Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
File: UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft (raw, json)
Hash identifier: TAsAOELWFHEzMkQbJGHPYSE5XBzBoa3Joo1fvMsJqKY=
Subject key identifier: DC:62:A4:2A:A2:E9:CA:E3:08:7E:D9:58:3F:CA:FE:5F:8A:ED:26:75
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 019D3752F57937FC07C2CEA101CE7255110F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
Manifest number: 0A1D
Signing time: Sun 29 Mar 2026 02:01:16 +0000
Manifest this update: Sun 29 Mar 2026 02:01:16 +0000
Manifest next update: Mon 30 Mar 2026 02:01:16 +0000
Files and hashes: 1: UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl (hash: LqdoE1ebFkTJBANZQOdWFnBHZPWdisEnXIp9E9VkTXo=)
2: uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa (hash: wUN+v284pRIdx3/1i/zxf53vr2oGEP7/MlFstJJg9go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f5:79:37:fc:07:c2:ce:a1:01:ce:72:55:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Mar 29 02:01:16 2026 GMT
Not After : Mar 30 02:01:16 2026 GMT
Subject: CN=dc62a42aa2e9cae3087ed9583fcafe5f8aed2675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:ec:b3:bd:8d:b2:1d:60:24:b0:42:4c:79:
c1:40:26:5d:c9:66:c4:4e:6d:80:98:12:c4:ca:2b:
17:84:4d:52:6a:5a:3c:91:80:58:d8:fc:d6:32:f2:
d6:5e:92:22:ce:01:7c:36:50:92:2b:70:37:0c:fd:
a7:f8:a8:6e:9e:b5:10:0e:7c:9a:af:70:b9:36:95:
2d:d5:6c:ab:98:c3:6a:78:ac:d0:00:94:a7:0d:dc:
ad:90:3e:14:9c:2c:42:65:8e:0f:3e:39:f5:00:96:
f3:99:80:52:41:1f:e9:8b:14:bc:ab:04:6c:c1:8b:
19:0f:4e:26:7d:54:fa:ca:e7:26:95:4c:56:da:a1:
3b:20:80:20:59:85:1d:0a:92:92:05:9d:50:9b:6d:
dd:b3:b4:cd:43:75:b3:6c:99:1f:d2:9d:73:b5:03:
1f:84:10:01:5c:d5:bf:96:12:33:44:28:7c:8b:e5:
ab:14:8a:5d:16:c8:19:f4:85:dd:7d:af:f8:08:bf:
07:f1:13:a1:c9:96:f9:7a:42:a1:77:b0:4d:6a:e6:
e2:07:56:1d:2a:a4:d1:14:d1:e4:b0:80:ab:04:c5:
a2:69:32:63:db:26:e1:f6:e8:16:9b:3b:ac:ae:d9:
10:2f:cc:92:8b:50:09:83:35:8f:5a:de:1f:0b:80:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:62:A4:2A:A2:E9:CA:E3:08:7E:D9:58:3F:CA:FE:5F:8A:ED:26:75
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:52:f2:36:a6:ec:13:66:f8:6b:21:e8:b1:f0:e8:f2:0b:
e2:91:c1:c2:11:5b:b4:2a:4f:e5:61:2c:81:c5:49:ac:a3:78:
d1:84:3f:1c:74:84:87:fd:d5:f7:0f:6a:8f:c6:a6:fc:a4:7a:
41:ed:00:a8:82:ae:00:d9:34:8e:7c:ae:97:95:d6:6f:ad:58:
c9:dd:86:de:97:df:ec:11:73:59:c9:3e:61:e3:79:6f:5f:4b:
a0:01:f0:a9:58:3b:aa:72:f8:34:c3:db:c3:95:44:87:b3:0e:
d0:3b:e7:8d:c5:98:b6:1e:ba:ec:fd:04:93:c9:1b:ce:7c:90:
58:cc:ee:c5:21:c9:cc:e0:ed:8d:c9:f6:0c:9c:4a:bd:a6:be:
d8:17:85:13:41:f1:bc:51:24:e8:57:98:da:ae:a2:24:3c:24:
38:0a:8b:29:77:f4:cb:b6:1f:8a:c7:5e:0c:2f:66:f5:a1:98:
38:ca:32:43:85:da:f0:f2:96:bf:7d:fd:87:71:91:4a:19:fc:
8e:16:08:2f:c9:37:48:e4:fe:ce:4e:4f:14:e2:f0:1a:98:e4:
95:6b:cf:8e:df:d5:b5:38:6b:c8:d0:51:05:d5:0d:24:60:0c:
01:b5:f4:a1:d6:34:9b:49:fc:a6:db:5e:b9:2d:85:e9:db:11:
fb:2c:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:55 2026 by rpki-client