Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: QkM7tRK6EU3Tsqf7kGeoj/P3VesAEp7IRETxL5o3EmE=
Subject key identifier: 47:00:97:0E:F5:3D:30:37:25:70:24:99:22:F0:B1:36:95:34:C2:26
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019D39AF3CBEC16D9BC6D5C186DC4D64C0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 15EB
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: Vmrm8iuX9X7CNLyAK7PyDgKQIVDGmVOPMn8c2oC0ltU=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3c:be:c1:6d:9b:c6:d5:c1:86:dc:4d:64:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=4700970ef53d30372570249922f0b1369534c226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:d9:7d:4b:28:c9:8e:7c:e6:53:53:61:3a:
b5:7c:74:50:5f:4c:b3:6c:4f:9c:72:c2:68:3a:fc:
b5:b7:d0:b8:69:8b:a7:7d:07:56:7c:94:6e:89:c6:
e3:06:99:38:fa:bd:ca:f9:57:c5:1c:fa:b8:0c:f5:
ac:e2:e2:be:d5:7a:b9:ba:15:5c:d2:a6:49:3d:52:
1b:6d:57:c1:d0:0c:83:97:d8:bd:d7:5c:5d:20:fb:
ae:f6:b9:d5:55:07:b6:32:93:43:76:c8:cf:00:b6:
84:11:aa:a2:c9:fb:28:1c:80:f4:5f:32:e2:aa:71:
a4:9d:a7:bc:51:4b:61:7e:b6:e1:6b:5c:3d:f6:3c:
f9:9c:6b:c0:e9:27:ca:73:9d:50:f1:20:6a:0c:b7:
8e:91:ac:27:ed:b1:8c:9b:57:d6:fd:a4:79:ff:7d:
e2:97:fe:55:b7:39:0b:7c:53:bc:10:fc:9f:5a:ce:
0f:13:6d:d9:60:3e:48:55:90:3f:ed:0e:d4:91:08:
30:eb:18:60:b3:fd:5d:cf:f3:2d:21:e2:0c:dc:13:
46:fe:27:1d:e4:cd:f7:0f:ea:f9:b6:64:7d:1f:96:
47:da:d3:10:f5:35:22:f1:47:91:d7:b4:88:9e:b8:
af:d7:cb:7a:49:1c:a5:a3:fd:61:31:40:5c:19:ec:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:97:0E:F5:3D:30:37:25:70:24:99:22:F0:B1:36:95:34:C2:26
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:38:ca:ba:20:31:e6:8d:48:98:70:0a:26:28:86:48:8d:4f:
18:05:e4:91:49:82:db:78:a9:a7:0a:9b:e5:1c:f2:6e:47:fd:
cc:f6:51:c1:0b:e1:9b:b4:4c:88:83:e2:c7:0f:d8:85:5d:9a:
54:77:96:20:19:c6:fd:e9:b1:8d:6f:aa:32:cb:75:43:95:e7:
57:e7:90:fb:fd:a5:c7:ba:26:98:a7:32:05:11:99:de:ad:ed:
91:f1:03:d8:2f:ac:81:03:50:9e:97:42:0c:45:8b:bb:d2:45:
ad:55:16:10:68:7c:45:13:c1:9c:2a:07:c3:09:c6:21:8c:89:
a3:8a:7a:c4:ec:bf:e2:46:d1:bc:ca:69:23:dc:c2:49:3f:4d:
5c:b0:18:f9:83:2c:9f:68:a3:57:27:4c:be:a7:0f:d6:32:43:
5e:2b:e2:1b:81:95:9f:35:04:4a:57:95:d2:d5:7d:11:f6:bc:
8e:88:87:b7:8c:e4:20:b4:98:64:97:0e:00:4d:d0:9b:6f:6c:
ec:7e:d1:da:8e:5c:c9:51:89:aa:13:d8:ad:8f:e0:21:90:91:
5d:a1:2c:0e:0c:35:f7:aa:ba:4f:20:5c:62:d9:3f:0b:93:80:
a0:23:0f:85:51:a4:5c:e9:37:e1:27:e7:10:63:1d:13:15:82:
3e:e6:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:09 2026 by rpki-client