Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: EJFGx/UbheQQaM5xjefQ4pmGI+sGrYEmBJMz8vZDYlQ=
Subject key identifier: 2D:1C:7E:EC:47:13:31:AF:E1:1F:BF:A2:8C:27:7F:B7:72:71:A9:FE
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 019D25F14B3215769B77C14FBA50B32E58C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 1518
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: al9Jl3VbFZJL5xBCTEFAtBZYzUjEmyPtavuIh1jbFj8=)
2: sepG3pxZRZJ3Di5V4GRgL0kUvN4.roa (hash: PbnSJH+4OvfmcPPPKdc+xJ2H4YgZN0xN7LiBfutNtAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4b:32:15:76:9b:77:c1:4f:ba:50:b3:2e:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=2d1c7eec471331afe11fbfa28c277fb77271a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:a3:c8:7e:d5:16:e5:b5:b2:79:ae:7b:ef:
0f:34:1e:a1:6a:4d:dd:89:c1:70:5b:d7:28:83:61:
9f:00:00:f6:a8:69:10:9f:d7:2a:aa:fd:da:4a:ae:
2b:bf:c6:52:59:75:1f:95:2c:17:71:b4:56:19:c3:
96:bc:ef:99:18:fa:75:8f:68:3b:d6:7e:44:c1:28:
f1:c6:9e:bc:ad:b6:7f:31:d4:49:49:b3:fb:8f:6d:
0f:55:15:52:46:f6:0c:eb:91:55:4f:ef:9a:41:6a:
1c:79:43:9c:d3:4f:c4:55:84:52:fc:16:fe:45:ac:
2a:3d:e1:57:a7:e2:68:97:cd:61:33:0d:2e:57:2e:
5e:f4:b4:cb:73:a5:b5:8e:88:b3:84:e7:b3:15:31:
93:fb:c8:9e:6c:17:c1:8f:4b:66:92:4e:da:08:fc:
f8:31:79:83:3b:70:6a:e0:72:48:bd:da:e8:90:a2:
d7:c6:b2:db:a1:14:1a:ae:48:c1:10:48:5f:6f:5a:
cf:d4:e7:f5:08:b4:9a:fc:7b:93:f8:eb:ce:14:41:
58:93:99:9c:c8:c2:35:08:59:38:40:37:39:d2:c1:
6c:ee:90:47:63:ef:3e:9a:20:34:96:f8:80:3d:ec:
f1:a1:ff:50:eb:24:4e:fb:eb:cc:46:ab:cd:21:ec:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:7E:EC:47:13:31:AF:E1:1F:BF:A2:8C:27:7F:B7:72:71:A9:FE
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:46:31:61:65:ce:ee:21:e6:a2:f7:81:53:67:78:9b:84:a1:
59:90:0b:c2:ff:e8:96:6a:a3:b3:2b:03:20:39:38:21:55:1e:
bf:1b:46:0f:09:26:ad:4f:90:d5:35:40:44:93:5f:99:ce:1a:
ed:25:d1:cb:54:0c:e8:86:14:58:23:0e:85:e0:e8:6c:85:17:
ad:99:4f:9c:2d:09:b1:f7:5b:00:58:19:73:86:62:d1:ca:30:
31:58:30:d3:9c:2d:da:91:ff:b8:67:f5:01:30:38:b8:e7:0e:
90:3a:cc:58:20:04:98:86:ef:24:78:3c:8a:20:0c:88:06:05:
39:39:1f:3a:8d:89:41:e1:68:b5:ba:d1:13:9c:4a:4c:5e:8b:
c5:5a:d9:a7:94:e9:00:ad:e1:82:df:ac:b8:46:0e:05:45:82:
34:99:bd:3f:22:a6:77:1c:1c:80:c4:75:21:88:d4:48:55:b5:
ab:23:bd:75:33:d1:af:fb:ca:c1:8b:41:74:b5:8d:dc:0c:91:
0f:6b:fa:6b:01:68:d8:7a:08:3d:4c:8a:7a:45:67:bd:e7:49:
66:d3:42:8a:63:86:62:ce:d4:9c:e0:bd:f8:d2:1e:84:74:69:
ba:40:11:4f:5d:f7:48:10:95:32:cb:4b:59:72:75:25:81:79:
c7:2c:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:37 2026 by rpki-client