Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: /hTja1ctntGL1y9YqMOud7TK/SE23/N42/uzPWB7lIQ=
Subject key identifier: 45:42:56:8F:59:35:7B:69:36:55:D5:2E:0D:15:5C:EE:93:0E:12:DE
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019D38D319842D727B857C88434F6CE2477D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: 1Wc+RFm4kaxlGyRNCvcnJZfT0jGWMAiuKYA0kHvJLi0=)
2: pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa (hash: UleN7udW9nm6GoIks0+gA75pmdznZCROwYpJMoJdnLI=)
3: rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa (hash: IMvnqVI7Pxn9M/xoV7ucEgQIFBZmeqaGx6nvvxRV2JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:84:2d:72:7b:85:7c:88:43:4f:6c:e2:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=4542568f59357b693655d52e0d155cee930e12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:23:c4:bb:e7:3e:83:ed:6d:dc:a9:be:66:
0d:98:b3:68:18:26:5c:44:e0:8e:2d:bf:d1:76:9e:
0f:73:34:83:3f:5e:81:96:22:eb:86:fa:9c:b6:1a:
3d:cf:47:25:f4:66:69:1f:3e:18:6e:47:1c:40:8e:
4f:b9:bb:8b:af:c6:92:09:2c:bf:14:c4:59:33:85:
4a:1a:c4:d6:90:ce:1b:b3:02:9a:38:5e:61:04:38:
58:f2:22:42:2a:cf:2f:bc:7a:0e:3b:6c:05:00:84:
d4:a2:97:bd:72:52:64:23:97:65:bb:e1:ff:eb:c9:
a1:f7:6e:57:56:fd:94:c7:6a:cf:20:95:12:d7:11:
45:58:e8:ef:89:7d:e9:5a:e4:e2:74:4d:8c:4e:f4:
0c:9e:37:a9:b4:bb:c3:2a:90:2a:1f:8d:55:9b:40:
94:3e:59:fc:44:03:a9:92:b0:05:a8:2e:71:30:fd:
52:2a:0d:fb:97:dc:b9:5b:db:8a:0f:0b:ad:f6:67:
22:4c:bd:5c:24:66:04:25:7f:6a:2f:ac:33:28:69:
bb:07:06:dc:33:35:71:a8:ce:bf:1e:8f:4b:6a:f0:
96:b9:36:73:1c:e0:b2:ab:bf:ce:d7:00:7d:86:e5:
60:99:ce:87:2a:55:c9:57:0f:65:ee:cc:5b:bb:e5:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:56:8F:59:35:7B:69:36:55:D5:2E:0D:15:5C:EE:93:0E:12:DE
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:86:db:b1:f9:85:62:35:3e:92:2d:3c:95:de:18:a6:6f:5b:
76:93:c5:cf:16:72:94:fa:b6:bd:a0:9b:43:f0:53:d4:a2:aa:
ff:ad:7c:9f:ac:31:02:00:0c:de:0d:e4:36:6e:ba:b6:ab:fd:
91:88:0f:92:83:f3:e8:87:32:15:df:16:cd:67:78:66:7b:3f:
5d:ad:26:df:cd:f5:d8:0d:e7:22:85:1a:24:d0:79:81:1a:b6:
99:aa:d4:08:e8:b0:34:3b:63:35:5d:8f:73:d0:e0:47:75:b0:
77:6a:19:9d:47:c2:47:02:5c:b7:39:0e:90:18:c6:3c:24:0a:
e7:f5:eb:34:02:2d:45:1b:2e:f0:d3:28:47:3f:ca:aa:61:20:
9b:a4:a9:54:54:6d:eb:d6:2a:bd:47:45:e6:7a:b7:33:33:b8:
f5:32:b6:09:d3:70:ac:63:1b:44:74:e4:c3:f1:ec:38:e6:20:
8e:40:29:2f:20:f7:47:f3:31:d6:6e:fa:8f:1e:79:3a:fb:51:
23:3f:e3:08:83:18:f0:8f:b5:57:a5:19:3d:88:8e:e0:68:1c:
c4:30:fb:59:87:dd:7b:61:8e:d2:d9:94:96:0a:0b:4d:71:58:
07:fc:8e:a1:04:12:11:3e:c7:50:03:4a:fe:bc:1b:3b:02:94:
ac:27:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client