Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: tkRy9CrpA7IEX/imeM6xg5d6YjP51fPOLVSL1QC6RYk=
Subject key identifier: 24:F0:60:04:40:E4:1E:0D:CF:80:E8:AA:13:6D:CB:6D:25:DC:17:12
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019D2996DD07D07A949AEA550FA3C3344069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0F17
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: Ep2cQ3rqdUC60ZrGL+IH8dyXIoYo/cf10wj5OrCXfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dd:07:d0:7a:94:9a:ea:55:0f:a3:c3:34:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=24f0600440e41e0dcf80e8aa136dcb6d25dc1712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:03:07:a4:31:34:30:08:8f:cf:ef:31:d7:
94:3f:1c:3e:a2:ed:74:67:cc:1c:b3:41:e4:53:11:
17:72:94:da:74:7a:51:59:7d:36:c0:dc:4c:09:30:
84:cb:d8:80:ad:99:ae:e0:bd:d1:cc:fe:1a:bb:8b:
dc:64:0b:f8:e8:4e:38:85:de:ee:8b:7d:bc:6d:c7:
54:df:4a:6f:58:da:b3:0b:9f:50:7c:3c:c8:fe:57:
1e:8e:5a:19:03:c6:4b:3c:55:aa:77:8f:1d:f9:7e:
50:1c:e4:3f:fa:e4:c2:f3:3c:7b:e1:40:a1:20:2c:
78:51:8d:98:a7:77:84:de:6b:f5:96:fe:a4:fb:2e:
fb:25:9e:b6:cf:12:1e:6c:f8:fe:96:09:61:14:3b:
d9:eb:4d:36:31:e7:b6:40:54:2d:2f:62:be:22:f9:
9e:e1:a7:73:37:dc:41:ec:d1:ed:98:3c:23:02:4d:
7c:13:d4:1b:5c:51:72:11:fb:89:48:71:86:96:a1:
50:3a:f8:60:26:1e:e4:e0:88:00:0c:b1:52:ee:8d:
a7:02:19:74:77:e3:ff:6c:64:e8:7f:95:d6:d2:9f:
ca:4e:bd:92:89:12:86:5c:6b:88:26:c6:57:dc:e9:
0b:1f:95:f9:f6:b6:32:25:74:0d:29:0a:82:5b:7e:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:60:04:40:E4:1E:0D:CF:80:E8:AA:13:6D:CB:6D:25:DC:17:12
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:58:76:2f:f0:1d:0c:ae:bc:b3:55:3d:3d:a8:79:0a:01:
46:ce:10:f6:bf:24:52:b0:cf:b4:3e:e4:31:5b:00:9b:4f:a4:
d2:f4:6f:ea:b5:99:f7:90:ef:e9:6c:c2:68:56:cf:ba:88:fd:
ea:f2:34:85:03:57:da:bc:56:95:66:60:93:45:9d:cb:6a:cc:
77:ac:08:72:83:c4:fb:6f:80:53:4e:cb:5f:52:fc:21:1a:c9:
7a:10:f9:5b:b1:50:ac:73:d2:c5:97:c9:0a:6c:4f:2c:11:60:
7e:a4:e2:5e:c2:f3:37:39:dc:ba:04:c7:e4:7d:54:f1:ff:cb:
50:87:81:e2:3a:89:53:f4:ca:01:5a:b9:f9:3a:79:17:1c:7e:
6f:c1:47:d1:67:5e:1d:39:8b:a2:e8:17:2e:34:41:df:db:19:
a5:d0:42:bb:80:70:20:55:4d:e0:ac:8b:c4:eb:66:06:6a:d1:
1b:6f:19:3b:b4:57:81:3b:bd:ef:ba:a1:44:93:1a:ba:3f:75:
57:6a:61:5b:fd:50:a1:8b:dc:17:fa:7c:44:41:2b:63:75:74:
ef:06:78:09:66:35:e5:b5:e3:43:af:7e:df:e4:13:e2:d0:2b:
1a:63:a7:a3:76:a9:e4:58:92:f9:88:20:f3:ee:cb:ea:76:92:
18:35:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:07 2026 by rpki-client