Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: bDlma6eyPBfC7UNFBS8iIMWiL9TQpplQUu9nYo7/w9Y=
Subject key identifier: DE:75:59:E8:AE:8F:2E:50:6A:52:2A:6F:6E:4F:A2:74:54:92:57:19
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019D390A48B1F6693BEA5E8C6379B9A2480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 105D
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: u1qp6g35+htcYmi1WdLmDLOJTVO9Wwe3nNMR2jkKllg=)
2: fni4F9UqmVq6XjkfQM2mlICXn2A.roa (hash: /xTY9wO0RVS1lCPmi0MbtNS2MzThX4qwZ8rkpFYNO4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:48:b1:f6:69:3b:ea:5e:8c:63:79:b9:a2:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=de7559e8ae8f2e506a522a6f6e4fa27454925719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:ff:31:f1:8c:21:0e:c3:28:8c:b0:be:08:
13:0e:bd:fd:c1:ee:08:2a:a2:3b:20:e9:73:e0:26:
74:a2:85:e7:ed:3a:64:2a:b6:6a:6b:db:22:96:15:
ad:75:9c:8a:2c:af:df:fe:f0:a0:5e:c5:c6:78:ca:
50:d7:ed:2c:a4:74:94:94:80:6a:36:6e:5d:90:da:
f5:40:1b:3c:c3:da:f4:2d:30:ee:6f:d6:6c:cf:f1:
ab:fa:7f:26:6c:f2:12:72:c4:e2:25:e0:c7:2f:f5:
44:4b:8f:1f:cb:0a:db:5a:8b:ab:a6:30:60:1c:8b:
bc:08:34:14:fc:12:df:11:2b:1b:0a:bc:ca:89:24:
ff:00:2a:61:10:9a:e3:a3:b5:5e:3b:bd:3f:1b:8e:
57:88:55:8d:50:d9:8f:97:22:f5:7f:9f:64:78:78:
cc:a4:9e:8a:eb:70:2a:51:92:61:b0:e1:f5:c4:d7:
36:c5:83:5d:63:89:b7:de:90:b7:42:91:c2:43:20:
1b:cf:56:43:0c:65:94:db:93:0b:11:9c:8a:80:0c:
ff:49:c2:d5:d3:5f:3d:61:4b:aa:52:02:62:04:c1:
b6:ff:89:28:0a:11:fc:ea:80:bc:32:f9:b8:ad:1c:
2b:ab:dd:d4:81:65:80:f8:a3:6a:02:2c:90:ce:da:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:75:59:E8:AE:8F:2E:50:6A:52:2A:6F:6E:4F:A2:74:54:92:57:19
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:68:8e:cf:25:ee:5e:5b:2e:be:10:58:45:1a:58:81:e0:
ae:a1:d1:7b:2e:60:04:99:34:bf:66:63:4c:b3:9b:4f:a8:e0:
12:3a:88:b5:48:ae:6f:17:35:93:ed:b1:6f:f0:75:36:f6:9c:
46:30:5c:f2:b9:c5:b6:22:c7:12:c1:74:9c:56:07:92:fd:60:
de:1e:4d:bf:f9:bb:63:79:6f:68:eb:c1:5c:48:ea:d1:0b:15:
da:4e:29:03:d3:d7:60:fa:ed:78:b4:2e:70:54:82:e5:a0:38:
81:98:cb:90:a5:bd:50:0d:bb:0f:91:7f:44:2d:74:6f:40:01:
3b:52:a7:ab:24:21:7b:b3:41:b4:30:9d:1d:b9:f0:6d:a2:82:
31:4a:14:77:cb:a2:9e:8d:55:04:3c:a1:4b:d6:21:10:ad:fc:
d1:88:16:0b:90:b9:55:38:35:7b:f5:d4:d6:be:08:cb:fa:77:
c6:d3:9f:d6:5b:a4:c3:96:85:83:6b:80:b6:89:48:0b:c7:23:
aa:90:a7:61:41:d5:7b:41:18:1e:6f:1e:8c:48:88:38:a5:dd:
7f:73:67:3e:96:66:0e:10:c4:df:92:bc:d1:1e:2f:2b:69:96:
2e:20:5c:e3:65:6c:4c:60:23:2f:f4:8f:af:fb:60:82:b3:fa:
62:25:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:52 2026 by rpki-client