Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: bfPjXxMWk+NMgH/dRFGYpdXSqGU3YGn/Bh0KSiacI8M=
Subject key identifier: CB:5D:71:7B:7B:59:FC:A5:B2:61:D3:C8:16:0B:74:F5:F4:B4:1E:E6
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019D27DF7886E7CEF157513769EC8DA5A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 1809
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: OzTQl093nPuHgvb4uJ0q61uAdgo.roa (hash: hmpXzU1F+pG+U/TeV3XVItayY49E8Q1T8eDs1027tKg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: EUfP6aBJnCWtI8n10V+lXePnU3br/uzLGXC2rE6wwGU=)
3: jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa (hash: qr2NzVnl1VJwrzaYNmZtgYoQsTO097Vnonun3IEMl60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:78:86:e7:ce:f1:57:51:37:69:ec:8d:a5:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=cb5d717b7b59fca5b261d3c8160b74f5f4b41ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:35:e7:9b:af:c4:ee:20:b7:ff:3c:5d:70:
a2:21:1f:d9:53:1a:35:09:3e:dc:4b:fe:aa:9e:cb:
d7:9a:9d:50:be:bc:e9:58:f2:aa:c2:ae:22:be:75:
4a:7a:41:b4:a6:9a:f4:c8:a3:d5:22:ed:b8:98:24:
b2:b4:4d:7e:e0:e6:1d:a6:63:f6:9c:99:a2:7b:20:
f2:c4:c7:74:0c:d5:6a:7a:46:04:1d:74:00:8c:ab:
f3:f2:19:bb:be:b2:32:f5:85:83:eb:b7:e1:eb:ae:
bf:f3:3f:90:24:49:91:0f:44:64:19:2d:de:36:0e:
89:e4:f4:96:80:96:24:d9:16:7c:30:78:47:d7:1a:
4f:78:85:da:09:3f:64:7c:83:46:3a:05:83:33:63:
8a:45:26:84:de:6e:f8:cc:2b:92:d3:d2:8f:19:fa:
34:0c:ff:ec:97:dc:a4:22:53:8d:25:e9:af:77:02:
3e:07:8c:e7:51:d9:c5:60:43:19:11:5b:9d:2c:a1:
33:99:5f:5e:e9:b4:08:f3:d8:55:f6:1d:89:a8:19:
7a:55:49:12:5e:71:3f:07:c3:39:58:2b:05:6f:7c:
38:9f:54:73:09:c3:d4:04:ca:7b:6d:b4:a6:94:d1:
84:e9:78:93:e8:14:bb:7b:00:6d:27:9d:63:91:a6:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:71:7B:7B:59:FC:A5:B2:61:D3:C8:16:0B:74:F5:F4:B4:1E:E6
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ca:e6:84:be:ff:e7:60:82:0f:c0:94:69:e5:ef:5d:c9:6e:
eb:e6:1a:79:b2:ed:7e:91:9c:1a:d1:a2:20:b7:3f:10:bb:fc:
7e:6e:76:b2:d9:0f:dd:db:5c:a5:b9:2a:77:37:fe:07:69:7c:
48:81:47:b1:81:78:dd:80:70:bc:5a:47:70:50:9d:6e:61:ce:
ab:a5:d3:12:f6:cc:95:35:0f:17:92:0d:05:11:e5:93:72:3c:
a2:b4:3f:43:b4:09:c3:b5:a2:d3:65:f4:ac:d2:0c:e6:72:0b:
a4:34:98:a3:94:38:df:55:33:b8:c8:a6:2d:bc:88:f0:95:51:
80:8e:5f:3d:f9:08:4a:67:ac:7b:1c:bb:7b:b7:72:37:63:02:
60:e1:25:2c:1c:d9:66:34:f5:f6:e4:98:be:5f:5f:8d:ae:c5:
b5:60:a7:3f:be:03:fa:21:c2:f6:94:ac:37:c9:13:eb:b6:c9:
2e:83:d6:02:05:26:4e:80:53:f6:7a:f1:d1:bc:83:23:7c:0a:
c6:ae:67:a3:85:14:44:56:bc:4a:af:0a:83:32:65:b2:a4:70:
c5:ba:fb:7b:1b:f0:b9:cd:fe:81:ee:82:bf:0d:dd:88:de:9c:
5b:41:1d:8f:56:79:db:90:1e:41:a6:ca:e1:6c:59:61:76:49:
e8:d9:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:58 2026 by rpki-client