Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier: AwPcQQag4tn7R3zQrpOYireu5Cyc2jbxJaXbAleL8d4=
Subject key identifier: 32:0E:E3:E5:5D:B1:FC:48:D4:FD:91:4F:30:3B:EA:12:22:39:2B:25
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019D2996C72B7ED120C9CB45AC5269DE8369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number: 13AD
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=)
2: Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa (hash: pR+eHKxdsqOeJhrr2qYTxhhUH69JVErIDEpF2ZKp/Bc=)
3: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: 8U5rSA3Kcwd5qyLYGaGuhwDUJTCq1UFC6u82KBnlZXc=)
4: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=)
5: XEGrGY29N2_6fdEZQllMn9S3ctY.roa (hash: FoInU+oGSpZKQRSWi66xB6iIQ2i/avIu/9TIfHo6uB0=)
6: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=)
7: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=)
8: uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa (hash: 3lqaJbLuu76YzS5K2R73vb0E1obPhoOUMrSjJHQL5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c7:2b:7e:d1:20:c9:cb:45:ac:52:69:de:83:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=320ee3e55db1fc48d4fd914f303bea1222392b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:8d:d0:71:c5:8b:2c:59:e6:aa:2c:42:e7:
44:1c:92:2f:b7:88:ec:5a:88:d8:70:3d:35:71:97:
fc:97:8e:e5:74:7c:8f:06:38:28:62:b7:3d:2f:d5:
a5:27:78:22:bf:4d:cc:96:be:3f:90:77:88:59:b1:
b1:c1:b0:29:de:77:22:d5:9a:30:ce:7c:f9:c7:93:
38:64:08:d5:9e:d7:4f:ab:84:d5:96:b9:c6:54:6c:
f4:68:72:d0:0e:c6:a6:33:03:47:e0:9a:28:1c:d3:
af:03:5c:e4:a5:31:41:73:3a:ca:ab:94:05:a3:d4:
db:f7:2c:96:91:bc:e8:9c:1b:b6:c2:82:0b:7c:88:
4a:5b:6d:6b:57:48:97:8e:f0:ac:d5:38:49:dd:3c:
b9:2a:01:74:bd:74:7b:7a:33:fd:06:af:07:df:83:
51:40:e4:8d:31:23:31:cd:ea:36:ce:2a:c4:65:ac:
2d:60:15:d3:3a:0f:6b:8b:2a:8b:ed:da:08:b7:67:
05:45:38:03:2e:45:c0:d4:13:de:01:57:50:ce:fd:
45:fb:86:a6:c1:99:79:67:8a:3b:ac:d6:d8:7f:da:
c7:9d:38:9b:f5:25:60:10:79:41:de:c8:ec:36:37:
e1:c3:ed:ad:e6:1b:02:be:f2:ac:38:e9:d6:91:1b:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0E:E3:E5:5D:B1:FC:48:D4:FD:91:4F:30:3B:EA:12:22:39:2B:25
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5a:00:da:f8:8c:c8:ad:2c:95:ac:d2:74:49:ca:6a:b2:7c:
8d:6b:2b:0c:c1:46:5f:c5:9f:17:9e:e3:5d:8d:8a:1b:a1:86:
f2:d5:24:81:8d:e0:d9:9e:6f:54:9f:5f:62:18:9c:bb:11:e3:
c1:3b:8b:ba:6a:ae:85:4f:0b:d0:d2:47:0f:27:0a:df:34:78:
4a:b1:1f:cf:00:3c:7f:39:42:de:d4:7b:7e:66:be:79:11:00:
12:cc:b1:88:41:9a:f4:84:76:d6:77:98:eb:d1:94:ea:87:5a:
6b:bc:3a:f8:51:1b:30:d5:a3:95:7d:29:a4:cf:c0:5d:60:72:
63:96:ed:e5:25:81:69:2e:9e:a2:ba:22:c5:70:8a:c8:62:31:
1b:5d:8f:1e:50:4a:c6:24:c7:70:08:2d:c1:49:1e:32:d8:eb:
d8:c0:da:9a:fc:f8:ab:e6:50:e3:0e:ba:2e:01:ce:86:b8:0c:
05:98:50:b4:81:48:a1:2d:cb:f8:4f:4b:b9:23:68:d8:89:19:
b8:52:c0:39:a7:2a:2a:71:3a:f1:ad:ae:77:04:e4:7f:70:1d:
02:f5:77:28:53:96:c3:07:e8:57:e1:a9:1e:d0:ec:a9:1d:75:
00:b3:fe:17:00:c2:d9:80:71:73:25:f4:de:71:60:09:84:0b:
22:7d:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:11 2026 by rpki-client