Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
File: UuZ47pYouTW-JXzsw_siiYOdnlw.mft (raw, json)
Hash identifier: oxWbWP/WIjfzhqN2wt10QFY5tywZU7pifu550kIA90I=
Subject key identifier: CF:8A:8B:FD:F4:AF:48:7C:04:89:23:65:97:8A:10:C9:46:FE:42:CB
Authority key identifier: 52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
Certificate issuer: /CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Certificate serial: 019D37C0BB30E94DA0062D463B723D296B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
Manifest number: 1325
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: UuZ47pYouTW-JXzsw_siiYOdnlw.crl (hash: Uaza9ozvYphCulnlEnc9GhxQV8YoR7er08WcDRgIc90=)
2: awSUblYoi0uR-Qce-vsLGT4n938.roa (hash: hHM4gOkF2eXvtJlaJJ+ugAV+qUcnK5bYGtz3UK4BoKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bb:30:e9:4d:a0:06:2d:46:3b:72:3d:29:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e678ee9628b935be257cecc3fb2289839d9e5c
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=cf8a8bfdf4af487c04892365978a10c946fe42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:e1:36:e8:57:4e:76:6c:3c:c0:34:17:fa:
38:38:5f:66:7b:3d:a4:8e:73:a8:c3:47:a5:c2:26:
8f:f7:22:38:ae:4d:5d:36:12:54:a1:e5:7a:a8:d3:
80:48:b9:d6:03:15:73:95:39:a7:91:49:09:47:2e:
86:f8:ee:df:24:39:eb:1a:04:6e:ad:19:09:29:5d:
94:3e:f9:fc:b1:7a:c7:d3:aa:a7:11:9e:89:54:b9:
30:a2:80:e3:c5:a6:e2:bd:8c:55:a9:c5:fa:b2:45:
03:aa:b7:02:fe:7d:08:1e:24:06:cd:40:41:b5:7b:
c0:11:37:19:51:0c:f9:72:b3:c6:e9:9d:19:5e:3b:
bd:cc:81:13:70:4c:97:8e:27:1e:4a:52:43:ad:16:
c4:c7:66:5a:14:81:45:26:f4:e6:6f:6d:12:ec:49:
40:83:b6:03:ee:88:d9:52:a6:ef:04:35:14:dc:24:
b8:46:cf:e8:09:bd:7c:d1:be:c9:22:4e:53:8c:52:
2c:d5:e6:20:46:ec:6c:5d:a0:fc:be:fb:c8:f4:6e:
68:9d:cf:5f:42:29:b2:9e:04:27:c9:14:bf:c9:10:
3b:9a:2d:01:e5:d3:38:53:04:4f:95:13:83:1d:79:
dc:00:32:cb:dc:7a:1e:9b:1f:db:ad:30:d7:81:c4:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:8B:FD:F4:AF:48:7C:04:89:23:65:97:8A:10:C9:46:FE:42:CB
X509v3 Authority Key Identifier:
keyid:52:E6:78:EE:96:28:B9:35:BE:25:7C:EC:C3:FB:22:89:83:9D:9E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuZ47pYouTW-JXzsw_siiYOdnlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6cb38c-dd05-4ae8-a8b1-4e97ed4e4ed6/1/UuZ47pYouTW-JXzsw_siiYOdnlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:df:c0:6c:fb:71:6e:e9:01:28:de:85:e7:85:08:43:f8:94:
13:a9:28:99:71:e8:99:f9:3c:18:36:67:dd:52:b2:4f:17:6d:
e3:87:00:4a:c3:9b:c0:02:86:42:e2:c9:6e:bf:a0:f4:d8:8b:
76:95:40:7b:7d:f1:75:bb:5d:e2:d7:7a:27:39:31:e1:77:b3:
b2:75:cd:19:49:27:f9:24:b9:4a:9f:8c:fa:f4:52:ed:84:12:
cd:fd:f0:f3:4b:4e:55:6a:4f:bd:c8:58:fc:1f:a4:da:20:de:
77:4a:c1:0b:b4:6e:35:0f:6c:0e:d2:4d:05:51:81:d1:ea:8a:
9a:cd:45:e3:26:d2:65:52:7e:d8:31:64:3b:c0:75:22:cc:90:
b1:64:31:04:12:80:57:71:1c:ea:a7:d1:9f:da:d9:c5:70:bb:
49:40:ef:e4:b9:aa:4b:92:39:10:00:8a:a9:71:5c:3e:52:37:
a2:a4:63:d4:f1:06:c9:79:33:ad:80:c5:4b:ed:6e:23:26:76:
b4:80:85:d5:70:68:63:bf:7a:b1:0f:60:70:a2:7e:eb:f4:bb:
d3:9b:f5:ee:26:b6:3e:2f:52:ae:dd:6f:0a:ad:77:3c:f5:6a:
d2:69:f7:0a:08:1e:e7:b1:bb:b9:e1:94:af:0e:5b:24:b4:15:
8c:b0:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:22 2026 by rpki-client