Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: wWWXZkWxrLheFDG45vkKJt9iYH+RnFU6yiNhzaOCUs4=
Subject key identifier: 32:96:7E:4B:78:FD:FC:51:3A:6C:47:9B:B5:78:57:4A:15:A2:E2:5C
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 019D27A8CBB5D90E0626C13BF5880E8AF6A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 107D
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: OhFIUOT/7hK0P0WQVH8Lfj5zOiOVIDOxEjuTv0lV1zc=)
2: Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa (hash: 7+Wwaoq9oqFjf/pv4r/VE2mNMQO06GEpJG3+nVsxTaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cb:b5:d9:0e:06:26:c1:3b:f5:88:0e:8a:f6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=32967e4b78fdfc513a6c479bb578574a15a2e25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:be:3b:56:4e:6d:5a:95:a4:15:2b:e0:b1:
62:dd:0f:49:40:6f:73:6b:20:3a:ce:ec:da:0b:34:
12:af:48:61:13:6d:ce:bc:19:d2:cf:66:fc:31:6c:
63:e1:59:12:ee:90:32:44:af:f8:7c:33:93:73:d3:
74:09:56:5e:1a:09:9f:57:7b:62:49:f9:d9:3b:6f:
42:98:00:26:42:45:ed:de:e2:00:3c:37:27:9d:49:
29:32:9b:19:38:58:d4:57:82:93:66:b2:b3:2f:76:
ce:77:5c:05:66:e3:f1:53:85:1a:0c:ed:c4:94:b1:
34:cf:68:a0:e0:c6:c7:fd:f4:87:48:25:69:45:4e:
4b:ad:c1:eb:b6:22:04:44:d0:b7:2a:af:6d:61:91:
87:04:38:b1:ad:07:76:63:0f:f5:45:f4:b4:49:01:
0b:b7:23:85:2a:57:2f:c1:bf:61:f1:a0:b2:3b:a6:
b2:72:83:10:04:1b:a4:52:2f:0b:33:43:75:e7:7d:
24:e3:f2:43:b6:7f:9f:2a:0c:c1:a3:29:a8:c2:c5:
36:b9:eb:bb:89:7a:6f:f6:62:40:91:ca:b2:ec:3b:
1c:c3:4a:28:70:e1:21:28:98:28:41:ba:f7:22:be:
fc:6f:d7:cc:51:4c:0f:e2:2a:a6:94:17:d3:22:55:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:96:7E:4B:78:FD:FC:51:3A:6C:47:9B:B5:78:57:4A:15:A2:E2:5C
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:90:ee:8b:11:c7:ca:87:31:72:d2:00:cc:1a:7e:9b:bf:
b8:36:ba:14:38:a2:2a:36:93:42:5d:ae:28:f0:a3:c4:b3:31:
4b:6c:f3:8e:a6:f7:6f:bb:07:06:25:c2:06:ad:32:b4:b1:27:
89:70:11:56:f8:18:ca:13:5c:15:ce:f8:5a:64:af:4e:11:fb:
ef:18:56:3e:bf:33:1b:bc:f6:84:ac:c1:86:e3:08:fe:06:a0:
24:1b:18:3d:18:eb:06:35:b6:a7:ec:f5:f7:e9:2f:17:40:b5:
63:e8:6c:ad:70:f3:c3:4c:b5:05:9d:52:e1:bc:dc:74:75:09:
95:6a:89:56:e5:01:49:f1:35:2c:ab:d4:36:29:42:95:60:af:
55:58:02:e6:b5:f0:c8:0c:e6:44:d7:65:2e:21:93:ed:ee:3f:
af:9b:57:7e:d0:7d:d9:0a:a1:59:d3:93:8c:29:39:20:b7:16:
27:1c:ae:17:99:6a:0b:89:88:07:37:42:fa:52:96:41:5d:26:
3a:47:82:3b:31:80:b4:ca:43:ec:be:23:db:f9:5c:15:b7:96:
b5:60:a6:b0:79:ef:6f:b8:a6:6c:94:bd:4e:5e:db:26:86:41:
23:77:43:37:dc:f3:78:a0:87:a7:ba:bb:20:c8:e8:90:14:49:
ec:d9:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:17 2026 by rpki-client