Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: 4z/Ga6LVnGJkBHctifEbf3MeIMZejC/dkEje4JbIrBY=
Subject key identifier: 19:64:99:B3:ED:CF:D3:BB:A4:CA:9A:8D:4D:6C:B9:AF:69:F6:A7:AE
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019D3752DC284231DF9262923D676FB603A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 1811
Signing time: Sun 29 Mar 2026 02:01:10 +0000
Manifest this update: Sun 29 Mar 2026 02:01:10 +0000
Manifest next update: Mon 30 Mar 2026 02:01:10 +0000
Files and hashes: 1: OzTQl093nPuHgvb4uJ0q61uAdgo.roa (hash: hmpXzU1F+pG+U/TeV3XVItayY49E8Q1T8eDs1027tKg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: +1Tu31tsHJTeOjILcpONcyb74GhLx2kJ5qK10ysqxaY=)
3: jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa (hash: qr2NzVnl1VJwrzaYNmZtgYoQsTO097Vnonun3IEMl60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:dc:28:42:31:df:92:62:92:3d:67:6f:b6:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Mar 29 02:01:10 2026 GMT
Not After : Mar 30 02:01:10 2026 GMT
Subject: CN=196499b3edcfd3bba4ca9a8d4d6cb9af69f6a7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:00:73:08:11:e8:db:da:99:ac:1b:2d:52:
e1:98:6a:8e:c8:83:1e:5a:fe:6b:a8:2c:b0:3d:a1:
f6:15:bd:f8:e8:70:d4:7d:d2:6c:da:0c:8b:21:7d:
06:17:ce:16:2a:d5:1a:6e:27:34:5e:46:8b:0f:c4:
66:12:bf:8e:85:6e:73:cd:4b:54:0e:30:d6:32:b0:
76:97:dd:f7:d5:58:e1:58:6e:bc:50:6c:f5:91:91:
00:44:60:44:96:ef:b7:f9:d7:0e:d5:60:20:88:b5:
86:f8:a8:ed:cb:f4:2b:41:33:de:68:49:5f:da:61:
9d:38:57:18:ea:93:3f:73:98:ee:49:57:c6:59:9c:
55:f1:f3:96:74:81:09:b3:7e:47:24:59:cb:48:85:
b3:e4:60:42:dc:9b:dd:54:29:a3:d4:55:b5:2b:46:
22:47:ca:bf:f8:26:d2:61:f1:cd:61:51:2b:d4:b9:
a3:81:25:2d:d2:e4:f4:9f:a8:69:93:29:3a:64:64:
bf:f6:ed:8f:00:ba:4b:40:40:92:25:20:95:cb:29:
d4:b6:61:27:a2:48:d9:56:a4:c7:12:8b:47:c1:2c:
d4:d9:6d:ae:ca:66:eb:1b:29:99:29:55:86:99:21:
e1:c7:79:f5:af:96:ee:81:1e:e6:33:58:13:b9:df:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:99:B3:ED:CF:D3:BB:A4:CA:9A:8D:4D:6C:B9:AF:69:F6:A7:AE
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:a5:9c:31:39:ad:f1:8d:d7:dc:d0:f7:68:48:03:7a:69:
cc:da:04:b3:be:ca:95:91:ae:84:97:6a:0b:a7:60:e4:95:e1:
b0:90:14:55:24:f4:dc:fd:c7:86:b7:6d:cd:e2:e7:68:8f:d9:
e5:18:cb:4b:2b:84:49:d2:5b:9e:33:6c:1a:5a:3d:80:05:55:
01:62:ae:5f:0d:fc:6c:07:b3:28:fb:d1:1c:7a:50:2f:be:a5:
39:9a:99:89:7f:6c:18:e3:ef:ee:57:7b:07:e0:ce:0a:c0:9c:
f8:b7:b7:aa:2f:48:4d:8c:35:c5:e0:d2:31:45:9a:c1:81:42:
82:1e:90:77:fc:89:45:bc:2f:ba:a4:fe:68:34:3c:f6:56:08:
bf:c6:48:6b:ca:e0:ff:22:52:6e:26:d3:e7:e6:81:67:b1:9a:
b7:d6:f2:7d:4d:62:a0:05:bd:4b:20:14:05:a9:2f:59:7d:ae:
37:32:5f:bd:76:91:71:2b:e1:a4:ff:1c:7a:ad:78:df:70:05:
2c:d1:41:ff:de:b1:b7:ff:b1:f7:08:92:49:2a:d0:27:b5:90:
d9:b8:01:43:b9:04:20:b1:04:81:0d:ef:bf:75:b6:be:11:0b:
84:a6:64:da:e2:b2:cf:01:e7:56:07:e3:fc:60:32:51:87:a1:
2d:b1:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client