Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: pAxLBUB5ewn2mi332Nj0L8AJlVOAgkkkfG6VZ0obUxI=
Subject key identifier: 98:FA:0D:B3:F0:D4:45:F4:07:FA:19:E1:36:83:3B:98:5E:85:C8:B7
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019D3909914EA1FB6CC43E8C0FFEF9AE746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: vTi3p04G8SuOr9bPoxTxYxpw2VopbK3S6hE/kbBDogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:91:4e:a1:fb:6c:c4:3e:8c:0f:fe:f9:ae:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=98fa0db3f0d445f407fa19e136833b985e85c8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:9d:17:c0:76:cf:a6:a5:61:bc:ce:5a:32:
9c:c2:d1:8a:43:a4:ee:a8:e4:9a:40:8a:9f:7b:c2:
a9:dc:59:9c:bc:e6:6a:e4:64:97:6f:09:83:f0:e6:
92:38:51:dc:7d:e4:20:73:99:bd:16:47:ad:15:2a:
e2:88:86:d6:50:b7:8e:63:73:e0:77:52:10:f4:7c:
24:5d:df:39:6c:37:9c:2b:06:0b:06:36:d5:aa:14:
2e:05:6b:d8:54:a8:61:50:5f:84:26:f9:3f:88:30:
d0:4f:c0:34:f3:2a:5e:a0:33:92:b4:0a:db:87:36:
91:bf:49:7a:36:03:5d:c8:2b:e4:fe:16:3b:d0:7c:
60:6d:4b:69:d3:be:1c:8e:74:73:07:ba:fa:71:98:
a5:a3:21:e7:cd:00:dc:9a:ea:eb:5a:9c:e5:cb:9f:
6e:a5:e4:47:d4:96:7d:ef:bf:54:fe:a3:9d:68:c5:
f7:5f:76:7b:fe:55:55:1e:14:24:11:7a:dd:29:a3:
96:e1:5f:1c:b0:ca:12:ec:0c:62:0b:f8:99:b8:d7:
99:27:9a:28:86:79:2d:b0:ae:69:0e:1c:61:2f:e6:
79:ce:33:7f:a5:5e:b0:b9:1d:40:be:90:e6:94:e1:
9e:4e:1e:2a:84:d3:fb:25:26:22:fd:97:6b:58:e8:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:0D:B3:F0:D4:45:F4:07:FA:19:E1:36:83:3B:98:5E:85:C8:B7
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:98:41:4d:14:bf:3b:15:fb:1a:d5:68:a3:3b:d8:3d:89:
86:9f:3b:0e:90:12:55:3e:74:60:e4:d0:30:bc:6b:76:30:99:
a7:af:61:9c:1b:67:21:db:a1:06:72:a6:e0:19:09:03:91:13:
c9:74:75:e2:4a:8a:2e:ef:0d:a4:00:f0:17:a3:b6:ee:3f:17:
62:16:5c:02:cc:44:5a:20:7f:07:84:df:e5:d4:da:1f:47:03:
df:09:37:14:cf:66:7f:de:77:47:9f:53:a8:c4:a3:b1:09:36:
d4:93:02:a0:88:56:5d:16:d4:03:fd:d5:fe:7e:95:2c:0b:15:
ae:48:0f:e5:23:72:ee:f7:30:a2:2c:db:e4:8d:1b:eb:eb:44:
91:08:ae:c2:a8:a9:00:52:fd:81:04:3c:8b:1e:ba:9f:7f:e4:
96:3b:2e:08:b3:ac:b5:57:90:e4:82:8a:45:95:04:c1:08:c0:
d7:35:36:d6:84:be:0d:7f:aa:8e:00:06:5b:1b:21:50:5a:b0:
08:73:da:7a:d4:22:97:c1:79:ef:8c:00:ef:e6:69:73:d3:fc:
bb:00:e3:d2:63:9b:03:54:15:1f:f6:7e:c4:c1:dd:90:49:b5:
9c:f6:55:4e:3e:0b:d1:f3:38:bc:3d:3f:94:f9:ff:17:de:4c:
69:c8:fd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:50 2026 by rpki-client