
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: UWC8N6VKWCAqjJP0OxkaSPEZt2nFsxykqHJdDgRNJWo=
Subject key identifier: 4F:48:B0:73:89:06:77:47:B8:2F:AD:77:C9:26:19:86:D3:30:B2:FB
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 019D38659F53601647383AC64E08EED2A336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 07C5
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: K1qLnnrsBytcCd672tmGsMqXxYM.roa (hash: chgkC32Z3UMGB9mkkwLQsJIKs1LFl1ohHwqbg9qIaPw=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: cEg2XbwaYmiBQcqgNfpEISCKngRLttUmnmFufqBKwFU=)
3: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (hash: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9f:53:60:16:47:38:3a:c6:4e:08:ee:d2:a3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=4f48b07389067747b82fad77c9261986d330b2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:33:29:e9:e8:2f:b7:ef:e1:78:e9:12:3c:
aa:e1:03:6f:ef:10:6f:87:0b:93:45:28:2b:48:38:
36:30:33:b6:c5:39:e7:64:a0:a0:e0:c0:fa:2d:c6:
d0:24:ee:34:2f:9d:0d:a2:0f:b0:2a:21:95:59:be:
af:34:3e:69:32:9a:c2:88:25:49:07:e9:b6:57:22:
c0:e3:26:9e:b9:4c:1c:58:69:8e:e4:a2:8a:94:1e:
13:ed:b8:ac:91:33:33:67:fd:a7:cb:c0:9e:5f:6f:
c7:2a:d3:b4:ba:23:b3:82:64:c0:06:ae:6c:4d:1e:
52:f7:15:7e:3f:b4:37:9e:fc:79:51:b2:d4:56:47:
d8:06:42:cb:07:b4:b4:9d:33:3c:bb:7f:16:54:c9:
90:a1:c5:67:90:f6:81:75:c4:a1:46:90:70:f1:f9:
12:76:6d:c5:e5:33:0e:fd:76:64:d8:df:ce:ed:4a:
a0:d3:14:18:96:a5:55:1d:36:d9:f6:51:9a:b6:04:
6a:a5:93:89:65:dc:29:a2:44:aa:8a:67:ac:f0:3a:
48:26:c7:6e:6c:cc:ba:c1:0f:79:a5:43:87:d4:b8:
81:ca:db:c1:b6:a8:8c:84:25:0b:96:18:d3:13:1b:
e9:88:75:e7:1c:ab:27:4e:db:ca:20:32:58:54:c6:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:B0:73:89:06:77:47:B8:2F:AD:77:C9:26:19:86:D3:30:B2:FB
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:7a:98:1a:75:38:74:1d:bf:6c:00:02:b0:27:cd:c2:66:
77:f7:03:0f:d2:3e:1e:66:1e:2f:6c:32:c9:b6:18:80:c6:46:
4e:7b:b9:85:ca:32:90:d8:e7:df:9b:7c:73:ef:01:39:87:be:
48:44:d2:9c:43:79:96:39:7c:ad:d9:20:b6:4b:6f:33:8d:d0:
1a:e1:cb:f2:cc:10:8c:9e:f2:d9:62:a9:d2:81:b1:c0:4f:ad:
66:5a:5a:21:d7:ec:24:0b:15:92:56:27:db:8e:7a:e9:e0:64:
76:f0:34:fa:de:b3:ef:c3:a4:59:07:c0:40:bc:1f:2c:80:f2:
d3:0d:86:9a:bf:1d:99:9c:fc:d5:26:dd:db:1b:e6:65:59:70:
28:a4:44:e4:1c:a5:f3:bb:72:39:a8:fd:0f:76:33:0e:60:ee:
44:c8:f6:cc:46:e5:06:94:51:e3:5c:ea:a0:02:be:06:be:3a:
8b:1d:68:e7:8e:6b:2e:7b:86:c4:3f:28:48:56:b2:e6:ef:16:
c9:8b:89:32:e5:58:69:d4:f0:7e:25:7c:94:6f:f1:0d:28:c0:
ff:e6:8d:0f:c0:f6:c1:11:91:7c:c8:c4:a8:17:72:b4:7b:e0:
37:62:1b:0a:5d:66:76:71:e1:ec:cd:67:ae:5d:02:c8:46:55:
7b:d7:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:46 2026 by rpki-client