Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier: FzlLetYwlUyQ042kJeBe2yQ7ResJ4gUZWZv9BMP/guA=
Subject key identifier: 54:2C:98:B9:45:E4:28:A0:55:83:C4:61:0A:5F:9B:FA:A7:25:DD:88
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial: 019D2AA9DE814F9D3306FED6B193896A5B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number: 034D
Signing time: Thu 26 Mar 2026 15:01:08 +0000
Manifest this update: Thu 26 Mar 2026 15:01:08 +0000
Manifest next update: Fri 27 Mar 2026 15:01:08 +0000
Files and hashes: 1: kkTc02amPtTlIxSek3MxXh3dx5I.roa (hash: 3304PW+xk4phx9Vfcb2WHYzghsy9uXZSyT0CrQETvuk=)
2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: xW7roigCKEQWasb2DgljEWBdSgGH+e6ad4mNaDB8DNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:de:81:4f:9d:33:06:fe:d6:b1:93:89:6a:5b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Validity
Not Before: Mar 26 15:01:08 2026 GMT
Not After : Mar 27 15:01:08 2026 GMT
Subject: CN=542c98b945e428a05583c4610a5f9bfaa725dd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:aa:38:e2:c6:31:cd:b3:86:30:bc:c2:79:
ae:5e:2b:bb:83:70:e2:50:35:da:73:60:8a:ef:b2:
e6:ad:e0:fb:0f:73:94:50:10:b9:be:bb:1d:b8:cf:
9d:cd:75:f6:a8:8e:8d:a1:9c:4b:81:40:cc:e0:20:
b8:31:3a:11:44:7b:f1:7d:67:6e:b0:16:a5:7a:2f:
0d:1d:54:27:a3:f5:50:2d:a4:60:39:d9:cc:d0:02:
3e:da:fd:2e:28:5f:5a:f2:64:ad:16:0e:63:88:fa:
ba:69:77:f4:59:bf:ff:54:d9:12:27:51:14:4c:c8:
0b:a2:b0:db:85:75:0d:f6:dc:98:7e:fa:dd:7d:85:
41:e7:30:3e:0a:8a:48:59:0a:41:a4:40:52:81:89:
08:fb:fb:e5:15:ac:cf:4f:ad:51:4c:c5:96:89:e4:
3b:52:e6:80:c1:ed:ed:52:c5:2e:1e:ba:00:a6:15:
96:0b:0b:0e:2a:3e:86:80:11:f1:83:5d:fd:59:53:
b4:68:82:07:e3:b0:6c:8d:75:83:74:39:42:04:f6:
bb:31:e3:bd:9a:0f:4b:b6:7c:23:1c:0e:37:91:ef:
63:65:f5:00:59:47:7f:64:c2:a6:71:f6:bb:d7:b7:
41:46:6e:f7:54:47:66:a4:54:66:c4:85:d0:42:f5:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:98:B9:45:E4:28:A0:55:83:C4:61:0A:5F:9B:FA:A7:25:DD:88
X509v3 Authority Key Identifier:
keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:61:19:2d:bf:ab:3b:52:cf:c3:69:d9:fb:6b:8c:52:48:
e2:30:78:8a:85:41:2b:f1:a5:4d:0e:2f:ff:07:78:35:c2:61:
79:b0:38:47:b1:b6:28:30:71:03:f8:d7:38:23:43:a7:ff:9a:
15:33:ef:22:04:e7:37:c1:e2:c0:f1:2b:9c:b4:46:12:b9:cf:
3e:29:04:67:ab:fd:c3:63:97:da:5b:a2:25:84:84:dc:89:03:
d0:66:22:15:74:4e:66:38:fd:33:a1:d9:c2:8b:75:2d:e2:8e:
ad:63:43:80:a3:50:f1:d2:f7:c8:6c:1f:9e:ea:5b:fd:eb:69:
3e:4b:81:73:d9:bf:a4:8b:d2:8a:33:ae:8e:c5:a7:26:b5:d3:
27:5f:7e:75:77:51:c1:06:35:43:77:d2:52:f3:f6:6f:f5:10:
a1:40:7a:b1:fe:ba:91:02:c5:05:65:12:10:76:7e:d2:ab:29:
e1:cc:36:5b:9e:4f:0e:43:9e:35:7e:36:db:e0:7e:8c:f1:e0:
47:d1:1d:85:6a:e3:c7:9f:01:7e:c3:5e:87:b9:92:62:61:cd:
33:54:68:dc:69:3d:52:42:8d:f1:e4:15:e0:71:01:33:55:b8:
fe:db:85:59:db:17:54:56:85:0c:15:6f:1d:6a:93:32:8c:ca:
97:a6:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:47 2026 by rpki-client