Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: Bq/0j94vPcvf6JkeWmg64Rb1ACE6KlXR+ou2DzX5gBQ=
Subject key identifier: B5:D0:00:0E:13:30:36:A2:EC:90:62:7B:24:52:E4:96:44:3B:94:3F
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 019D265FCF1C3015A05D239CFA4E1BB2987D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: S85KGuABcO7n_bO4AIe1ewK8q8g.roa (hash: DRQavnwTOz4wK0AYi2a4Xmr2tC3b2FoHqOFT/oiiTE8=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: oOta8S09Em3YVfECvt1QkYvDys7q/vkwu/2oU/D5VA8=)
3: kERmId2DFd_EibfHqh4MCSjy0OI.roa (hash: mbtYNWIZ4W0nIasRUXPcBW6WvJKBeXzkM/oxx5kKexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:cf:1c:30:15:a0:5d:23:9c:fa:4e:1b:b2:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=b5d0000e133036a2ec90627b2452e496443b943f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:fc:43:aa:ca:65:89:a4:cc:a4:d8:2f:c3:
6b:60:fa:ec:57:82:e9:53:c6:8b:8e:e1:bb:1a:79:
f7:0f:d2:44:10:e3:99:65:d6:1a:38:c6:fb:8e:4b:
b6:04:08:a3:70:a8:6e:a5:1a:39:7b:0d:2d:70:41:
11:a5:51:13:7b:47:26:55:e8:d4:2a:b7:b8:cd:4f:
a0:e9:20:1a:55:8f:b4:e9:6f:93:13:9e:5c:67:db:
38:68:66:41:a0:a9:78:6e:6c:be:28:2c:d8:0d:54:
88:87:8b:d5:c6:01:53:95:6a:95:5c:6e:d5:e5:47:
6c:0e:80:a9:7e:5d:e5:7e:54:be:9a:73:2a:8a:f1:
7d:64:2e:c6:ab:55:9d:8f:13:cc:51:ff:fc:cb:54:
e8:03:c5:82:8f:30:5f:b6:e3:de:56:a9:5a:2d:06:
5d:57:2e:d7:06:c6:f0:5e:18:8b:41:a5:e1:ba:bc:
c4:6f:67:3e:93:df:ce:72:0f:a4:66:da:c3:82:b3:
31:df:59:31:89:cb:5c:7b:ba:01:2f:18:2e:7c:f7:
42:5f:e8:db:00:60:e9:ac:39:dc:ac:03:e8:96:ee:
15:c2:f0:9c:b0:7b:87:5b:79:aa:81:9d:2d:aa:b1:
d6:07:24:86:f6:ad:bb:e3:3e:5b:6b:62:41:79:49:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:00:0E:13:30:36:A2:EC:90:62:7B:24:52:E4:96:44:3B:94:3F
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:97:11:80:06:15:9f:a5:d6:a3:48:e3:35:c1:12:86:84:
11:80:17:43:b5:01:3c:de:43:12:d9:2e:33:d2:8a:b8:46:96:
3b:e2:b4:78:de:83:63:2a:d1:b0:c1:76:c6:be:d3:11:ab:9a:
59:b4:84:54:b8:2f:e5:ae:6f:93:ff:06:01:cf:3e:db:30:10:
60:fa:17:38:18:10:5b:fb:3c:cc:f0:c0:20:6d:c6:06:41:ed:
34:82:24:76:a2:f5:9d:0a:c9:f8:b5:a0:88:81:0e:7e:43:bd:
a5:e8:3d:a3:48:84:d0:d3:f0:a8:44:6d:78:a2:75:98:37:b7:
cc:00:ca:d9:4d:be:f3:e2:ef:a7:f3:05:9d:14:ce:2a:d2:a2:
3a:f4:88:bb:07:6f:b8:f1:9b:a1:a9:2b:f0:95:3d:ff:c7:3d:
78:4f:fe:fe:af:22:87:bd:fd:0f:74:7b:bc:e2:56:d6:fb:05:
24:9f:9a:a2:91:c9:e1:e1:48:43:3e:c2:65:ec:da:64:02:5e:
da:98:eb:66:57:5c:23:b4:50:ac:29:0d:9b:81:22:24:5c:00:
38:d6:21:8a:dd:b8:62:1c:08:88:22:48:7b:25:15:d7:c3:5a:
94:1b:6e:77:d9:a9:ab:6d:c4:e0:6c:29:ef:ed:2e:97:56:69:
a8:93:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:13 2026 by rpki-client