Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: 0IdMwEvViS91EA+/yNHJqzISiLujkukomFmMPkGKwdg=
Subject key identifier: 1C:55:C2:3B:A1:6A:05:19:EB:14:01:7A:AB:92:F9:F8:05:BE:B6:BE
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019D28164ECA862731CE88388BF58B7C2802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 129A
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: c5TYuJ8LqhnmaRSyKZYny7YmPYeztgpRlSJQ1/PBHos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4e:ca:86:27:31:ce:88:38:8b:f5:8b:7c:28:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=1c55c23ba16a0519eb14017aab92f9f805beb6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:40:0e:12:eb:05:38:87:45:3f:8d:48:ff:c1:
20:ca:24:36:e4:4c:2e:b8:b8:48:cf:25:79:97:a7:
70:30:68:82:43:e1:91:8b:1b:9b:f2:d7:5c:2c:d3:
8c:a7:f3:cf:cc:75:04:d8:01:15:7d:6a:19:0a:aa:
33:db:2a:0d:d5:d1:4f:98:7f:e1:38:6c:4c:5d:78:
8e:84:a2:30:8c:74:e2:40:07:5c:4b:dc:33:6f:49:
e9:3e:b6:58:89:dc:0d:78:df:87:0c:0e:27:ef:d3:
9d:6f:ac:07:d8:26:46:ba:f0:77:d7:1f:12:92:e6:
c6:52:61:15:ea:78:eb:aa:23:58:9d:df:fe:1f:f3:
ed:40:d3:34:e3:bc:f7:a2:b3:29:f5:10:9c:26:e5:
ed:d5:2a:73:e4:8a:d9:e3:89:6a:1a:d5:3e:fa:38:
4d:fd:2c:af:96:39:8c:bc:b1:f0:26:c7:8a:a5:ab:
c1:e7:9b:c3:43:11:29:87:d7:b8:89:a0:51:32:eb:
d4:e2:30:8a:e5:95:b7:b8:af:c0:1d:01:11:a1:25:
d1:c3:0a:90:bb:96:35:8c:f0:87:08:99:1b:c4:c8:
69:fc:16:b1:e6:e9:12:44:e4:4b:da:0f:d0:56:03:
8e:d6:ba:c8:70:80:1c:a5:1e:53:d3:81:c7:cc:c9:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:C2:3B:A1:6A:05:19:EB:14:01:7A:AB:92:F9:F8:05:BE:B6:BE
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:cf:79:60:f2:50:62:4b:4a:c2:ec:91:fb:9e:88:ef:ce:
a4:0b:b2:31:92:cc:06:2e:3b:0b:95:60:94:06:9d:96:c6:29:
d6:aa:43:af:5c:ea:a8:b8:3d:4d:d2:16:8f:54:6a:b1:1b:41:
7a:68:06:8f:d8:59:7f:0f:78:3c:be:fd:b4:6a:b8:e4:6e:d1:
b5:3e:f5:6c:b9:05:a2:89:4e:c4:7b:6f:af:42:23:78:5d:5f:
4c:d5:86:7f:72:e2:dc:63:cd:bc:d0:79:fc:d2:55:8f:2b:80:
86:a2:64:a4:de:ed:02:4e:c4:c2:ca:69:9e:5f:58:cc:79:85:
71:31:fa:72:70:20:ec:44:ae:d2:20:da:b7:4f:89:6b:06:ab:
f2:6a:57:4d:da:07:8b:8f:90:b7:fe:34:66:52:59:4c:f0:e4:
1a:52:bf:6b:79:ea:00:be:ef:43:29:be:7d:36:23:ab:26:42:
da:28:a7:58:94:eb:fa:e2:4a:65:08:30:58:ac:e4:df:5c:14:
78:19:72:70:36:bb:9a:2f:92:3e:73:2a:15:00:86:17:6a:98:
25:1e:b9:de:3c:f0:99:88:fa:7f:16:5a:0e:99:00:6e:db:e5:
13:3e:29:c3:2a:6d:b1:1a:b3:31:cf:e5:34:a5:88:41:74:24:
98:62:03:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:05 2026 by rpki-client