Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: 8h7hdg2OVXvCen54DSynZZpCg3gTMecC799ieIqyYDU=
Subject key identifier: 9B:87:F4:07:9A:38:BF:EF:67:A2:5F:D2:B8:6E:AC:45:0D:F8:07:BA
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019D29972F353517A1B4E91CFCEA9D7520A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 1327
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: ISMMTGtngwrZJT5uPQoVkv+rDn2QsoBHrrzz9lw8K78=)
3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2f:35:35:17:a1:b4:e9:1c:fc:ea:9d:75:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=9b87f4079a38bfef67a25fd2b86eac450df807ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:dd:fb:78:30:63:c0:44:09:4d:8a:2c:e0:
fd:ed:5c:cf:66:00:72:0c:46:3a:9a:1e:c2:94:1f:
3e:18:ab:38:40:cf:8b:fb:cf:3c:58:43:30:1d:57:
f8:a6:ac:e6:ad:f6:21:89:82:cd:ce:c5:0c:45:eb:
d2:ee:03:a0:ff:58:5f:75:7f:b1:eb:3e:30:b7:3a:
2b:ea:d2:bb:b1:b6:bd:86:6d:10:16:53:55:37:6d:
10:26:0e:e5:26:cd:df:a4:9d:8d:c0:db:17:fc:12:
c1:90:19:8e:e2:45:95:6b:a8:11:fb:3e:d2:3b:37:
18:a4:62:c9:aa:45:aa:e3:2f:cd:6c:db:23:0c:29:
05:f1:08:e2:58:29:50:cb:da:55:42:d7:57:4b:f6:
23:5a:66:d5:fe:56:d7:36:d8:ed:4d:96:88:ad:c3:
ac:44:c4:2f:ab:49:de:d8:71:b0:31:69:fc:cb:28:
86:d2:b3:a0:8b:35:37:9c:78:c2:ca:69:b0:8a:18:
0e:a9:64:b7:7a:be:ca:7f:fb:17:97:14:be:c4:22:
76:45:ca:91:bd:7c:c7:ef:0f:11:eb:95:89:6a:20:
65:9c:2f:64:ad:0d:92:c3:9f:41:b7:0f:c9:67:41:
e0:ae:c6:4d:19:b3:a7:97:f5:d5:22:eb:fa:4e:db:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:F4:07:9A:38:BF:EF:67:A2:5F:D2:B8:6E:AC:45:0D:F8:07:BA
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6e:c7:61:00:10:0a:d6:e2:15:45:c4:23:71:b2:f7:c9:ee:
b6:a1:7e:4c:ae:c5:33:f5:11:e4:8b:90:a9:e0:14:56:26:76:
cd:ef:ca:ad:56:e1:c8:76:89:b4:dd:8c:25:5d:df:7b:38:56:
76:cc:9d:50:83:51:75:a4:54:49:59:29:fa:4e:c1:ef:a3:f9:
ec:bc:5e:5a:6a:22:ed:28:df:a2:10:33:4b:b2:90:3c:0b:05:
e1:f6:b4:da:0a:0e:19:fb:e3:b6:23:b1:9e:29:a7:f3:b1:4e:
07:e6:09:58:0f:eb:b6:56:c4:c2:53:07:d8:10:b8:e9:ab:79:
3e:98:dc:e9:30:ae:05:5e:24:1a:59:81:e7:ea:12:2d:19:66:
8c:6c:94:be:b8:39:aa:89:6e:c2:ce:47:e5:ac:da:dc:db:4a:
b4:a3:38:40:03:b4:58:9a:07:77:45:21:03:36:bc:b1:0d:66:
bd:50:49:26:ed:d2:85:fa:af:4e:14:b0:c5:68:e6:c8:f7:8f:
52:97:2d:e2:31:e5:20:b5:85:8a:60:84:b9:03:d3:f3:b4:32:
3f:a3:1f:c5:b9:aa:c9:fa:9c:c4:29:5f:00:54:1c:34:db:33:
2b:7a:04:83:87:71:87:d8:29:6f:6a:0a:d7:69:9f:e8:0e:46:
00:7b:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:27 2026 by rpki-client