5:b4:d9:c0:df:87:8c:03:b1:
05:b3:3c:93:0c:a8:84:d0:b1:d8:55:79:ef:11:a2:
4d:f3:f9:28:54:e1:a4:80:9c:cf:23:e8:61:fa:9e:
18:de:0c:75:3b:96:8d:74:61:9f:81:9a:82:b9:88:
b2:f0:27:6f:bd:4d:2c:e6:30:1e:bf:f9:50:7c:4b:
23:ca:d3:ca:03:14:c4:29:37:4e:c6:58:41:4b:ae:
c3:d0:7e:c6:d2:bf:a3:68:00:fd:71:3b:2f:37:9b:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:7A:36:00:1C:A3:DF:AB:97:63:22:A9:E0:D5:51:09:DB:94:D8
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:cc:20:b8:0b:bd:07:9a:75:f8:79:56:36:4c:6e:03:02:
23:54:f0:67:ca:30:d4:5e:92:d3:bb:59:0e:e1:d7:6e:63:55:
75:d1:b9:fd:fa:72:26:ca:44:c4:92:b9:61:09:8d:5c:12:64:
e9:07:48:53:76:fc:77:93:83:31:f2:ac:3b:b9:e2:b3:b7:78:
2a:99:a5:0d:34:b7:11:49:f4:47:6b:32:b1:82:72:43:1c:6a:
40:ae:28:3f:5f:60:f2:74:a8:bd:30:5e:6d:d2:bb:07:9a:13:
b6:72:dd:51:24:83:14:ae:5e:14:a7:74:6f:14:14:b2:d6:fa:
8f:88:5e:fa:fa:64:69:ee:53:d4:b1:d6:f6:46:55:79:ed:5b:
39:9a:e6:61:9a:df:09:2c:ca:d4:56:5c:56:66:fc:85:ea:b5:
8c:fd:4d:aa:a0:fb:3a:91:cd:c2:ed:21:46:d7:8c:6f:78:27:
ea:35:b3:a6:dd:e5:85:a9:e8:b6:a3:44:7d:d9:9c:6f:d6:01:
42:2f:99:7a:b7:46:6b:39:9d:85:27:4e:2a:1f:7e:1f:0d:5c:
ef:22:2f:66:73:ce:0d:b7:0e:8a:6b:52:8a:75:35:82:52:d3:
11:e2:c6:30:30:a5:51:08:4a:8d:dd:16:f6:bc:e6:14:47:e6:
d8:29:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:19 2026 by rpki-client