Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: qlV1d5SZXi++chR81FjkdpqIHGqByHljLhbiM3otFtQ=
Subject key identifier: B5:5E:EE:4C:80:D7:A3:4D:48:EF:F3:18:4E:B8:BE:B0:51:71:86:C4
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019D390A1F03373DB5B7A5BBA1C37D4701D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 13D6
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: wZU/J0eo7Tyk8zF3c4hrLwtoufK1c1gV8SgWLetBFF4=)
2: b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa (hash: v9RBu20odxkvsGZtyEDAzqjRkkYtJXPNlrRBy/h0EkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1f:03:37:3d:b5:b7:a5:bb:a1:c3:7d:47:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=b55eee4c80d7a34d48eff3184eb8beb0517186c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:af:5c:91:e9:98:71:21:c2:71:0c:44:20:
83:9a:12:f3:09:44:27:ab:6f:8f:2e:58:94:e5:fc:
8e:8d:6a:ac:82:f2:66:5d:98:ca:11:f8:5e:16:d6:
3f:03:ad:38:a3:e4:d7:cf:7a:60:b4:b1:0b:30:bf:
d8:bd:5b:69:1a:15:35:58:a9:17:d6:ee:a4:1a:d2:
02:1b:a2:87:27:83:5e:3f:6c:32:fe:cd:8b:a2:39:
7c:d5:a2:79:10:6b:69:3c:f0:86:a5:49:71:d9:d1:
34:da:0c:62:ab:fc:31:fc:bb:13:78:9b:54:9f:e5:
b1:35:2e:34:db:7d:9a:f9:46:89:7e:89:aa:82:10:
06:4b:dc:11:d7:1c:b1:47:7e:28:f0:42:eb:f6:ed:
f3:7a:51:ec:00:d3:fb:06:c3:e4:8f:d4:d4:1a:db:
a9:4b:4b:a5:fc:18:d3:01:4e:70:15:a4:30:fa:9a:
9e:a8:d6:55:1f:cc:de:2d:77:17:33:3e:04:95:23:
d0:57:0b:e1:eb:7f:0d:c1:59:01:37:22:b5:a6:04:
30:da:d0:cb:dd:89:30:cf:3f:c1:c7:15:d0:a4:2e:
db:d5:f2:26:65:b6:e1:86:04:6f:0b:15:9e:90:e7:
d9:4a:77:2a:2b:fe:1b:24:94:a3:57:a6:fc:a2:b2:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5E:EE:4C:80:D7:A3:4D:48:EF:F3:18:4E:B8:BE:B0:51:71:86:C4
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:20:68:81:14:b9:c0:5e:11:c0:16:c8:8b:90:2c:ff:e9:5f:
a0:50:ee:fe:d5:1b:fb:99:70:c8:c8:32:50:9c:25:09:40:94:
c2:07:0d:95:c6:68:97:c3:b0:b0:66:db:4f:db:6a:38:c5:76:
ba:42:48:45:41:0f:1e:1a:e6:3c:cf:32:61:d9:ec:8a:c9:fd:
07:40:30:52:43:1e:a7:bc:0e:f2:dd:74:bc:a2:29:06:d0:0a:
b3:4a:5c:24:01:0a:c7:66:d7:38:b0:c1:f5:a8:c1:0e:e1:57:
1f:c1:b3:a1:a1:ef:51:63:36:59:88:35:ae:d0:72:a7:c4:d1:
2a:06:1d:9c:f8:2a:8b:1b:b5:4d:c6:2c:34:47:e7:fa:1b:81:
0a:bd:7b:f8:bb:aa:26:cb:7e:fa:09:c0:b0:47:39:b1:a1:83:
3e:bc:9e:0d:5d:9c:e7:9a:73:42:88:cb:11:d7:95:95:56:cc:
13:8d:80:0c:f4:b4:d9:08:83:ae:f6:4e:69:81:7b:e0:2a:9a:
57:5e:53:e2:f6:a3:00:04:07:26:1a:d6:e8:df:01:c3:b9:70:
f4:64:c2:c5:d4:48:13:ef:fb:d3:ba:82:ea:2f:50:b0:82:2a:
73:f6:37:11:19:16:7e:d1:ae:fa:ff:bc:b8:3f:02:b6:75:77:
10:54:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:13 2026 by rpki-client