Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: +l+dpxSxVBD5WCbOdX5BhppeVxebdQSjLq4OczSrJeI=
Subject key identifier: 1A:24:3B:D3:36:80:EE:71:7B:41:3B:F5:16:10:3E:8F:0F:87:23:C0
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 019D2772D5D3F9E12C185217DB7DEC35A74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: r+njgDcongiY/Ay45bI0STMWGm/ECBBOiNubHcJygE8=)
3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d5:d3:f9:e1:2c:18:52:17:db:7d:ec:35:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=1a243bd33680ee717b413bf516103e8f0f8723c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:06:92:b6:33:7f:3f:a6:58:8c:14:da:12:
5f:00:d4:f2:ef:8f:e4:6f:04:19:59:fa:75:95:db:
53:d1:93:c0:dc:9f:8d:3b:35:63:6c:9c:3e:a4:10:
24:b9:74:9a:35:b5:e8:f9:3a:82:19:c3:5d:56:d1:
c3:33:58:8f:4b:5a:95:a7:7a:ed:64:fb:c4:34:a6:
7f:7c:83:b7:01:68:42:80:b9:0e:1c:f6:64:aa:b9:
63:8c:63:b5:20:16:72:a1:2c:34:3d:bb:e3:1c:38:
77:32:2f:e8:f7:86:29:d4:b4:e5:2d:4c:e5:dd:27:
5f:19:1b:76:03:bd:46:96:ae:d3:55:43:0c:82:ea:
86:a7:5a:4b:71:61:5f:9f:d6:f2:0c:c7:91:e3:13:
b4:06:c2:cd:6d:b5:9c:0e:d9:ef:d4:77:fe:b3:1d:
13:b7:98:5f:e4:54:0e:32:94:74:bc:cd:dd:9f:ae:
72:ff:77:a6:81:89:4a:85:48:e0:ea:e9:7f:d0:a6:
aa:69:97:ac:0c:47:50:30:05:82:a2:81:fe:a9:ec:
31:a2:c5:e1:03:aa:cd:c9:cb:1a:74:1b:4e:d8:22:
81:ea:20:f7:4e:d7:f3:21:b0:f3:57:24:ca:9c:ec:
67:6d:f6:6d:68:e8:55:74:94:f4:23:ba:98:07:3c:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:3B:D3:36:80:EE:71:7B:41:3B:F5:16:10:3E:8F:0F:87:23:C0
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:ae:f2:cf:80:05:09:9e:58:46:d4:cf:41:75:81:7f:27:
b0:76:28:79:a3:ea:3e:a5:e7:cc:cc:22:f2:a4:41:70:56:9e:
73:bf:6f:ea:1c:b5:c9:b4:f2:d6:fc:a0:8f:7f:12:2d:b4:f2:
96:c0:94:c5:d3:d7:ff:5c:7a:f1:53:1f:cc:f8:70:c3:31:8a:
5e:46:b7:f4:f1:86:a4:f2:6e:2b:78:34:f6:3a:11:ea:1a:d7:
19:8d:50:09:13:3f:f5:44:f5:4c:26:c9:65:23:4a:89:2d:39:
6e:24:84:37:f8:1f:ce:ac:d3:97:23:9b:ed:c4:96:9e:67:4e:
cd:d6:60:f5:6e:b3:65:71:74:2e:9d:25:65:72:4f:bc:8f:a4:
a5:33:61:03:fc:14:15:df:95:0d:2d:fd:4b:3a:20:10:29:d4:
f7:9e:9a:5a:b9:41:9c:56:47:6b:7f:9f:13:50:90:64:24:a2:
16:30:9d:04:79:91:1f:ce:e1:f1:59:dd:30:21:62:53:ae:1f:
4d:70:72:29:e2:9c:b2:14:f9:dc:91:63:ab:c4:a8:4c:7b:65:
d1:8b:5c:a7:7a:54:b4:d0:2d:52:c8:e2:39:1b:90:61:fc:b7:
1b:cd:72:14:37:27:36:2d:71:69:f5:2d:1e:9e:14:de:d2:2c:
c1:66:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:56 2026 by rpki-client