Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: cuc5IkAlfwI6w+d92h9ogfCScfounao1SlRw53pe0cg=
Subject key identifier: 2C:9A:D9:6D:DF:E7:ED:9D:40:7C:2C:92:26:38:32:75:78:2B:B0:F3
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019D3940AEB685109BBF0D5B6F80C20CD353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 1097
Signing time: Sun 29 Mar 2026 11:00:33 +0000
Manifest this update: Sun 29 Mar 2026 11:00:33 +0000
Manifest next update: Mon 30 Mar 2026 11:00:33 +0000
Files and hashes: 1: RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa (hash: ArSk8FNvQG5dEX1fm0nCfGPhiKh2s1aLul9gIYaDXF8=)
2: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: GIKon3XXEgsSbsSuogrLaF06QMDphTyk5Ap/0JF454E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ae:b6:85:10:9b:bf:0d:5b:6f:80:c2:0c:d3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Mar 29 11:00:33 2026 GMT
Not After : Mar 30 11:00:33 2026 GMT
Subject: CN=2c9ad96ddfe7ed9d407c2c9226383275782bb0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:50:f3:72:d5:78:5f:f5:2c:05:28:38:db:
04:b4:4b:9e:98:f4:f1:e2:c4:08:0a:a6:92:85:f9:
0d:42:d0:61:82:c1:08:87:33:f9:81:c0:e1:08:96:
91:30:1b:88:7f:8b:a5:20:bc:4e:91:ab:02:69:bc:
78:73:4e:c6:d8:92:62:d9:f8:32:b0:1b:41:4f:aa:
82:54:30:71:eb:bc:c9:a7:e0:c2:fb:71:b5:94:48:
aa:92:38:fc:f3:e9:2e:d6:62:5c:24:61:e6:52:15:
17:87:47:3d:17:ff:16:89:7f:f5:34:2d:fd:3d:73:
46:eb:8a:19:7b:bc:45:0d:f4:d1:7c:cd:9f:3d:a2:
a9:8a:c0:68:64:e2:62:dc:c6:8c:14:be:57:07:d5:
b3:9e:10:38:aa:bd:10:0c:24:35:80:9d:66:eb:47:
2a:d1:85:81:f7:86:98:83:50:50:1a:dd:39:a7:fe:
68:56:6d:05:85:53:64:a1:d5:9b:41:13:6c:9e:52:
f8:b1:20:c7:4f:84:3f:7b:0e:cd:a6:d0:e8:c2:2d:
52:bb:d6:be:c5:6d:82:5a:b9:c5:0c:7f:8b:f7:7a:
3d:ad:45:2f:54:df:e4:4e:95:4c:55:d0:0a:e6:d9:
1f:9a:d4:a6:67:92:7a:c6:39:48:44:3b:41:a7:8f:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:D9:6D:DF:E7:ED:9D:40:7C:2C:92:26:38:32:75:78:2B:B0:F3
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:f8:44:8a:09:1e:f0:f8:7f:1d:4f:1d:a2:07:59:26:93:
71:89:80:31:20:ed:7c:48:6c:80:64:be:41:d5:cd:b2:6b:23:
48:75:c4:f0:79:1a:72:c5:11:ef:c5:4b:f5:9f:b5:cb:fb:6b:
06:58:c9:e1:6e:4f:1a:ed:8e:ab:d0:6f:6b:41:e3:4d:20:46:
f1:7c:08:49:cb:96:97:fd:48:c4:2d:51:91:6d:4c:0c:f6:3f:
9c:37:1f:40:c2:55:93:6e:09:24:6a:c0:82:ce:f5:a6:6b:9c:
ee:20:b2:b3:c4:11:da:8f:e6:b7:2a:44:78:be:d8:2e:10:49:
13:82:69:77:71:f6:a3:2f:08:2c:5d:6f:37:b6:12:cb:89:77:
0c:26:41:c3:ba:30:89:12:7d:99:e1:ff:67:88:e7:89:80:b5:
8a:47:40:56:7b:d7:84:0a:c9:8f:61:86:5f:bf:cd:49:05:f4:
ac:7a:56:18:fb:b6:12:69:40:83:77:21:e7:59:71:b4:ae:c2:
f4:da:24:02:79:ef:57:0d:32:1a:65:d3:27:11:43:58:10:c7:
75:5f:37:f0:ad:14:a5:10:c6:91:30:32:b0:4c:af:ef:4b:95:
fb:ac:36:d0:ec:bc:2a:44:9f:d8:91:66:70:75:12:07:1a:8f:
ed:7b:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:51 2026 by rpki-client