Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: QASwnUeEqc/EvyBLrtCijrSGySSUzHARfdCHqscGst8=
Subject key identifier: 7A:CA:A5:2F:2D:14:DA:A6:F1:9F:80:79:63:C2:E8:FE:D7:19:11:68
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019D27A87D6E4348F15794BF859722781074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 06E5
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 8bEFNDOnuXNTbcAk6QNmtaVPGzAFb0c9sZpqovKN6dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7d:6e:43:48:f1:57:94:bf:85:97:22:78:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=7acaa52f2d14daa6f19f807963c2e8fed7191168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:34:46:d3:ee:63:78:de:f1:0b:5e:8e:f1:a7:
2e:e8:28:d3:28:1d:c3:97:6f:66:26:8f:3e:fe:95:
b5:a8:d0:08:ab:18:0c:de:e4:65:23:45:33:60:bd:
ee:0f:43:79:07:14:7f:5c:bf:e2:c5:81:66:0b:1c:
6a:01:14:f1:a3:19:20:24:c5:b7:da:b3:fe:35:3c:
b2:49:c5:0e:03:07:2d:b5:01:d8:7f:17:dd:45:b3:
fa:a8:47:b1:d3:7d:f6:18:ee:6b:b1:99:f0:3d:df:
13:8b:4d:73:87:1a:92:7e:aa:ea:29:bd:39:79:0d:
f6:79:31:d5:e5:be:bf:fa:ed:7e:15:e0:7e:fd:bb:
f1:e7:74:8d:2e:a2:ea:41:b0:1d:9a:ab:02:ce:2e:
a1:7f:ce:16:3b:80:86:e5:23:76:7c:70:fc:85:b6:
16:6e:1d:a3:8e:ee:2a:32:5b:a8:52:03:0f:de:4f:
ef:ed:e7:70:00:d2:87:d6:c9:b0:1d:7a:8e:31:8b:
9c:5b:99:16:3e:71:e2:9b:24:2a:3b:15:09:19:fd:
8c:e3:f0:6c:f3:91:2c:4e:b0:e3:27:15:05:97:38:
eb:7b:16:b8:b9:f2:f7:5f:9e:a0:1b:11:bf:13:cb:
db:e2:98:97:19:66:63:cc:6c:f0:ff:b6:b9:12:81:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:A5:2F:2D:14:DA:A6:F1:9F:80:79:63:C2:E8:FE:D7:19:11:68
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:2f:df:93:41:9c:51:cf:38:b3:cf:ba:c4:8b:38:62:ab:
10:36:df:39:80:de:8e:32:27:d6:96:f6:b6:29:d8:92:3e:84:
61:8e:6d:92:57:3f:f2:a6:86:e1:89:bb:a3:48:de:43:14:60:
07:45:d7:7f:55:bc:e1:e3:63:0c:c7:df:0b:2e:ba:6b:4a:62:
b5:d3:bd:c5:fb:4d:82:7f:99:5a:1b:87:72:fb:07:0e:ad:82:
21:40:e9:f8:c6:51:17:d0:40:e9:50:c0:f4:07:c4:ce:1e:b9:
02:f5:70:79:29:68:71:40:ec:84:e1:1a:43:3f:f9:40:76:c7:
27:b2:cd:bc:e3:eb:77:80:73:cf:83:f3:80:c8:ab:c9:90:7c:
a0:1f:4a:25:7b:38:f0:21:90:29:a4:5e:35:a2:ad:b9:b9:cb:
6e:21:fc:78:78:fc:70:35:f6:6d:29:22:f9:ae:c8:ac:d4:57:
fe:e1:75:9e:bc:6a:27:2a:05:92:9f:ef:ea:6b:7e:ff:88:07:
4a:88:a3:01:da:72:bb:3f:9e:a8:ab:bc:51:dd:81:91:05:98:
23:2b:aa:99:aa:40:46:ff:dc:b1:90:e4:d5:07:fb:20:a7:19:
8a:82:36:8f:c2:a8:45:fc:c1:46:1d:42:0f:84:f2:ab:4a:cf:
02:b5:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:57 2026 by rpki-client