Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: H2NttArBPsL5PwhOfgEyh6WtgwKAneGafYGEASg5thM=
Subject key identifier: 2E:9F:E9:64:93:8D:5C:54:12:B7:AB:43:5A:5A:13:65:3D:36:A2:5E
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 019D28F2E87B59ADC5FBEECE304E89B48F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: Kioc6B7Fyfli6FCiujhE8Qm79C0.roa (hash: QvwIZ61NmPvndcfj0ICAM5kw0hGVe6xU34dEpUs0Jmk=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: 23dBcw+jWYWgFz4I9OH3z7jJj/4cbXBijz739wZnKrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e8:7b:59:ad:c5:fb:ee:ce:30:4e:89:b4:8f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=2e9fe964938d5c5412b7ab435a5a13653d36a25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:9b:58:fb:d0:61:a0:b6:87:14:eb:1e:1f:
ca:06:88:1d:4e:35:61:2e:be:00:fa:00:06:f1:99:
f4:07:9a:7b:05:60:96:1e:de:3a:01:22:8e:01:ee:
42:42:02:d3:0c:f9:e7:1a:c5:88:9d:80:c3:a3:3c:
67:80:3e:38:41:ce:9c:63:c2:78:95:f4:34:41:df:
9e:f3:fa:8d:28:7c:15:d9:2c:94:1e:e0:43:97:4d:
12:60:be:63:23:10:3e:cb:14:94:7c:f1:e4:a9:42:
28:82:e7:51:8e:50:bf:55:33:1e:b8:b4:38:13:ef:
c1:9b:ab:b6:64:44:ef:3c:8d:9d:68:b2:7d:38:f3:
1d:e9:bf:16:2a:db:b7:1c:df:fd:1d:bd:82:6d:6b:
40:8a:6c:04:3e:9e:e3:8d:e7:b0:fb:88:fb:af:c1:
7f:39:55:00:68:08:9e:27:e3:e1:1e:fe:02:3f:29:
27:2e:09:a6:f5:09:22:39:46:4f:47:c2:00:4b:d0:
ad:e5:a5:e8:74:1c:25:9c:7c:69:93:da:0f:06:3b:
eb:55:25:21:67:16:73:3d:a2:45:ab:8b:a1:06:7c:
da:6c:a0:1d:61:ee:ff:29:85:36:f0:80:78:0d:8b:
48:e4:f0:66:bd:ba:7d:81:88:03:98:ed:7f:72:4f:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:E9:64:93:8D:5C:54:12:B7:AB:43:5A:5A:13:65:3D:36:A2:5E
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4a:2f:b9:18:63:80:7d:85:6b:24:8b:86:f3:f5:c9:01:31:
9b:ed:2c:db:cd:d9:27:f7:42:75:f4:d7:87:5f:99:63:ce:34:
9a:01:70:fd:8b:22:84:09:2d:83:4f:a0:c8:1e:2c:b6:a9:ba:
16:3b:36:44:85:70:11:1c:ae:a5:90:82:c5:31:fd:d0:7a:0a:
fd:78:18:82:f3:ed:c4:98:6a:80:9d:4e:87:6d:37:a6:c6:fe:
8d:af:13:45:b2:b4:e2:d9:a7:f3:15:a1:02:b8:6e:83:f2:25:
f6:29:a1:2a:eb:87:6b:76:58:59:b1:e2:10:1d:8c:5e:32:ba:
b1:d8:d6:0a:2b:f0:27:d2:94:04:67:f5:79:45:9b:a7:44:33:
e6:36:47:74:09:35:3e:71:15:05:46:d8:de:4a:1c:8b:f0:6d:
39:2d:ac:25:95:4c:d6:56:aa:8a:3b:a5:80:07:bf:ca:56:e2:
8a:01:b3:3e:ac:88:f8:c4:fb:fc:13:26:d6:15:70:5b:90:a2:
54:86:a2:6c:4f:0b:b9:46:a0:55:6b:bd:1a:eb:11:39:f2:5f:
2a:14:a9:3f:16:8c:70:7c:ec:24:5f:f1:0e:df:28:26:a5:e8:
d2:03:f4:98:32:bf:3b:c5:cd:5c:58:70:17:9d:96:92:d4:45:
70:a3:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:18 2026 by rpki-client