Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: 4A48roszsq5vr9O2/gbIdtCXkDrdrZzN3sCyZ6g/BDA=
Subject key identifier: 3A:72:B2:14:85:50:75:BF:AA:93:D9:5D:8D:F3:0F:77:44:1C:B5:46
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019D390A4EA5C60E2567868853D8BCBD0616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 15DF
Signing time: Sun 29 Mar 2026 10:01:09 +0000
Manifest this update: Sun 29 Mar 2026 10:01:09 +0000
Manifest next update: Mon 30 Mar 2026 10:01:09 +0000
Files and hashes: 1: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (hash: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o=)
2: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: uFG4Hf45E61Qg1VO7KlHkoinMcwvOM6GgkKvw1pMJLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4e:a5:c6:0e:25:67:86:88:53:d8:bc:bd:06:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Mar 29 10:01:09 2026 GMT
Not After : Mar 30 10:01:09 2026 GMT
Subject: CN=3a72b214855075bfaa93d95d8df30f77441cb546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:4a:ad:dd:82:c3:d7:68:0b:17:af:63:5f:
04:c0:41:2a:04:e5:cc:68:97:3a:06:3b:41:09:3b:
2b:ad:76:6d:2b:87:4e:89:b3:03:72:c5:7d:54:72:
e5:01:89:d1:88:7a:61:a7:95:16:bc:26:19:ea:9b:
f2:70:4a:4e:ee:25:c3:1b:aa:a6:58:64:01:84:d9:
0e:0a:08:ff:d4:85:a1:49:ce:e1:9a:e2:50:4d:f7:
55:de:6e:27:52:70:b3:26:53:9d:e7:e9:c8:f9:4e:
58:5a:de:22:c9:40:4d:22:f3:1e:a0:0b:c9:4e:59:
0f:91:7a:8b:fc:91:98:82:8a:e5:ed:1a:1a:1d:21:
d0:00:15:11:35:7c:01:4a:83:bc:68:a3:6b:7e:7f:
d6:a1:6a:5c:bc:d8:9d:e6:4b:1a:1f:65:38:2c:88:
19:ff:fe:0b:f4:8a:8a:cb:21:13:f4:04:5a:25:32:
9e:ea:bb:59:a7:77:15:2a:0b:4f:cb:5d:bf:0f:23:
7c:7e:f7:bc:16:a4:bd:04:7b:82:b7:35:d4:9d:9b:
9a:41:c1:dc:ec:76:18:ae:65:26:ee:01:e6:c0:26:
ae:a3:25:e4:5f:1e:8c:a3:17:82:29:0f:30:80:04:
a4:80:65:03:71:50:d0:f4:99:35:f1:c6:b4:01:df:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:B2:14:85:50:75:BF:AA:93:D9:5D:8D:F3:0F:77:44:1C:B5:46
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:67:13:d7:09:25:f8:48:c1:1b:8b:3f:66:f4:ab:0f:97:04:
27:07:e6:25:05:fb:dd:7b:cc:2a:3f:04:f6:56:15:99:6a:80:
67:22:4a:d9:05:14:11:0e:e2:6a:17:56:e0:b2:4f:9a:30:8a:
2f:96:45:31:dc:0c:77:d8:a1:f1:5b:ec:b3:49:25:e8:b4:c3:
9d:bf:5d:b8:c6:e1:8f:80:f8:98:e2:1b:5b:f1:bd:e9:5b:88:
46:02:b6:0e:eb:fe:17:45:79:b1:95:79:d8:33:60:e5:ca:57:
62:11:4f:c8:71:05:77:f3:c6:a7:9c:1c:6b:df:fe:ca:b8:2d:
11:4a:b7:f5:44:ab:de:a7:d9:95:51:c5:6f:1f:6c:d2:50:0a:
26:af:1d:b0:27:83:90:87:04:cd:d9:de:8c:3f:ed:91:19:af:
d8:c1:5e:2f:5d:c2:5a:8f:92:20:96:69:45:5f:d2:b3:37:f1:
ac:6e:2d:e8:7c:3a:99:76:e8:ba:0c:1d:8e:e8:e2:35:a1:69:
3c:31:dc:65:51:a0:a6:24:53:26:ff:8b:9b:55:a2:af:a3:48:
69:8f:78:bd:5b:4e:a9:8c:54:31:59:f7:f5:b0:cc:b3:67:93:
b3:ce:6e:cf:4e:02:3a:ae:a1:f1:d5:42:e6:72:60:02:03:fb:
b4:d5:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:14 2026 by rpki-client