Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: eFGqLGxuUZl9dZxN6bYOh7ZOWQwcP4gWoNWwm1oHSrQ=
Subject key identifier: 84:57:57:58:68:98:3D:89:48:7C:E5:83:36:08:83:1D:D1:F7:61:92
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019D25BAD2D23761A324F5B492451156249F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 15D5
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (hash: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o=)
2: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: FcR5R+wyiGwFmwlCJirvOJllCqUpHrwp2CY1c813SUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d2:d2:37:61:a3:24:f5:b4:92:45:11:56:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=8457575868983d89487ce5833608831dd1f76192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:3c:43:1b:d9:8f:c3:2a:d2:40:6b:9d:48:
9e:9f:bc:e1:ef:c1:3c:74:38:f5:4a:ea:7a:bd:6b:
e1:1d:7d:e5:a1:ae:b0:dc:af:92:06:fb:b7:d7:44:
7d:0e:a9:2f:ad:b7:83:31:10:e3:75:b4:5d:27:bd:
75:85:9c:fc:90:76:98:2c:70:98:2a:9e:0d:d6:8b:
a8:51:18:b3:53:65:ee:24:bc:bf:4c:a2:8a:94:35:
1e:4d:4c:99:67:e5:05:1f:c1:ac:a5:f3:ab:a8:68:
37:af:6b:1d:61:91:72:32:c1:15:d8:ae:cd:aa:72:
30:85:a6:e5:66:7c:a6:2d:b4:89:38:8f:f1:f7:33:
6e:82:98:4f:bc:66:a5:25:a5:92:b5:f4:6b:e1:a4:
01:d9:ac:4c:b5:fa:ca:3c:80:92:eb:cd:dc:0f:ef:
6e:45:09:d5:cc:b1:91:54:b8:35:4d:76:61:7a:7b:
d8:e4:fd:3d:8e:a2:b8:e5:ca:4f:67:8e:0a:79:1a:
64:ed:8e:8a:ec:5a:49:42:d7:29:c5:19:d4:e1:d1:
90:f3:65:10:be:64:ea:59:42:19:f4:7d:7f:73:9c:
ca:87:3a:34:6b:5f:54:03:05:77:b8:98:95:19:32:
ee:da:5e:b2:29:34:7a:94:f6:60:31:b4:4e:36:f8:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:57:58:68:98:3D:89:48:7C:E5:83:36:08:83:1D:D1:F7:61:92
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:51:00:60:cf:5b:c6:8f:2c:ed:c3:58:0c:4c:c8:c2:74:0f:
88:7d:26:ff:68:9a:43:b7:38:94:f6:1c:91:b0:b1:a1:db:b0:
c2:49:6d:35:d2:ac:19:10:c8:68:53:13:92:b8:0b:58:7a:ba:
42:d5:9c:bf:4c:b9:2f:97:40:1b:46:98:e5:b5:39:d4:03:61:
fa:29:f6:d8:31:5f:49:b9:10:64:a3:3a:7c:bb:22:bf:d7:9f:
16:6d:fa:30:f7:57:e2:95:c9:24:47:68:36:a2:fb:ff:46:ce:
cb:ff:20:0e:1c:f6:74:c0:de:8c:55:ae:1d:d3:7f:43:c0:31:
ec:f1:14:3d:65:48:e3:2b:d9:8b:22:63:3e:6e:cc:cb:dc:cb:
38:c7:e4:71:d7:9a:f5:71:9a:2d:bb:1c:07:c7:ec:dc:bd:e8:
1f:ae:cb:eb:2d:a4:14:44:52:72:2a:f9:45:47:9b:f9:5f:2d:
8a:db:56:e1:6d:68:03:65:4f:f0:42:d2:3d:69:75:70:67:5d:
fb:bd:9c:79:b7:7d:fb:84:31:43:59:96:6d:27:3b:61:48:17:
91:55:6f:71:ec:d1:f5:77:14:74:f4:3b:60:1a:70:3b:c6:75:
ba:9d:33:0c:37:66:77:86:1f:b3:b1:62:01:08:7a:87:f2:25:
9c:9f:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:22 2026 by rpki-client