Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: cIcpPTh/zgxmZ19GdIaKvTLraBqmH99uisoCWeqWU4s=
Subject key identifier: B5:C1:D9:24:87:1E:4E:1F:0A:87:CE:37:BC:28:A4:50:F0:64:D6:2A
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 019D3865C13F8BBCDD11D23DA25145D165E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 17B1
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: DkKDajpTHwTuNMIpxKTAMDGQDDo.roa (hash: X10Ua4dlXVpqCEjX6L/K3mZaPDpI5fuPVZc9nBQdT8k=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: bQNmypd3T63rnRCY+py7VNFnZHrd0CfNjP5Eqldjr1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c1:3f:8b:bc:dd:11:d2:3d:a2:51:45:d1:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=b5c1d924871e4e1f0a87ce37bc28a450f064d62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:b4:2e:6f:a9:6d:d5:0b:e4:6a:20:c7:3e:
ff:40:19:92:f8:50:e1:fa:b9:19:5c:40:9b:fe:cb:
b2:08:b0:d1:5f:46:bb:d6:f8:29:ba:95:18:a8:41:
85:a2:0b:eb:04:88:5e:ab:3b:b0:26:c8:15:2d:76:
79:ca:6d:a5:b8:82:c8:db:dc:92:d3:d0:b3:94:d2:
7c:a2:d8:8c:23:d1:fe:c5:4b:b4:58:2d:ca:b1:c5:
3f:a1:ff:c3:11:88:9a:46:d5:6c:cc:2e:29:d1:ba:
c6:da:e2:e6:f7:84:b8:fd:c5:22:fa:09:63:6c:c6:
77:a6:65:69:ae:0f:aa:e5:5a:a2:e5:b0:08:f6:1d:
4e:8d:05:4b:fb:a4:e1:74:0d:e2:e9:e2:ba:e7:fb:
ee:a3:02:25:19:ca:1a:dc:a1:39:3a:8c:77:92:d3:
2a:bf:63:b4:4e:8e:93:49:18:7c:59:49:86:16:12:
81:fd:33:a9:1d:ab:ab:1a:e8:d0:b2:1e:c5:0c:f0:
cd:fc:b9:d6:98:85:2c:77:d9:53:79:34:93:d6:e8:
97:98:60:a1:f8:c9:6e:0f:ef:b2:90:68:0f:eb:c4:
bb:84:07:86:4b:c9:e2:4c:5f:1d:c8:2d:4c:26:33:
e7:6e:92:3d:6d:7f:7f:47:3f:e2:f0:36:67:14:a6:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C1:D9:24:87:1E:4E:1F:0A:87:CE:37:BC:28:A4:50:F0:64:D6:2A
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:a3:d1:54:82:dd:a4:ce:84:f5:cb:49:e4:4a:8e:91:06:
17:7b:7c:66:12:b5:7d:23:83:7e:8b:71:5b:67:75:de:af:c9:
ff:1b:81:86:c9:24:c2:20:f8:de:be:bc:07:ef:e2:b2:1e:f3:
85:b3:60:53:8c:db:55:45:c1:42:75:8d:18:04:cd:a9:5d:5e:
77:39:ee:9c:b7:63:cc:c5:fb:dd:f8:aa:32:36:cf:7b:d0:59:
d8:ef:93:1e:60:4e:78:a0:91:f3:72:09:48:49:5e:d9:a1:49:
c0:42:f2:02:a9:27:cc:64:f0:04:1f:4c:c3:ec:a8:62:93:fd:
e2:1a:d1:98:39:e6:ca:5b:3b:03:e9:c2:41:32:c1:de:ac:6e:
f8:56:05:a8:8b:70:15:f6:75:40:04:ee:35:b2:76:6d:50:27:
9f:46:68:c1:88:53:17:e4:84:62:9d:3c:15:cf:99:c6:23:23:
fd:c4:fe:d1:17:b3:64:a6:08:b2:a0:3a:d5:8d:37:ff:ce:31:
29:9e:58:13:62:26:1e:93:4c:2f:51:d2:23:40:25:3b:90:04:
40:9e:60:ee:3d:58:e2:d1:dd:e0:0e:60:14:9f:90:0a:18:31:
de:c2:d2:9c:76:10:2c:b4:fb:e7:60:36:ab:a4:c3:7f:7a:dd:
b0:62:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:48 2026 by rpki-client