Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: GcMrfBNbNOecttVZ2VaZG/7GXzrFQBgkkHgIpbbAQi8=
Subject key identifier: AD:8C:07:D2:EB:C3:4C:2B:26:7F:7A:B1:D5:A7:6F:38:07:5E:3A:07
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 019D2771E1392AC76614C045148436AB6FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1896
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: kJGhmsXC5P86XYJd+f/409zrY1e+pz8uDk3YlB5LCc4=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e1:39:2a:c7:66:14:c0:45:14:84:36:ab:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=ad8c07d2ebc34c2b267f7ab1d5a76f38075e3a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:c6:0f:52:60:77:16:48:0f:7c:ba:37:d8:
38:81:ce:d7:b1:1b:07:3f:c2:2c:1f:5a:cd:bd:f4:
60:49:d6:ef:ed:a7:a7:72:ca:0e:cc:68:38:e4:78:
df:18:52:36:e1:c8:b9:d7:8e:48:8d:cc:34:63:99:
03:9a:38:e1:d9:69:f6:b7:06:76:48:21:48:d9:2c:
be:4b:d6:79:b6:64:bf:d3:4a:45:4f:ca:6f:f8:be:
45:02:ab:6d:15:48:a8:57:55:eb:d1:61:85:d0:3d:
a9:c0:c2:f9:64:65:21:aa:84:54:02:aa:31:be:36:
05:be:4b:c0:e1:df:32:b9:5c:07:28:cd:55:b5:01:
fc:ea:0a:42:67:a4:55:38:b9:33:51:60:bf:a2:53:
a0:ac:da:6b:9f:ef:c3:50:06:42:7f:e3:66:6f:53:
4a:9b:3a:de:f2:6c:ee:06:87:9d:3d:d4:d7:12:36:
63:9d:11:78:bd:16:5d:25:1f:2e:31:6d:40:04:ea:
f9:e7:9c:1e:b7:17:cd:1e:f1:4c:38:0d:9e:20:8b:
74:e7:43:6f:c3:59:07:f4:87:93:eb:9a:b6:a6:e0:
5d:1d:77:11:03:02:55:c2:bc:19:45:c4:a4:a7:8a:
a8:06:aa:af:03:12:1d:84:2c:f9:ce:ed:d1:f0:05:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:07:D2:EB:C3:4C:2B:26:7F:7A:B1:D5:A7:6F:38:07:5E:3A:07
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ea:a1:b7:91:fd:18:31:7a:d0:bd:09:b2:a0:9a:33:07:f1:
f3:cd:33:dd:23:3c:01:b0:97:32:8c:8e:3a:a5:25:ab:6a:83:
3d:67:4b:c6:4d:ae:53:5b:46:cc:6e:55:dc:ea:a6:e5:4e:23:
6d:ca:33:4e:86:43:5f:00:56:42:69:9e:b8:e8:35:cf:00:5f:
d2:dc:96:e8:b7:ab:a8:2f:21:d1:dd:f3:6a:bf:85:1c:ac:ba:
7e:e8:8b:ab:89:bf:f0:63:06:bd:65:1a:92:38:a1:bc:66:fb:
a4:82:28:09:de:88:11:0b:13:2d:13:e7:02:6d:4d:9d:16:5c:
e8:13:42:1e:ad:de:5a:c4:a8:c8:0d:32:ab:6a:43:15:81:9f:
78:7b:9b:58:56:70:46:2e:e9:d3:ec:be:3f:ca:96:42:6f:27:
b1:e4:84:0c:1d:29:f0:96:14:6a:e9:a5:ee:33:e4:d1:33:87:
98:1e:ba:99:dd:25:d1:e0:6b:27:1b:5e:f8:61:a5:49:20:5e:
32:65:c6:68:93:26:a5:59:64:c0:ac:aa:d4:31:c6:d0:6c:8c:
ef:18:7f:b4:15:87:0b:63:d8:c0:ce:5e:42:cf:85:49:7f:8f:
7c:f7:46:8f:27:3b:fd:10:4e:54:63:16:4b:09:9f:d8:19:2f:
ea:6b:59:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:16 2026 by rpki-client