Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: mdnjPq5jPnLUclTAqkZh6VXrs3KjZF0CZcnaMlcXinw=
Subject key identifier: 9C:5D:37:0C:E7:D2:BD:70:3C:AD:C0:00:CE:AF:46:E2:FE:A4:2A:67
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019D39415E8C1DB2F7F53B299FBAE4513D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: B6O7_d7R3UXXpRTsl6AAJWhjXe4.roa (hash: t/j281gNgiB9Sq9gQq9hfuM5gVj9+dvI5Rbkgb3tQsY=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: fmQ+KHAjwyeh+zkHIVpqKncaE1lYdNUtqDVqRhi+YHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5e:8c:1d:b2:f7:f5:3b:29:9f:ba:e4:51:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=9c5d370ce7d2bd703cadc000ceaf46e2fea42a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:60:ec:c9:2c:56:30:6b:b2:a7:9a:94:65:
e4:2a:a8:f5:6e:52:6b:22:a1:55:cd:69:ad:6b:94:
bb:e3:ad:9c:1b:8d:ca:80:e6:ac:b8:ee:eb:f2:82:
4d:e6:3a:31:a0:90:33:2d:8a:16:bc:2b:04:d7:76:
04:01:6b:12:eb:50:5d:de:5a:76:dd:f6:ed:93:25:
b2:99:bf:7d:62:be:dd:15:f5:a4:19:13:9b:71:37:
d2:4a:ed:f0:e8:8e:6f:fc:ca:17:40:fd:01:78:fe:
de:8c:64:2a:31:14:a6:32:83:f2:03:ce:5c:cd:eb:
8b:c1:05:ab:86:8c:90:3d:ca:7a:2c:30:ab:7f:b2:
7e:f7:66:b4:a6:fe:f6:20:c6:f4:df:83:d5:75:13:
30:b6:d5:95:18:3c:5f:75:78:b6:ea:47:d1:d0:3d:
0a:3d:81:11:4c:ca:3e:d2:ef:88:e9:51:69:69:59:
6a:ba:7e:26:96:cc:47:42:47:da:e0:ff:4b:74:be:
81:0a:01:92:a3:bb:99:1d:a4:d1:55:9d:50:db:66:
53:34:86:cc:24:af:97:4c:f1:21:f6:f8:54:8d:31:
b8:c5:28:9f:9a:13:b1:57:f3:8b:ad:8b:76:ba:08:
44:1e:cb:3f:7d:a0:6c:21:1c:b5:c3:8d:d3:26:20:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5D:37:0C:E7:D2:BD:70:3C:AD:C0:00:CE:AF:46:E2:FE:A4:2A:67
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:00:90:8b:e8:2a:b5:1f:bb:2c:f8:d4:87:2d:3d:10:d9:
29:fb:3f:85:85:2d:c5:98:a7:ad:05:ce:f1:c0:8d:b9:9d:c8:
ae:3a:b1:e0:b5:f0:3e:37:79:07:57:88:40:85:81:79:22:84:
63:ad:77:25:19:9e:b0:08:0e:c0:03:48:9b:de:b5:33:0d:1a:
e1:00:c5:32:d4:fa:76:8e:6d:af:4e:19:81:53:13:a7:7e:b2:
71:72:e5:e9:04:b1:ca:a3:f5:3b:85:f4:ef:f1:71:65:fa:54:
e0:c7:c3:ae:6e:e1:1f:d4:18:72:21:21:42:34:46:27:34:4f:
2c:41:22:19:3d:9d:ba:85:5c:86:8d:7b:9f:89:ee:54:34:e2:
9a:d7:89:bd:b2:46:f7:2b:c3:f4:bc:80:a2:4f:a4:c6:f6:be:
f4:ff:68:09:cf:d2:93:f4:98:47:b3:da:99:7d:76:12:c0:13:
33:d6:5e:0f:f1:66:2b:90:af:b0:b6:13:02:c5:e7:35:b3:79:
96:20:42:1f:33:ca:2a:43:8a:ef:ba:60:fd:12:e7:9e:65:88:
96:48:93:49:08:19:f9:5f:0c:fd:66:81:58:6e:b7:54:7f:89:
9f:14:96:a8:77:4a:01:1e:42:e5:c8:48:7e:0a:ee:9a:04:51:
08:cb:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:05 2026 by rpki-client