Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft (raw, json)
Hash identifier: ZzTnpdPuR6drPLKZWYlrWFmhUYPgz471tReERpzQTPY=
Subject key identifier: 2C:4B:6B:EA:1D:38:34:32:72:E0:8E:DC:10:9C:81:FE:34:54:2C:A3
Authority key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
Certificate issuer: /CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Certificate serial: 019D26962913C244F58B6495395AADDDAB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
Manifest number: 15E9
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl (hash: 54Bq/86VsfOF8jWGfmt459SHYwDLvmQLVfY/jfwAFS4=)
2: sGGrBlYRqSk23P8-DuJvN6YMvHY.roa (hash: fiYpu/0ovSOIBxpF636vimdbeS+doh5+RZJKDO2YKf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:29:13:c2:44:f5:8b:64:95:39:5a:ad:dd:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=2c4b6bea1d38343272e08edc109c81fe34542ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:bf:23:e9:fa:7f:b0:30:91:e9:fc:13:1c:
a1:14:cc:bf:85:1d:df:06:1e:fe:3f:67:ec:ae:70:
55:8c:ca:89:26:99:b4:b0:c2:d8:87:11:bc:b6:34:
a0:e3:48:3d:39:7b:d8:86:13:62:41:98:32:32:22:
59:21:aa:86:6f:e5:53:35:ff:d7:48:42:2f:de:2c:
a2:d9:d2:33:f4:46:69:16:34:6e:82:05:99:06:81:
1a:13:df:53:e7:cd:b4:93:61:22:a8:6b:cc:af:d7:
e9:31:a9:02:55:ff:b2:c0:5a:2c:14:c7:4e:e1:e5:
57:e9:fd:e8:6b:dd:c3:41:34:82:37:da:78:d6:66:
68:7a:d7:f2:b3:00:ea:ed:0c:7a:1d:56:44:c8:19:
03:b8:fb:48:48:90:32:7b:f1:26:62:61:e4:ac:85:
79:ea:05:dd:e1:ce:f6:76:b8:eb:6a:e8:c4:e5:4a:
86:02:b1:61:5e:26:a1:ce:a3:fb:b0:0c:20:ec:5c:
2f:22:c2:57:c2:76:c1:b2:c2:64:d4:6b:32:54:bd:
85:fd:03:41:fa:6c:ae:f1:2e:71:99:5f:64:59:e0:
85:55:4a:64:20:3c:cb:e8:a9:a7:bf:77:ff:cf:4c:
12:07:60:4b:d8:4a:b5:dc:e6:6e:23:81:0a:87:65:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:6B:EA:1D:38:34:32:72:E0:8E:DC:10:9C:81:FE:34:54:2C:A3
X509v3 Authority Key Identifier:
keyid:52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d2:9c:13:1c:16:04:86:08:13:2d:c2:20:2d:9b:a6:be:4f:
4e:58:df:2f:ee:3f:ae:fc:f8:51:27:c0:1d:33:a5:9f:d7:29:
f2:9c:50:80:5f:a7:60:65:01:a9:87:52:64:e2:17:a8:29:ea:
6d:96:e0:26:5b:cc:5b:c2:3f:80:f9:f0:f7:89:9a:a4:8c:05:
3a:06:6c:0f:d7:02:09:c5:69:ee:51:46:cb:86:a7:91:62:ba:
0d:72:43:bc:38:2f:57:73:4c:b8:62:79:c3:e3:72:e9:3d:64:
a2:ea:65:04:c9:fe:ac:85:94:a8:b1:2b:45:f3:c2:0d:b7:1c:
8a:85:fd:f3:26:f2:6d:37:9f:1c:27:b0:de:71:90:fe:0d:24:
c0:77:b5:19:27:05:75:87:c3:97:d0:6a:c9:d6:ff:0f:47:8a:
97:92:a7:e2:cd:b8:66:bf:0c:d3:10:33:71:94:27:a3:00:04:
93:1a:cc:72:96:3f:d2:f3:b4:07:5e:67:2b:bd:e6:22:ac:fe:
ea:d6:a2:a6:d2:e5:db:dc:d3:21:6b:68:cf:e3:19:7c:04:0e:
ce:c1:5d:84:3a:08:72:30:84:f3:c7:60:c6:1a:58:1a:31:57:
8c:bf:11:c1:26:5e:2b:68:1e:39:a2:eb:6c:19:c8:9f:da:9b:
72:57:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:26 2026 by rpki-client