
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
File: UxIuA6hBuIeJY6__9pXKT5_QaCw.mft (raw, json)
Hash identifier: zc88SKtvN7sbprSm2i+K4XMFH+2WM/rEmsHDkwyqswo=
Subject key identifier: 5F:C1:37:B0:78:C6:8F:11:BB:5A:BF:72:7F:DA:F8:FB:30:C4:48:4A
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 019D10EA05E797ACCC5377F9D1D7A87868BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
Manifest number: 118F
Signing time: Sat 21 Mar 2026 15:01:05 +0000
Manifest this update: Sat 21 Mar 2026 15:01:05 +0000
Manifest next update: Sun 22 Mar 2026 15:01:05 +0000
Files and hashes: 1: UjFdhEdt4WKlDSIUUurW21paKp4.roa (hash: fDRm4GJe+GCEFChs7oH68Gzn9XNFPr0wdWmaIX+37oo=)
2: UxIuA6hBuIeJY6__9pXKT5_QaCw.crl (hash: 0CRMUfC12xJH3or5zx9hoA1sGKaaNR3fBQI+wqZZMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:ea:05:e7:97:ac:cc:53:77:f9:d1:d7:a8:78:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Mar 21 15:01:05 2026 GMT
Not After : Mar 22 15:01:05 2026 GMT
Subject: CN=5fc137b078c68f11bb5abf727fdaf8fb30c4484a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:72:b6:fa:23:bb:be:89:f1:c2:41:c3:3d:
c5:4f:4c:32:8c:a0:1f:60:58:6c:66:7e:53:ac:f6:
1a:96:e0:93:fa:8a:4e:f9:f1:da:5c:60:2d:67:5d:
b3:ad:00:a5:da:e0:a6:10:d0:dd:bf:21:86:f0:68:
20:12:9d:0e:7b:62:12:22:ab:d5:1f:4b:24:ef:7b:
87:71:72:5a:49:66:5a:e3:95:12:29:a0:5e:ca:3b:
c0:05:2f:4e:b2:36:88:3d:43:c7:73:ea:18:44:63:
f9:2d:47:9f:8a:7d:ea:d2:10:a4:7a:58:0f:83:25:
f6:21:14:6f:cb:b4:53:99:cd:d7:65:aa:95:bb:2d:
9b:d8:60:6a:13:2b:d3:02:7d:18:da:3c:31:ad:d6:
17:5b:89:5f:ff:9e:91:77:60:73:f8:a2:23:34:c6:
58:4d:14:9a:be:a6:f5:fd:96:89:98:8e:07:3e:3c:
c8:b6:50:25:b0:c0:b1:66:2c:a1:f6:51:b9:bd:84:
c6:fa:44:7a:9f:9b:8a:bd:64:3e:6d:f6:11:37:94:
9f:b8:29:6d:a2:4d:1f:2d:3b:48:ae:ce:b4:1a:9b:
a1:44:af:78:14:a3:e0:bd:bc:d3:e6:f8:54:3b:5b:
33:0a:7d:1a:12:4d:50:44:48:33:8c:d2:36:13:64:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C1:37:B0:78:C6:8F:11:BB:5A:BF:72:7F:DA:F8:FB:30:C4:48:4A
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ce:5a:a2:d4:5a:00:3e:f3:c7:65:2c:ee:a1:bc:f0:21:76:
68:66:37:e4:3e:6f:c9:65:dd:29:80:51:be:ac:81:e0:ae:fa:
43:f0:8f:59:1e:8a:7c:61:48:37:d9:8f:94:a2:ea:b6:33:f5:
f3:5e:15:4b:4d:ff:6b:2e:dd:33:72:29:81:9a:59:23:39:08:
a4:d3:0a:cb:fe:d6:02:fd:d5:17:7c:c0:c4:f8:6a:f2:0a:b3:
49:9c:a5:e6:c0:91:b7:49:4e:e8:f0:1b:42:62:66:d9:c9:f4:
af:71:7a:21:bb:3f:c1:c1:4a:98:5b:66:75:61:97:b8:79:ac:
99:2b:1c:0e:65:05:cb:4f:2b:1e:42:ff:6e:07:ad:47:cf:31:
2c:8c:4e:7c:24:95:8e:98:81:6a:b3:f0:43:11:7a:94:35:cc:
de:83:55:bc:65:d9:7b:b0:bc:fe:a6:3c:b0:34:41:29:2e:98:
23:a9:1a:82:80:c3:b9:13:77:7d:1e:ec:0e:25:62:e6:dd:88:
12:32:1d:39:3a:f0:41:bc:67:70:af:a8:17:f0:a4:48:aa:b9:
d7:5a:3f:87:ed:e8:a1:57:7c:62:e1:6c:aa:7b:90:77:ca:82:
36:0b:e5:3f:94:3c:08:84:fe:dd:77:5c:72:95:fd:68:83:c3:
e2:c8:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:45:33 2026 by rpki-client