Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: EgxiE3O2/ERvtZqX9taBkto7brux/ls9R8RP3vsACSI=
Subject key identifier: CC:95:02:01:35:79:50:CE:BA:DA:38:D1:1E:48:7B:45:88:42:FB:53
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 019D371B7911309A2732915EE6A55B2C566D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0FE9
Signing time: Sun 29 Mar 2026 01:00:40 +0000
Manifest this update: Sun 29 Mar 2026 01:00:40 +0000
Manifest next update: Mon 30 Mar 2026 01:00:40 +0000
Files and hashes: 1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: CEQpTnAc9EMHGyV22N8dcFcxURh62Pvc9Gc12RoHcoI=)
3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:79:11:30:9a:27:32:91:5e:e6:a5:5b:2c:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Mar 29 01:00:40 2026 GMT
Not After : Mar 30 01:00:40 2026 GMT
Subject: CN=cc950201357950cebada38d11e487b458842fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:c7:e9:9c:4a:ee:12:22:2e:24:df:24:8d:
0b:58:92:d0:a4:fd:83:66:f0:52:a3:d5:08:cf:1b:
e5:e4:53:76:65:0f:0d:b2:b6:34:2d:52:63:bf:df:
cd:18:f6:aa:02:0d:b7:9e:25:c8:c5:09:f0:61:1b:
56:f3:e7:8a:75:cc:72:84:f1:ac:7e:b7:e0:4a:85:
d7:23:4c:76:39:b4:24:c4:40:7c:a9:4d:98:cc:ca:
43:1e:d3:56:6b:da:10:16:26:17:d2:59:1e:2e:e5:
c4:9a:d1:c1:11:2a:93:7e:ef:1f:f1:2a:3f:f2:33:
c6:db:58:bb:0f:22:0c:3a:c6:9b:a7:8c:00:d2:53:
e3:4d:b8:89:3f:d4:08:33:c1:fc:99:dc:8f:ca:da:
1a:bf:fc:5c:6d:65:80:44:7f:48:be:28:90:20:0e:
75:ab:4c:81:97:50:63:ff:b3:1b:5d:f4:4b:6f:e8:
15:a4:eb:4d:cb:9a:37:e7:42:a7:49:79:a2:be:8f:
54:03:5c:e5:5b:62:dc:1f:4a:ff:d9:83:ff:68:ac:
13:21:24:18:f4:d3:4e:04:30:69:2d:06:2f:36:4a:
d7:ae:af:4d:07:cb:2e:cf:34:f5:3a:50:9b:1d:79:
74:b9:6b:5f:81:90:3b:0b:c6:bb:0d:c9:67:14:4c:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:02:01:35:79:50:CE:BA:DA:38:D1:1E:48:7B:45:88:42:FB:53
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:13:5a:ea:91:31:4d:25:e9:36:4e:33:9b:fa:a4:0b:d2:
fb:e9:8c:a5:77:47:ae:f1:48:a5:3a:f1:28:e6:d3:91:f1:8a:
2d:73:c0:82:8b:71:8c:8d:cb:a4:f7:57:08:11:8c:e6:b9:48:
8a:ec:20:df:78:d3:f9:1b:92:1e:b3:a2:2b:42:5f:06:08:51:
ae:18:b2:50:b8:8e:01:2a:70:cd:34:27:e7:a8:c2:b9:4c:16:
ac:ca:66:51:59:44:ed:0a:93:83:f9:a0:cb:16:2c:b4:61:1d:
3a:f0:4c:e5:7e:e5:b7:01:27:e7:d4:33:49:fe:a7:e2:70:46:
5e:c9:be:db:64:c1:d4:30:88:25:15:8b:dd:2f:eb:48:80:ea:
cc:43:38:7d:be:2b:46:15:59:16:5d:d3:50:6b:41:d4:5d:7a:
75:f3:ef:c5:65:c6:b2:a0:87:33:54:5a:0e:de:33:83:64:e7:
5d:cb:4c:0e:b6:8b:f7:ea:0e:5f:06:dc:07:49:91:2f:e9:13:
bb:1f:d5:e6:b8:aa:84:ef:0b:1f:0d:9e:cd:1b:07:37:e5:04:
8e:9c:d4:e6:bf:aa:20:2c:2e:37:b8:72:25:1e:e1:fc:d6:cb:
21:99:e4:0c:4f:94:b2:d8:62:f3:0b:42:2f:67:a3:df:6d:82:
2a:9c:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:26 2026 by rpki-client