Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: H0kRNyZ0dTUTtisqOZ0W7yXjDxqjUlURwtln91cOwO4=
Subject key identifier: 55:EE:42:C1:BE:7C:D1:E7:8C:00:15:6D:AF:26:40:47:A0:59:DA:D0
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019D2816788C80B6D9FCBD11C3E0612243B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 1728
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: RrsaAahk0Vba-XkVgGrcvV0uLOU.roa (hash: CIPZFtJdaOw/Ie6ppEcG6OhrO0JGBP2pAR46eIvpN8g=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: aGgvB2p1tJfytCF/E5swuchDgQ38w95642XamjEqTZo=)
3: _8f64H6kLzJHWcOIk3oSyh4YXRM.roa (hash: n4LZZXz9oD2l4x9qTuFFYxB9HvtLZ63oNauDlgkiRcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:78:8c:80:b6:d9:fc:bd:11:c3:e0:61:22:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=55ee42c1be7cd1e78c00156daf264047a059dad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:06:88:21:44:42:0a:9b:78:db:ae:8b:b6:
e5:d8:87:6e:3f:6d:5f:bc:24:fd:26:d2:9d:24:4a:
0e:7c:8d:32:01:cd:65:db:a1:65:fc:84:5e:7e:21:
58:46:ea:78:47:88:68:a6:ec:46:b2:e5:0c:4b:f8:
0a:02:1f:8a:3b:9f:86:57:f0:32:08:30:78:27:cf:
98:96:63:42:5d:37:0e:0e:b8:6c:59:e8:71:f3:54:
7b:61:82:6f:bc:14:3a:c0:d3:5a:19:10:41:96:e8:
14:4a:a5:a3:5d:9a:6b:80:3c:24:72:17:3a:e3:f0:
8a:ff:12:f6:cd:cf:6a:42:12:06:f0:bb:84:17:a0:
1f:27:31:1f:b9:e2:02:14:45:2d:3c:fb:b3:f3:ff:
15:4e:92:9e:f0:07:e7:27:e5:d9:9c:fb:85:5f:a8:
05:89:52:c9:8e:f5:70:8c:af:63:4b:be:f4:8b:66:
30:a4:37:92:45:6a:0b:ad:02:41:59:f3:c8:5c:27:
86:d4:bc:27:40:b8:1a:21:25:6e:d6:05:77:1f:16:
9b:fc:32:95:a4:7c:03:39:54:ca:b9:1f:93:29:63:
e7:ac:bf:91:a9:e6:48:b2:77:4d:e1:c1:5b:83:d3:
b2:1b:a7:c0:66:c6:31:2a:da:5f:3e:41:97:61:88:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:42:C1:BE:7C:D1:E7:8C:00:15:6D:AF:26:40:47:A0:59:DA:D0
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:ec:09:06:52:60:9b:c3:05:35:88:fd:54:3a:90:40:08:
c5:1c:8b:c7:45:45:58:e9:24:ec:c8:79:ad:a0:a0:fd:9a:1e:
c9:13:2a:39:43:56:eb:7b:a9:be:74:18:58:b9:e1:72:4a:e8:
73:d4:2f:d1:c9:53:91:4c:e6:13:56:90:5b:86:b3:2a:47:a1:
fa:44:be:23:e1:ee:3a:c1:3f:2f:1a:75:75:35:b5:6e:7f:0c:
65:65:58:2b:15:65:82:e5:4a:ba:04:37:79:76:98:4d:de:d2:
38:f0:0d:78:7a:3a:8a:8f:bd:db:06:13:64:c4:d4:d4:1e:28:
7f:a2:29:e9:47:39:14:b3:b6:ea:bf:37:60:0c:e7:9b:4f:1d:
b4:69:47:35:64:36:2c:06:37:85:97:84:47:77:ac:ed:d9:6d:
88:62:4e:8f:b4:a0:a5:d0:03:99:44:06:1b:21:cd:6e:80:e7:
df:26:8b:8e:f3:84:b5:b0:2b:2c:0a:d6:47:4f:07:95:43:32:
02:6f:d0:9d:6a:a8:d4:28:5e:43:ec:9e:3d:6d:3c:45:ac:e4:
28:43:2c:ac:87:6b:33:62:3a:8f:34:ee:f0:a0:8f:3c:87:e7:
f0:86:15:03:58:bf:c8:2a:4e:c1:25:38:b4:49:d3:8e:eb:9f:
49:dc:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:07 2026 by rpki-client