Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: f75g1gv0Sw89Fe2i+BLpbNd9oqcBRg3jFEeIYZVgRK0=
Subject key identifier: 0F:3A:B3:EF:83:AE:3F:53:4F:41:64:89:6D:27:73:6B:72:10:82:BC
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019D389BD37F4976409250B446EF3141A2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 18A3
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=)
2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: 4Sw68bSYR5bztzHRfj4HLioPObvr3mdiXX80AOaQWdM=)
4: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d3:7f:49:76:40:92:50:b4:46:ef:31:41:a2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=0f3ab3ef83ae3f534f4164896d27736b721082bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:db:ff:de:6e:54:3c:6b:78:d1:1f:e7:8a:a9:
cd:7e:4c:82:21:14:57:cd:7a:c3:b7:ff:00:61:48:
71:ed:12:4c:5f:f1:d0:e1:29:f3:38:a7:66:b2:61:
d4:84:4f:90:0e:ae:d3:96:0e:0e:1d:69:aa:b9:82:
cb:68:7a:91:50:b9:77:dd:1c:ce:0b:de:f5:cf:08:
23:89:04:f4:16:84:1f:a4:9f:0b:dc:a2:98:de:75:
1c:8d:18:a9:c5:b8:e7:80:6c:d8:d4:9f:d2:d3:4f:
94:ce:53:d8:68:8b:3b:b1:04:82:e6:cd:94:83:21:
33:43:19:35:9d:59:c7:7a:60:20:98:a7:b6:2c:6f:
de:17:67:bf:04:bb:d8:38:bf:f4:10:6d:59:bc:93:
de:60:50:fc:87:be:35:25:ed:f4:62:40:e2:f4:cf:
63:74:54:55:2e:fc:52:af:ab:46:69:8b:24:49:b7:
87:6b:7b:76:e8:06:88:01:d5:ca:41:3d:90:06:e0:
1b:ca:17:45:06:86:75:2e:a7:50:1d:85:dd:1d:7c:
db:04:03:f8:58:df:74:77:db:79:1c:2d:67:fc:80:
30:ac:92:60:86:26:7f:96:5e:13:40:83:d8:98:b5:
74:7b:c1:bd:a7:ff:02:b9:4c:0f:75:a5:96:db:09:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3A:B3:EF:83:AE:3F:53:4F:41:64:89:6D:27:73:6B:72:10:82:BC
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:de:63:e5:bb:bc:59:ac:29:98:d4:c3:ba:ab:70:bd:ff:
4f:3a:ba:54:9f:54:cf:14:0d:43:9d:45:f4:3d:be:45:73:f8:
69:4d:6e:5f:b4:ad:4b:da:88:92:c5:fe:2d:2c:8e:0d:5c:3d:
ac:aa:b1:9c:e8:ca:f9:96:9e:cb:c4:b5:01:44:ea:f5:0e:0a:
51:d9:3c:ef:a7:aa:79:5a:47:9c:e5:f3:8c:4f:ff:bd:d2:26:
39:ad:9f:54:13:29:49:9b:db:93:4d:98:14:9b:b7:f8:45:e4:
6a:7a:21:a1:86:f6:ab:30:bc:d7:16:a2:be:95:90:88:c0:b9:
14:bc:01:85:ea:ef:d9:d6:11:37:0b:22:ec:e0:3b:d5:e3:f9:
78:61:c0:25:de:56:37:c1:46:d7:4b:e0:bd:37:6f:4e:21:54:
1f:ac:e1:59:3c:7d:55:d9:83:a7:4b:3b:07:2c:b8:1a:f0:84:
d9:8f:88:d4:84:5a:43:39:db:42:af:79:ba:e1:9c:2f:8b:60:
0e:82:0a:dd:53:0a:22:08:13:f6:bb:35:30:1a:06:23:a9:79:
99:4e:43:d6:6c:2d:d0:44:74:48:f6:b3:f4:86:88:3d:49:53:
e8:a7:5c:e7:ad:9a:7c:12:9f:5c:7f:d3:d4:02:be:a5:75:69:
26:81:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:10 2026 by rpki-client