Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: pPgkobnsc2E3eD7HkC7SUtnFFyMhmGIyIdNoqy837Vs=
Subject key identifier: E1:97:9F:8C:89:7B:00:C0:86:B9:0F:ED:0D:19:32:CA:B1:21:83:6D
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 019D2A72EC4D9A12B9BEAA912EE85CF6008C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0EF3
Signing time: Thu 26 Mar 2026 14:01:07 +0000
Manifest this update: Thu 26 Mar 2026 14:01:07 +0000
Manifest next update: Fri 27 Mar 2026 14:01:07 +0000
Files and hashes: 1: QhRLDpCA8okURdA4C54ftPnnfT8.roa (hash: +BEAp9sAudWy6A/smDJICmamsmKPRmKsTiVNouNzZXg=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: FN16VioiN3OlyVauB8WztM5YcUEEqyZlPaUNfxE+rRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ec:4d:9a:12:b9:be:aa:91:2e:e8:5c:f6:00:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Mar 26 14:01:07 2026 GMT
Not After : Mar 27 14:01:07 2026 GMT
Subject: CN=e1979f8c897b00c086b90fed0d1932cab121836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:f4:4d:68:23:d7:98:a9:82:09:e3:d6:c3:
fc:3a:e8:16:55:6f:56:5b:ae:7a:e3:fe:15:a4:d8:
57:c0:aa:fc:77:7d:2f:94:4b:b6:0e:c5:89:02:e8:
61:78:98:8c:d1:6c:57:c8:0b:31:62:15:cc:2e:a9:
b0:e6:1e:73:a7:0c:db:8e:b2:4e:26:a8:fe:f4:22:
4b:d7:d1:b7:54:94:aa:f6:03:72:54:17:71:d9:54:
06:07:c5:99:70:25:91:77:40:20:8a:ac:e8:bb:7d:
5f:8b:68:93:da:c4:81:e0:22:1a:af:f8:5d:01:b5:
18:99:77:de:c9:35:f0:89:b5:dc:7c:21:fe:66:be:
6e:11:73:2e:bc:1b:f8:18:61:01:94:ee:95:2b:ba:
f3:52:b7:4e:f7:b4:2b:2e:2a:8a:be:b1:2c:e5:0e:
cb:0f:91:fb:ac:63:92:d5:9d:bb:6e:40:d1:64:12:
da:cf:66:c0:0e:9e:e5:4c:0f:8e:b6:a8:a7:81:3e:
c6:d6:2b:a2:d8:ba:81:e9:ff:b3:5b:8f:92:43:9c:
1b:1e:f0:60:86:31:80:2e:e0:2f:78:6f:1f:4d:18:
59:d3:37:2a:bf:29:43:df:48:d3:d6:42:79:6d:43:
cb:85:1a:82:fc:88:73:26:e4:8c:0d:18:c2:87:5f:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:9F:8C:89:7B:00:C0:86:B9:0F:ED:0D:19:32:CA:B1:21:83:6D
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:5c:80:b1:13:b2:fb:77:db:d6:3f:8b:6e:c3:d0:59:93:
32:db:e2:9d:7b:f1:c4:12:f0:8a:b6:9b:ef:3b:2d:32:43:f9:
20:4c:f4:a5:f4:77:cb:cc:d9:0d:29:b9:a5:93:6f:dc:8d:b6:
76:dc:10:3d:a7:b0:3e:85:6d:2e:8d:cc:b9:e4:86:71:58:1b:
69:71:d2:da:6b:f8:b6:7a:f0:6b:f0:e7:92:e2:97:b6:67:d6:
6d:79:4f:36:19:ab:b5:82:4c:54:e5:98:7f:a5:72:d4:25:65:
db:cf:1a:67:43:47:ef:ee:65:48:e5:de:0c:3a:d2:34:bf:40:
16:cf:7e:77:a9:c2:79:38:e1:49:6f:3f:3a:a6:2d:e5:6f:43:
38:a0:36:c3:46:bb:ab:20:78:ba:8d:e5:61:5e:91:d6:89:dc:
29:86:37:d8:54:43:02:2d:08:a8:7b:0b:f9:f5:b7:8a:38:62:
30:8e:ab:a9:57:b4:5c:35:27:2f:00:0e:ef:76:5a:3d:8c:ed:
91:89:fc:30:0e:2a:ca:b4:e9:21:6b:a1:09:bb:1e:d1:d9:a5:
b8:21:34:8e:e1:aa:56:1d:14:f1:63:5a:69:68:d2:e9:5a:df:
d0:b4:ae:52:55:4e:de:95:0a:c5:b1:26:9a:12:00:92:40:47:
6d:f2:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:45 2026 by rpki-client