Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: etTTbQnVr5RG0QJRy760duaGAtHc8twxj7XP55q0bf4=
Subject key identifier: 04:7F:93:42:15:5F:16:1F:7D:15:FA:C7:5C:C4:84:68:0B:1C:48:39
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 019D2AA9E72AFC1BB10535DE3CD8F2F482D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 11B3
Signing time: Thu 26 Mar 2026 15:01:10 +0000
Manifest this update: Thu 26 Mar 2026 15:01:10 +0000
Manifest next update: Fri 27 Mar 2026 15:01:10 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: /ubdg4anLszd7aaVdV6nBmdpNtzN9sNHVpnala94PN8=)
2: bN1bEc4HqYXvavKXD6ssUfBHAew.roa (hash: YH+C7Jl70iieB5lOKkDQudIPzyOFnd5wp6oB5jVYQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:e7:2a:fc:1b:b1:05:35:de:3c:d8:f2:f4:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Mar 26 15:01:10 2026 GMT
Not After : Mar 27 15:01:10 2026 GMT
Subject: CN=047f9342155f161f7d15fac75cc484680b1c4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:25:77:fa:af:94:86:c8:53:83:ba:3a:70:
d5:22:e4:5f:81:db:84:7a:97:5e:a0:26:1f:9e:e9:
3e:ed:5b:b2:69:76:35:dc:00:73:f9:8f:e3:04:76:
13:62:77:0a:e9:77:c2:b2:f3:6c:b5:dc:ce:c7:d2:
9f:50:c4:63:f2:27:4c:a9:0d:0d:4d:f8:8c:8b:7a:
2d:75:da:3a:5f:79:c5:4f:90:1f:5b:36:79:43:6b:
5e:53:4d:b0:4d:7d:d4:7f:2e:0d:e4:68:4a:9b:c8:
2c:f8:c2:fa:2d:58:6f:67:98:5e:80:61:b0:cb:d2:
6e:f4:4d:45:90:d8:26:73:3d:32:93:50:e0:f6:00:
81:8e:de:ae:73:71:0b:22:08:e6:e8:db:77:d5:85:
b5:fe:fb:1d:6f:f9:da:38:1e:e8:2a:d9:50:20:ee:
a8:64:39:ca:3e:6d:a2:af:43:74:54:1a:e1:98:81:
47:25:3d:b4:95:83:dd:5b:78:c2:9c:32:9b:7d:8a:
0a:c2:8b:72:e8:48:7d:2a:89:72:0b:f3:ff:df:a6:
a4:7a:5a:95:1a:ba:4a:2d:49:70:41:af:bf:ba:5e:
74:9b:4d:44:b4:8b:74:fb:5b:92:5d:ec:9c:fc:51:
af:58:95:7e:93:8b:1c:00:2b:8f:2a:02:76:71:87:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7F:93:42:15:5F:16:1F:7D:15:FA:C7:5C:C4:84:68:0B:1C:48:39
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:71:fb:04:f1:e3:4a:4e:b4:59:ce:34:86:30:61:2b:82:46:
b9:ab:e5:26:32:d2:bf:27:bd:da:82:46:16:00:ac:e7:35:72:
fc:55:6c:a2:34:b9:d4:a8:c1:04:5e:a6:50:97:90:28:3a:7d:
87:bc:dc:43:cc:ec:c4:df:58:88:52:fc:b1:20:3f:65:ed:ee:
97:d6:d9:e8:c0:e2:bf:8f:f3:59:71:f5:60:86:3e:fb:12:cc:
5f:ae:93:80:f3:5f:f5:27:23:7c:a3:17:70:92:36:78:5a:2f:
15:6f:0c:2e:d8:f8:8d:87:29:1d:1d:aa:18:2b:c6:46:de:4f:
ec:10:60:9e:29:81:74:ca:e6:d5:ab:eb:e7:40:ed:cc:8a:53:
03:5b:7e:86:10:f0:83:2f:be:3b:a7:39:cd:bd:a5:cb:68:93:
3b:90:bb:3b:16:0d:71:6e:f6:72:6d:6f:0e:bc:ce:ae:f2:40:
6a:55:e0:96:83:d4:f5:a7:d6:fe:7e:44:09:93:09:e2:fb:24:
51:cb:44:2e:9d:20:5b:35:1e:e4:c0:fd:7a:a0:4b:1e:24:e4:
e0:8a:f6:32:d4:4c:88:0c:93:ff:c1:8a:5a:ec:fc:d6:1a:cd:
11:1c:f2:c8:5f:7b:5e:d4:ba:5b:26:d9:7f:7d:a0:6e:75:66:
7d:e1:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:02 2026 by rpki-client