Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: yWeqJWVHZ7VpYbsJf2424K66T7mwbYHMy25rQ6/fVEc=
Subject key identifier: 03:B5:7E:78:D0:FC:7A:62:C7:70:F0:A4:54:BE:3E:07:39:78:B0:1D
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 019D37C10B7E7C550C976C75BBD61A614D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 0B5B
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: veBxEcWc0xgAJxSIVYVyGMyQelmxQQ4mtOXtHJM5ZAc=)
2: jmPiqOSodqrdA8k4949EnF32jqs.roa (hash: m6Q9/wIpIS6OjtKLHT/2uqXxN+T3zmjZa4o1CBlJhOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0b:7e:7c:55:0c:97:6c:75:bb:d6:1a:61:4d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=03b57e78d0fc7a62c770f0a454be3e073978b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:cb:13:7c:3c:b2:2c:ba:16:cb:b4:8e:3a:
e0:0e:41:a8:72:b5:f3:ab:4f:90:b6:8b:4d:21:ca:
13:d2:04:09:9c:14:6a:28:d4:b5:5c:22:2d:12:c7:
36:6a:f3:52:b0:ca:b1:02:17:a2:57:55:13:db:ac:
af:b6:24:99:c5:4d:af:46:42:e8:3a:d6:5f:3e:48:
e5:75:27:0e:78:6a:52:0c:e1:b1:f2:d7:c2:f5:c4:
cf:f5:fa:00:e2:26:1f:b0:7a:a7:e6:75:ea:b6:56:
8b:ae:95:df:a1:0f:4c:21:b2:94:b5:92:59:ea:29:
23:af:bd:f3:c9:b1:39:08:63:24:a0:8e:59:5a:8e:
05:f6:b5:91:58:45:d9:c9:5d:ec:3f:e7:9f:09:c2:
58:f6:d5:77:51:2b:9f:7f:a0:4f:17:35:99:7b:d8:
a4:ea:fa:79:08:52:7c:a2:cb:1a:62:2f:13:c2:b5:
96:6e:b6:87:26:f8:9b:2b:5e:31:cd:45:6e:8a:f3:
d9:7d:c2:66:6f:52:ec:55:73:9a:83:ea:4a:25:8a:
a8:00:e1:4a:fe:8d:5b:a0:9b:f5:7d:27:ed:45:3a:
88:9d:6c:26:77:24:d6:37:8d:84:77:43:3e:9e:dc:
9e:74:8b:f5:9b:3d:e9:e5:ab:42:06:22:71:7d:dd:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:7E:78:D0:FC:7A:62:C7:70:F0:A4:54:BE:3E:07:39:78:B0:1D
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:4c:ab:43:8f:1b:ea:07:7d:0e:1d:99:51:a4:48:98:37:
2e:0c:42:71:d4:c0:86:d6:10:9f:54:b4:f9:4d:e2:1e:57:bd:
19:26:9c:3a:32:38:9a:93:22:fc:79:f2:69:e6:21:36:d0:1d:
aa:25:c0:54:72:82:87:36:d6:20:da:84:6f:b5:81:a5:9d:5a:
1d:1e:c9:7d:a9:57:31:d2:e7:f5:c5:9a:24:ff:81:8b:82:b4:
d0:31:3e:92:40:76:4f:4b:1e:00:44:75:60:dc:58:2c:c8:e2:
87:88:e4:22:2a:85:25:c8:b4:ba:f9:c7:26:1c:88:e8:f9:1e:
d8:e6:3e:37:c6:1a:58:62:ab:8a:1f:15:29:d6:77:28:e4:7c:
97:f9:24:e6:a7:0c:64:1a:60:8d:0c:34:a8:e5:99:4d:64:d2:
93:63:df:99:45:9c:69:36:28:86:a2:92:3b:7b:f8:e6:96:cb:
8a:cb:ef:31:0b:e7:77:09:c6:3f:52:d4:3a:90:f6:44:da:a8:
df:59:1f:04:d7:01:b4:09:ef:56:cd:03:55:32:1c:3d:27:2d:
c7:d0:18:06:16:cf:c5:e4:90:4a:53:72:69:c6:50:84:21:69:
a7:4d:51:23:15:ed:fd:59:6e:e3:cd:08:ed:0b:aa:1f:5f:5c:
90:1b:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:36 2026 by rpki-client