Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
File: Uev2DyIajjHTawfqptLlP20GS20.mft (raw, json)
Hash identifier: bzM4F/GgsQ5qOqN6XhdjkuiQEjzyW6kxykVU77okg10=
Subject key identifier: 8A:45:66:91:75:60:45:F7:D7:EB:AF:34:07:4A:2C:C7:C5:6D:BD:C0
Authority key identifier: 51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
Certificate issuer: /CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Certificate serial: 019D371BC817A636470FE2BFB2B56E7B38D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
Manifest number: 0359
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: MPq8iza6WIhB1o1xVKox7Pzo9Kk.roa (hash: RL0GK8JPuvsKiHzOav85apDuZHO/yene+gQ6QpASIMk=)
2: Uev2DyIajjHTawfqptLlP20GS20.crl (hash: bGjTumFj6IS1yNal+3NItbxo5gUsmAbNHv4hbJNzcOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c8:17:a6:36:47:0f:e2:bf:b2:b5:6e:7b:38:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ebf60f221a8e31d36b07eaa6d2e53f6d064b6d
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=8a456691756045f7d7ebaf34074a2cc7c56dbdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:ec:e2:6f:e0:4d:65:16:2d:33:a2:a9:3a:
ed:eb:d5:95:12:80:a1:90:e6:72:a0:0d:55:e7:21:
55:24:07:ed:c3:99:f0:3b:f8:ae:52:e3:83:0f:7a:
57:2b:12:77:81:88:7f:25:d4:d9:7f:9a:ae:9a:de:
18:46:4a:5e:c3:6d:16:92:04:93:6b:8c:8e:32:42:
5e:d3:b7:21:89:ef:1a:2f:28:57:24:d8:e4:af:e3:
14:85:4d:ca:d1:29:3c:ac:e0:17:5d:5d:04:df:6b:
10:ea:05:92:f6:88:19:80:10:92:8c:13:cf:cb:be:
6f:dc:2d:64:90:c9:7a:b2:25:c1:07:5e:f7:c0:d2:
f1:de:c9:3b:9c:bf:8d:55:fc:90:91:55:c0:0f:4e:
7f:7e:9e:47:a9:78:f9:f7:66:3e:7d:99:ac:dd:a6:
05:80:43:28:9d:14:b9:bd:68:d8:ab:e2:d6:14:40:
23:e7:c9:27:c5:81:d7:c7:65:fa:62:cd:09:86:ff:
5d:1d:33:23:40:de:c9:8b:08:bf:b0:ff:9d:6f:6a:
57:6b:03:34:e8:79:fe:d0:91:1a:a3:43:8c:58:d3:
a3:38:42:0d:36:91:ff:92:d7:0c:0c:b0:46:4a:13:
65:8c:36:39:cb:b8:68:e6:03:87:6a:75:f1:ee:4b:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:66:91:75:60:45:F7:D7:EB:AF:34:07:4A:2C:C7:C5:6D:BD:C0
X509v3 Authority Key Identifier:
keyid:51:EB:F6:0F:22:1A:8E:31:D3:6B:07:EA:A6:D2:E5:3F:6D:06:4B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uev2DyIajjHTawfqptLlP20GS20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cae18-5967-4c68-b09b-77c70365741f/1/Uev2DyIajjHTawfqptLlP20GS20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8f:ef:46:ae:fe:66:d0:6d:66:0d:ce:67:30:32:8d:03:23:
79:39:d6:ff:70:fc:b8:a3:cd:02:e2:0a:9d:03:0b:f4:9c:8f:
d3:49:dd:c5:51:c4:ce:8c:fa:68:86:01:cd:08:86:3b:3d:b5:
1c:46:09:e7:dd:ff:e3:2c:d9:65:6a:9a:41:13:6e:fd:8b:4e:
9b:94:83:66:8f:44:51:35:67:c5:26:7c:e3:dc:a3:47:a4:20:
2e:8b:97:5c:a7:8a:0e:01:55:0a:40:3b:29:e2:d7:3f:47:b8:
56:32:f9:13:1c:8f:a4:56:e6:8e:96:9c:c6:a0:4c:59:6f:37:
a8:c2:67:bc:81:43:0a:91:d5:01:86:a4:b9:e4:87:d6:09:fb:
c7:36:dd:43:a7:ab:01:bf:6b:1c:e7:dd:a0:42:d2:b9:36:0d:
b1:44:d6:14:02:ab:66:9e:bd:64:35:a0:1f:a4:4a:fc:82:bf:
bc:ae:9e:c7:4d:15:fd:43:86:7f:32:95:35:53:97:5e:28:d7:
70:d3:54:f2:2a:6c:f3:a2:7a:f9:77:61:2a:47:ab:d8:6b:d5:
dd:eb:03:e6:ef:af:90:ad:36:86:2e:49:82:c6:fb:fe:e6:96:
4c:14:a8:fa:1e:21:92:1e:06:08:33:99:e1:44:eb:a3:69:2a:
71:16:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client