Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: p8kmIX9+ay90g/WfF9rMIHpn2Wh0wvOu+TWkTOaSAPg=
Subject key identifier: 74:15:DD:40:FD:82:99:B9:30:47:8C:67:B2:86:83:EE:BF:F3:E6:61
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019D28F30AAE02AF13F93D6A16306DDFACA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1895
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: lZxOPJvrDdhtykrLVfPzzmzflb8YNqF/Rtlg0vwh9tE=)
2: kIMbXdJtsDQKax2xphZaFN7nTGo.roa (hash: 0ama1VpnrdgMASVoDbU/VZGJ8RaYQqmTeKUTSxZsyFA=)
3: mhFszU5SEmptr5GI0ZcCS5h2GPE.roa (hash: nvx25tg/A55YxF5P3zlSkrAozJAeP8DAEDZ0+PHZPRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0a:ae:02:af:13:f9:3d:6a:16:30:6d:df:ac:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=7415dd40fd8299b930478c67b28683eebff3e661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:5c:29:41:9b:ce:af:bf:2d:c4:ac:d3:34:
09:12:b9:e8:b0:59:88:f3:83:e1:d7:c1:4b:fd:a6:
52:6c:8d:de:1b:60:b9:3e:34:fa:50:b1:2e:b0:8b:
3e:6d:bb:78:6f:ff:47:4f:1d:72:16:cb:43:07:10:
06:fd:7a:52:48:55:b2:49:1b:1b:01:0f:dd:88:7a:
25:8b:9f:6f:65:52:df:24:e7:bd:37:43:84:00:29:
b8:40:9b:a3:e1:46:37:73:4a:a8:6d:03:d2:a9:e2:
f7:39:14:73:be:92:18:85:ec:78:8a:ab:42:a4:67:
61:0f:d4:8c:f0:57:72:46:37:c8:cd:4c:19:81:a5:
e8:d0:96:52:f4:49:22:68:aa:1b:96:c9:f0:14:c0:
ec:e9:5c:f0:c8:c0:83:99:f0:20:8b:f4:7e:a6:31:
7a:0b:3f:ca:b7:6c:c2:b8:b7:62:33:2b:82:3d:8b:
f6:56:91:55:85:63:52:62:fd:ae:20:80:7d:74:5f:
9b:fb:d9:a0:5e:01:8a:35:65:30:0a:2e:62:74:11:
d6:0c:0c:57:84:d7:20:ab:9f:9a:b8:cd:9d:82:90:
53:6d:4a:e8:8d:28:71:18:dc:bc:8f:d5:e4:2b:83:
2a:80:d2:90:65:63:c3:63:98:75:d6:b9:29:bb:12:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:DD:40:FD:82:99:B9:30:47:8C:67:B2:86:83:EE:BF:F3:E6:61
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:ad:5d:4c:bf:09:79:06:61:58:56:fd:a0:8a:16:b1:78:
e0:a5:0d:de:1f:8c:31:5d:5d:8b:d0:86:ea:5e:98:a5:2a:a7:
81:9c:a4:53:75:fa:3e:0b:79:6a:57:a7:5d:7d:3d:30:49:5f:
8f:43:f4:a6:5b:fc:f8:48:9c:ef:33:c8:94:77:4a:43:a2:ed:
0b:3f:6b:28:6d:30:6e:9d:98:8c:82:7d:51:a8:af:d5:91:5f:
05:49:9f:25:54:79:9f:63:32:fa:a6:24:79:30:c5:ef:e4:13:
b2:df:98:02:03:5b:ed:28:52:55:75:f0:96:13:6c:62:28:d2:
c1:44:eb:57:a8:df:20:b4:d3:a9:48:7b:e3:ce:59:ea:66:b7:
4d:c4:bb:84:43:a1:78:50:d3:ea:fb:0f:a3:fd:ee:a6:79:7c:
a5:f7:53:f2:98:9d:4c:bd:01:fd:e9:52:b8:97:89:55:8c:fa:
89:a6:38:22:6f:9d:63:26:f1:27:74:ba:77:46:70:0c:25:e2:
3f:80:39:e3:cb:ef:f7:82:97:f8:60:8e:94:91:7d:91:a6:e9:
88:75:60:8e:3d:c2:f3:d0:2b:25:1d:c0:72:e3:76:50:76:db:
09:4b:73:cb:53:96:14:9e:5e:7f:3d:c1:71:91:8e:47:e5:db:
55:e3:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:46:51 2026 by rpki-client