Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: w9/F4mHGoQ9fh7AIl5JKsdOv50CoUZeoVzPQ5e4Ff5g=
Subject key identifier: 70:2C:5B:F3:E2:5A:9F:0C:E6:7E:B9:37:72:5E:C1:3C:1F:6D:AF:E1
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019D299775F63332A4153D7A9DFB7CC69978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 085E
Signing time: Thu 26 Mar 2026 10:01:25 +0000
Manifest this update: Thu 26 Mar 2026 10:01:25 +0000
Manifest next update: Fri 27 Mar 2026 10:01:25 +0000
Files and hashes: 1: GGelaebdyv7wKj2s1MaS_yeYfsg.roa (hash: t1/+9CRFTy7pepvLSNI7FD84YDz6M4/rIVe2xaAkI2w=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: C7Oy5Jk5A86uCJmIoxXiigc7GS3qjtQ5aKcHiHZDs1I=)
3: ZiID9bA4kVJXaS6I_e7XfY_pEWQ.roa (hash: Si+JLMLd7OiqxpqpbnGko1NX7RV2TJpWFgx4YxD8Q9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:75:f6:33:32:a4:15:3d:7a:9d:fb:7c:c6:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 26 10:01:25 2026 GMT
Not After : Mar 27 10:01:25 2026 GMT
Subject: CN=702c5bf3e25a9f0ce67eb937725ec13c1f6dafe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:3b:14:58:a5:58:b2:57:2e:a8:57:76:fa:
27:ac:ac:70:39:9a:5b:bb:81:91:f9:14:f2:a7:c1:
b2:8c:86:69:02:6c:8d:a0:30:00:56:1c:60:53:b2:
4b:af:83:2e:3f:60:46:d9:33:40:e5:fc:8c:6e:9c:
68:a7:b0:02:d6:bb:c1:d1:18:f2:3b:d1:3e:ce:2c:
f6:56:b0:e7:73:6b:4c:14:fe:3c:63:88:54:4f:9d:
db:d7:e0:e8:b7:b5:9d:51:eb:35:4b:5b:db:98:95:
3d:29:27:81:bf:88:1b:68:f8:85:6b:e7:58:ed:19:
d4:76:72:d8:3d:d4:7a:36:21:2e:f8:19:02:dd:ef:
cf:3c:e1:7b:a8:08:9e:ae:f0:b6:92:82:41:24:ec:
12:46:8f:0f:1e:69:f3:80:65:1a:31:c1:c5:55:a8:
90:ce:dc:1a:7c:5c:82:6c:ea:3c:28:e0:03:ba:43:
57:8c:3d:1e:4f:e0:cb:8a:ff:65:7e:3b:25:4c:e2:
d1:c4:87:2e:2f:70:8a:fe:c1:f1:7b:3c:f2:62:b9:
b5:36:5d:5a:ca:57:6e:d5:77:ab:b8:12:ca:fb:c6:
1c:ea:09:11:23:28:ac:1f:12:77:57:a6:96:5f:46:
52:ea:a3:d0:ef:bd:8e:97:19:97:f1:5f:99:7d:f3:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:5B:F3:E2:5A:9F:0C:E6:7E:B9:37:72:5E:C1:3C:1F:6D:AF:E1
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:49:67:75:e4:17:e1:29:b1:be:2d:17:60:c9:c2:7f:9e:5d:
b1:e6:00:18:3a:58:f1:16:00:7d:d0:c9:29:3d:71:f5:a5:d4:
e2:b1:6c:2d:9a:79:7d:00:fe:66:f6:de:d9:ca:2a:83:15:13:
4a:0a:9b:66:2c:36:b2:1b:c9:58:d9:95:c6:58:6d:92:ec:a5:
34:74:3a:2e:1d:07:d9:b9:35:9f:74:c6:79:1c:e7:ee:4d:1f:
3b:23:2d:d9:8e:a6:96:86:56:6a:09:d8:b3:dd:99:6f:49:fd:
ca:71:cb:be:58:93:62:ef:e1:0c:8e:b4:92:a6:c7:37:05:a0:
60:d6:20:6c:a5:e9:60:2d:73:76:5b:73:d6:4b:97:f2:f3:07:
4a:61:35:b0:c2:3f:eb:0a:be:1e:c4:79:1a:41:b5:79:d9:9c:
c9:e4:88:08:3d:05:4a:b6:98:58:1a:bf:de:1f:f8:67:39:4e:
44:20:dd:5c:fd:3b:30:f5:d6:61:d4:cc:e6:cd:74:11:bd:e7:
89:09:37:99:3b:1b:fe:74:a6:f7:9e:f5:b9:b5:a8:88:67:98:
88:26:4d:86:d3:17:07:2f:06:5e:3c:7b:1c:bb:ed:08:d4:9f:
eb:25:91:bc:ff:c0:b3:5b:70:24:6f:f5:98:ea:49:93:70:48:
27:01:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:20 2026 by rpki-client