Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: LMQ5u8TMWHKaGoTIqsbcqWm5SM46jVG3vPAK9P5WBoY=
Subject key identifier: 0D:08:16:A3:DA:B0:4A:E8:89:63:50:1B:D1:27:0B:0D:0F:35:F6:74
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019D2772B22EE28BFFB399475ADBF9A2EBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1737
Signing time: Thu 26 Mar 2026 00:02:01 +0000
Manifest this update: Thu 26 Mar 2026 00:02:01 +0000
Manifest next update: Fri 27 Mar 2026 00:02:01 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: QBhBU9V479umMc9Qn0Tudq8FSRbhP3Xm0rj961ma7cU=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b2:2e:e2:8b:ff:b3:99:47:5a:db:f9:a2:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Mar 26 00:02:01 2026 GMT
Not After : Mar 27 00:02:01 2026 GMT
Subject: CN=0d0816a3dab04ae88963501bd1270b0d0f35f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:b4:d8:84:46:fc:dc:74:5c:f2:37:7e:f8:
33:a6:fd:4e:a3:70:59:3a:8c:ce:9f:66:5c:fa:1c:
83:af:84:4f:5e:9b:47:21:b2:09:d4:d9:50:41:e5:
bc:a9:6a:2b:d2:a1:5d:68:36:d7:e8:15:ae:3a:a4:
f4:37:f0:48:fb:b4:d2:a3:03:b8:84:c4:4c:ca:7e:
96:be:12:ac:13:71:3c:45:82:fa:f3:6d:08:be:d4:
5b:e8:9c:fc:d6:6e:21:54:aa:f8:2e:c0:40:63:a8:
15:e6:eb:45:a9:bf:f2:14:7f:ea:66:fe:4d:26:93:
3b:ea:41:21:ee:b0:7d:eb:0e:10:6a:97:84:82:07:
c3:ca:69:33:53:99:ba:9a:7e:b0:46:20:28:fe:e4:
87:ed:97:68:8b:f9:da:45:ff:b3:94:68:8a:fd:79:
98:e0:34:61:11:c8:b2:52:91:19:55:c9:f3:6a:f8:
d0:f4:0d:e3:7c:42:49:1b:9b:9d:c8:8d:e4:ba:80:
c1:d9:13:87:2b:ee:83:0e:20:8a:97:54:b6:f7:07:
11:1a:78:3b:76:b8:d1:59:f2:f9:a6:a7:84:16:2b:
ef:61:47:55:d4:e9:11:90:4c:fa:59:1e:81:75:00:
4a:78:66:d2:22:f6:3e:60:22:e9:e8:8d:82:4d:3a:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:16:A3:DA:B0:4A:E8:89:63:50:1B:D1:27:0B:0D:0F:35:F6:74
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ea:4d:de:cb:0b:13:a9:6d:e1:12:d7:d9:d0:18:3e:14:6e:
7d:6b:18:b3:ce:13:c6:ee:98:8d:28:8c:18:2b:54:2c:29:19:
81:6f:f9:ec:47:cb:41:08:0a:bd:0c:7b:b7:31:ce:ac:33:a6:
51:f9:7f:a8:fa:08:c0:e4:a7:07:67:26:08:30:7f:62:4f:67:
bd:d7:26:d0:9c:19:b5:d0:c9:ee:87:f5:d6:0b:86:38:38:f6:
b0:67:2e:e1:49:a9:be:ca:f2:6d:97:14:a0:1d:4b:48:27:5e:
6b:36:1b:78:42:a9:db:40:87:19:d3:5f:08:e8:e3:27:79:e1:
d5:ae:f1:57:2e:88:8f:fd:8b:df:02:88:d7:1e:ef:91:9c:91:
70:1a:16:fc:c8:08:9d:98:24:6f:fc:a9:23:a1:7d:d8:af:45:
9f:22:6c:f0:cd:a6:01:53:ef:2e:81:5d:9e:5a:9b:51:a3:14:
4c:34:51:c2:74:09:ce:5b:35:7e:03:c0:94:aa:24:da:51:1c:
fc:a8:64:e5:4a:86:30:ac:51:aa:59:24:e3:d4:7b:12:0f:bc:
94:43:80:7e:12:63:49:3e:93:d9:0b:91:3a:ca:d3:b3:66:a8:
43:e3:86:65:11:3e:d3:32:f3:18:61:e4:aa:14:c4:95:56:ab:
44:98:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:05:11 2026 by rpki-client