Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: LL3u7ND3CKmrbzHOOfk3Q/uvk1aorxXWKJu78Uld+Uo=
Subject key identifier: 72:E5:D8:BF:0B:D5:5D:D0:5B:EE:E5:AA:B6:9F:49:2F:B2:47:4D:42
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01A0E43E5214CEBC379ABA9FB7E8D0FD2016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 17D1
Signing time: Sun 27 Sep 2026 19:01:24 +0000
Manifest this update: Sun 27 Sep 2026 19:01:24 +0000
Manifest next update: Mon 28 Sep 2026 19:01:24 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: 1vW5jlmxx1iXSpu+uV0fF8jaJYk8vBGkoBgDLq8oBPc=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:52:14:ce:bc:37:9a:ba:9f:b7:e8:d0:fd:20:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Sep 27 19:01:24 2026 GMT
Not After : Sep 28 19:01:24 2026 GMT
Subject: CN=72e5d8bf0bd55dd05beee5aab69f492fb2474d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:ec:25:29:86:9b:d5:83:12:d9:af:94:2b:
0a:e1:c9:ae:72:83:e2:31:19:d8:f7:24:4a:40:c3:
fb:b4:4f:fb:09:ce:77:ff:7c:b9:62:67:e5:59:a7:
42:b3:4f:ed:1c:3a:4c:6c:76:c5:a9:34:d2:25:12:
a1:4d:c0:33:cd:9a:7c:89:cf:27:ff:83:a1:16:b1:
3a:d9:70:90:e3:b6:41:e3:5a:87:5e:9a:eb:02:e4:
50:20:41:0a:89:0e:73:cb:2e:4e:a7:54:d4:73:d6:
6e:96:73:95:29:3d:a9:ce:40:f3:9b:95:d8:04:74:
9a:74:2b:b2:b0:58:97:3e:c1:cb:40:ec:e8:ba:74:
f0:83:9f:fd:0c:51:72:f6:7b:81:1e:db:64:d0:83:
dc:ff:df:18:9a:a1:3b:ba:c2:55:06:9a:87:1e:43:
d4:15:33:59:b8:e6:05:13:eb:34:5e:cc:ae:4a:be:
58:4c:e5:4a:d0:d1:d8:3e:dc:3f:60:dc:6f:0c:42:
48:6a:01:63:05:33:05:16:47:90:d4:9d:4a:d3:c8:
49:a2:13:12:5f:74:3b:05:b8:d1:41:af:9a:e5:a5:
30:46:41:34:d9:6e:14:e5:2f:65:83:6e:3b:83:5c:
ae:ed:5b:16:56:8b:ec:7f:c2:26:b5:d8:82:d4:2d:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:D8:BF:0B:D5:5D:D0:5B:EE:E5:AA:B6:9F:49:2F:B2:47:4D:42
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:49:47:4b:07:8f:17:5f:15:50:9b:ad:46:8e:6d:95:a5:
dc:8c:4d:e4:10:fc:67:cd:af:17:d1:ae:5f:f5:e3:3e:0f:16:
26:a7:89:35:6b:d2:c2:54:e6:8b:20:bb:df:35:13:a5:0c:61:
fd:e4:4d:1b:69:45:70:46:b0:c9:42:cc:d5:81:a3:92:07:9e:
f5:a8:85:8d:39:4d:9b:55:ad:10:12:ff:db:77:59:32:98:9f:
9a:dd:24:eb:86:03:96:1a:a1:95:24:85:df:db:90:b3:ed:41:
86:da:44:3a:f1:e7:22:2d:d7:69:4e:eb:be:e4:d3:b0:6b:a9:
3c:3b:63:c6:e9:29:b9:60:fd:ac:be:1e:a1:93:a2:4f:04:06:
45:f6:6f:b8:4a:1a:34:d7:c8:78:f3:3e:7d:31:44:55:9c:c2:
0f:d2:ab:f5:f5:a9:35:0e:46:cc:76:a1:02:27:0a:76:dd:2a:
0c:8d:7c:74:c9:b6:17:85:5d:ad:cc:b0:00:e2:e1:eb:3b:27:
59:5b:d8:34:46:81:cb:f1:d1:29:c9:dc:2f:9b:1a:7c:23:bc:
e4:d0:66:66:ba:31:ab:e6:62:3a:f6:92:e8:38:46:95:34:72:
96:f1:5e:89:4e:c5:77:ea:37:4b:82:d5:c5:d0:23:c7:a0:dd:
3e:8e:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:44:54 2026 by rpki-client