Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: bDf17geKykB9rSLMHEhmPxA7YP5rO29r6Np6BOtAP50=
Subject key identifier: 5B:52:A6:AC:B3:08:95:2B:01:F9:E0:20:92:72:8A:63:19:68:4F:06
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019D254CF921C9E7999D2901D6E2F1992FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 0A42
Signing time: Wed 25 Mar 2026 14:01:34 +0000
Manifest this update: Wed 25 Mar 2026 14:01:34 +0000
Manifest next update: Thu 26 Mar 2026 14:01:34 +0000
Files and hashes: 1: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (hash: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc=)
2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: 8EwDKnM/EQZOS2jOhHyviORgPshsygzFNuEqQBKj6JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:f9:21:c9:e7:99:9d:29:01:d6:e2:f1:99:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Mar 25 14:01:34 2026 GMT
Not After : Mar 26 14:01:34 2026 GMT
Subject: CN=5b52a6acb308952b01f9e02092728a6319684f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:88:c8:3f:5b:fd:31:5c:25:cc:3c:bb:82:
38:a7:02:c9:80:69:f0:bb:8b:b8:3e:70:cd:7e:f3:
86:17:0d:df:ef:e0:08:22:f6:16:8f:47:a0:d4:12:
22:4f:f8:7c:d9:ea:fb:1a:b4:dc:f7:64:96:00:81:
d7:07:de:c5:24:a8:18:cc:28:87:51:89:a8:31:f2:
5d:78:16:85:01:3f:d8:94:f8:7a:b9:8f:12:da:00:
00:80:98:80:ba:38:d1:5f:6c:03:a6:0b:88:11:f7:
cd:e1:e5:5c:38:d3:83:3a:30:85:c2:46:b5:40:11:
7d:9a:d2:3a:c5:8a:ac:7e:75:f5:e4:3d:5b:3a:73:
5d:15:71:36:04:e8:d9:b8:8e:1e:f0:e1:91:46:44:
0c:bf:67:54:c7:34:5f:30:88:15:a8:34:ea:50:02:
a9:a9:3b:59:2f:35:27:7b:f3:a9:78:d8:bb:88:a8:
db:ac:0f:a3:c8:6e:b8:fe:9c:31:de:84:74:2d:35:
47:24:79:f0:6c:1f:59:a1:8b:f5:8a:8b:be:58:a7:
e5:78:1d:24:90:5b:ca:63:25:14:1a:8e:95:44:dd:
77:5e:82:32:5d:de:8c:f2:fd:b9:22:fb:16:2b:22:
17:01:f4:ea:7f:a0:96:6e:81:74:79:34:1f:94:2c:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:A6:AC:B3:08:95:2B:01:F9:E0:20:92:72:8A:63:19:68:4F:06
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:0b:38:9e:2f:74:00:32:05:68:a9:f5:05:5f:5e:a5:df:
1e:74:11:29:1b:9c:97:82:42:63:b0:51:95:8b:64:4f:33:68:
28:b6:dd:01:ee:9e:2c:eb:e0:20:95:01:ab:c0:e2:88:ef:b2:
24:33:f5:2e:2d:82:3e:30:3d:2b:2d:b1:0e:1f:63:17:a4:4b:
26:c1:86:bf:73:b9:a2:cd:32:eb:d0:29:81:14:1b:c1:ce:2c:
97:c3:0b:74:ae:99:b2:b7:ef:8a:27:45:3d:1d:2c:fc:bc:f6:
ed:24:6f:97:3d:e1:7e:bb:c9:f9:ba:85:c7:40:71:13:3d:b9:
ce:38:e2:47:6d:2b:27:8f:c4:72:da:0e:e0:f7:b2:f1:7c:31:
18:bb:91:19:13:cc:3d:67:6d:56:02:ab:34:6e:83:b2:ab:33:
e6:2c:79:6c:4c:2a:a4:d9:7f:ab:03:29:21:ca:0f:4e:69:cf:
b2:eb:e1:7d:9f:e4:9f:10:f1:ea:bc:cb:da:0a:a0:18:4e:dd:
12:45:6f:e5:07:eb:06:71:49:fe:22:0e:45:b2:62:d8:03:aa:
ab:72:66:97:f7:b2:e3:2b:f4:ae:9e:67:3f:ad:b3:7b:81:86:
ad:af:e7:eb:25:4e:1f:32:a6:bc:fa:63:b5:98:b4:ec:41:a0:
0f:65:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:01 2026 by rpki-client