Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: uF6+RkgfcPiQXKZe0Yqy3m1fzDKvGgz/E0T5UUc/giE=
Subject key identifier: 2D:A0:06:F8:F0:70:20:92:3E:07:DE:2A:60:D2:CC:E0:D1:66:EB:15
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019D265F7D1DBF3DCBB36F4ECB3BC1AC89CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 15E1
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: fhdEz3aD051KVdGn+f4n+I54lleeppxymZ5xYhjPvxQ=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7d:1d:bf:3d:cb:b3:6f:4e:cb:3b:c1:ac:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=2da006f8f07020923e07de2a60d2cce0d166eb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:42:9e:3b:20:33:14:0f:e7:6f:a9:d2:90:
7b:5f:a0:0d:4d:72:19:3c:ab:c0:22:6c:38:94:e0:
21:58:b2:7a:bb:45:8b:e1:8c:bb:9e:87:b0:89:bb:
89:b1:1b:e3:a0:15:9f:8b:2f:6c:82:c1:c6:09:86:
30:d4:da:dd:08:fd:5a:10:c8:71:30:1e:b6:06:94:
05:fa:ae:8a:f7:18:26:92:73:18:13:0d:53:c1:38:
2c:24:03:fb:21:d0:36:28:30:c4:27:05:2b:4a:9b:
1b:33:e6:61:63:f5:64:f4:de:a7:a4:04:db:44:9c:
3d:44:f1:f9:74:05:26:bc:d9:68:de:d4:ec:e3:2c:
eb:fa:f5:02:59:28:34:62:46:d4:f0:e8:6b:98:ec:
ea:87:9a:38:e1:20:b5:8e:81:15:13:31:37:6e:86:
91:aa:f4:57:c0:98:77:9c:5d:75:f7:44:1d:75:75:
30:08:b1:ed:ec:4a:58:2e:59:aa:05:a4:1a:30:c8:
8b:2f:a4:6d:96:50:fe:d6:5f:a4:d1:1b:88:0c:b3:
13:70:99:4c:d9:05:05:67:dc:f0:02:01:2d:b3:85:
a8:0e:97:eb:6b:bf:93:f6:87:7e:84:47:e9:49:44:
ad:81:69:46:eb:69:3d:ef:a2:5e:5d:09:a3:9e:9b:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:06:F8:F0:70:20:92:3E:07:DE:2A:60:D2:CC:E0:D1:66:EB:15
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6b:e7:8b:09:b6:f3:6c:d1:a0:ce:2b:b9:87:6c:55:16:f9:
67:07:27:d6:72:2b:86:f8:f3:e3:dc:cf:9c:0e:c7:4c:64:ea:
ed:26:a1:0b:8e:ce:ac:fa:de:98:64:74:0e:3d:a3:a5:53:08:
df:70:81:d0:5f:7e:52:70:17:fd:ef:8f:73:55:95:5b:35:a3:
c3:bc:e9:62:4f:b7:67:7b:94:9c:1b:92:46:e6:1a:9e:b0:23:
85:7f:23:f5:d9:e0:80:39:ee:57:4d:b8:e9:49:51:b3:d7:7e:
60:57:cf:0c:f4:27:3c:85:bf:7a:d8:09:b2:3b:f3:30:ad:a6:
7e:fe:eb:f5:1c:1d:d8:df:09:69:b8:e7:03:0a:72:48:61:5f:
19:3b:48:be:9d:71:33:4a:dc:2c:88:26:0d:18:1f:88:1c:6b:
51:fa:2f:4b:6d:12:1f:ba:64:05:b4:a2:59:b6:85:be:b6:ee:
95:d3:03:c8:4e:10:46:79:9e:1f:da:b1:d6:b2:a9:ea:a6:cc:
e6:30:4b:ef:25:71:2a:24:29:4b:3a:a8:6c:7e:80:5a:8d:80:
39:85:33:c6:a4:1a:59:cc:b7:3e:51:ec:da:9e:05:43:7b:ae:
6a:aa:6d:e5:ee:71:c4:61:4d:b3:c9:f7:40:de:b8:ad:0a:72:
a3:53:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:22 2026 by rpki-client