Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: FjBEf8ubTLxm31KDAIGDT1lRDDgNCB8NFeJXiOqHl4s=
Subject key identifier: 01:24:31:05:76:3D:DD:34:45:E3:AC:06:5D:EB:64:B6:3A:06:90:A0
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019D265FAF8A32914C88B02A23EE39E3763A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 16CC
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: zNxyhTJsInBB38DhFEvcNhuDJTlVakcZUowzY66MZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:af:8a:32:91:4c:88:b0:2a:23:ee:39:e3:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=01243105763ddd3445e3ac065deb64b63a0690a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:da:8a:0c:9c:e0:df:df:9e:3b:78:01:86:
7b:95:25:cd:c0:0d:36:bd:5a:62:5c:9e:ce:bd:09:
39:2c:b2:9f:33:dd:9d:80:f0:06:59:94:12:5b:00:
45:6d:a6:42:01:3a:82:7a:9b:b5:c2:a9:24:24:fe:
ba:2d:d8:46:5d:a9:89:ed:77:61:a9:5b:86:9d:92:
be:c9:46:e3:66:bc:1b:5c:27:cb:33:5d:0d:ed:35:
97:a6:1b:e7:95:dd:f3:d5:65:cb:ca:38:42:2f:05:
d8:bb:7f:70:a6:69:ab:e6:21:d9:b1:41:b3:23:61:
c7:6e:74:df:15:72:cb:06:62:0d:85:3e:76:34:e5:
ad:e4:63:1c:30:e4:58:75:3b:3b:4a:75:70:f1:e9:
78:be:5c:0b:4d:01:77:20:72:e3:cf:27:90:7d:9f:
26:7b:b3:d1:fe:bf:61:8d:85:8e:6c:91:e0:d3:b9:
d6:d4:58:3d:fa:77:79:cc:82:b0:c3:16:19:89:41:
5f:bf:06:40:dc:33:c0:82:19:5b:51:8c:84:3e:09:
71:0b:bb:0c:fb:c5:7c:69:0b:c5:c0:ba:f5:03:09:
d7:79:b3:90:1e:de:27:16:19:bd:c3:2b:09:2f:da:
f3:6a:31:45:ba:ed:f7:8f:80:4b:30:a2:f0:d1:1d:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:31:05:76:3D:DD:34:45:E3:AC:06:5D:EB:64:B6:3A:06:90:A0
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:bb:97:ac:12:e5:62:e2:e1:c7:33:84:9a:15:fa:83:2b:
e1:e5:05:0a:0c:d2:11:ee:73:c6:1b:18:60:e9:0a:77:2a:46:
0b:91:5e:ee:e5:16:15:88:d6:ad:54:50:fe:7f:c0:3d:84:85:
95:eb:77:d7:38:01:6a:43:9f:40:3a:48:35:0c:a8:8e:ae:9f:
2b:1d:03:c2:9a:bf:ba:27:53:72:14:16:68:c9:bc:60:72:4f:
2b:1d:c1:fd:26:0d:2d:7d:c2:0d:34:0f:87:e7:5e:c9:04:86:
e9:e5:ae:01:f5:f9:98:17:41:20:55:08:1a:4c:ef:3e:53:22:
15:fd:50:62:9f:08:eb:f8:0d:2c:b4:7d:4b:ba:68:a7:f8:fe:
bd:82:cc:4c:79:69:1a:a4:55:0c:61:0c:1f:69:9a:cc:96:31:
c2:a1:02:fc:ee:2c:96:c0:3b:62:51:da:7b:46:73:f2:1d:d4:
b1:e8:81:67:e0:fe:59:7d:59:61:6c:36:af:a3:58:fa:52:eb:
83:38:15:26:19:7f:f7:74:1e:e8:e0:50:8a:ba:f4:c3:1e:ab:
6a:b1:0f:df:93:02:eb:66:08:2e:81:2d:b2:ed:d3:b4:70:3f:
ea:53:c5:2e:66:6d:73:55:e3:42:87:a7:39:58:3e:b3:d1:c7:
58:0f:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:47 2026 by rpki-client