Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
File: UUxVK7lETAD5Ty8FlMujUvwsu7w.mft (raw, json)
Hash identifier: bNcHMFi4cQqQfcl1Au3HlhTDymLlq6pC+BwNRh/RAVY=
Subject key identifier: 5F:FF:FD:7B:1C:A2:A5:9F:7E:9C:51:AB:04:FD:81:0A:80:74:C7:61
Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Certificate serial: 019D38D2FC90DA6F8209AF832FCB7C5D3883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: CrGYIchI8IwBMeaWGahVoZEqk54.roa (hash: rZvxjkfTz0RWRMKrtuKeopQdQfgWWqYNcNjUqBs51x8=)
2: UUxVK7lETAD5Ty8FlMujUvwsu7w.crl (hash: Vzr2ZjkChAMcnYOv1Xf/PipHsdv/esBZ2YIeOr8htu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fc:90:da:6f:82:09:af:83:2f:cb:7c:5d:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=5ffffd7b1ca2a59f7e9c51ab04fd810a8074c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:66:76:c5:08:53:6e:db:be:ed:e9:17:54:
f3:17:22:d8:40:3b:c4:22:8e:54:07:20:4e:2d:f3:
66:03:aa:1e:4f:ff:02:72:42:ed:a0:3d:68:97:d3:
ac:8c:25:7d:98:98:6d:c3:2f:a1:a0:21:c1:e4:7c:
81:da:db:a1:04:a7:2c:b5:25:d4:f3:90:7a:71:7f:
56:ac:b2:dc:38:b8:f2:c4:94:e2:30:cd:da:9e:17:
15:66:c4:cb:f4:6f:61:6d:87:81:c8:e9:7b:1e:ff:
2a:4a:51:b6:6d:65:d7:da:d5:5a:4b:37:6d:5b:05:
3e:71:60:2b:62:25:fb:f3:fc:11:cc:06:dc:f0:66:
f0:be:65:62:8f:c8:d0:4b:42:40:d8:ba:52:6d:6c:
51:de:ee:2e:ed:8b:43:2e:1f:e0:6c:e5:86:18:c9:
37:88:dc:5d:c3:23:72:23:69:41:ff:ca:5f:77:b2:
9d:45:17:8f:38:84:46:ac:0c:f4:b0:85:67:d8:9d:
fe:2b:aa:7f:27:13:be:d8:c6:42:2f:04:53:2d:1e:
f7:99:45:81:e3:2a:ea:c5:98:e4:3b:a5:91:0e:ce:
7a:e1:a6:e6:4d:6d:f6:e2:12:09:c3:89:66:cd:64:
44:5f:fd:e6:da:c3:13:bd:e3:e7:c5:31:05:82:ec:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:FD:7B:1C:A2:A5:9F:7E:9C:51:AB:04:FD:81:0A:80:74:C7:61
X509v3 Authority Key Identifier:
keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:66:94:86:75:e2:10:1a:5a:6b:dd:cf:94:6e:09:0a:20:
5f:6c:05:0f:d2:29:30:75:3b:61:7b:d7:64:46:d4:f9:d9:83:
2d:5d:22:c5:29:26:10:68:9d:92:1f:17:b7:ac:dc:87:17:01:
ea:4d:29:c6:71:01:71:3e:1d:82:5f:fc:58:4f:83:82:cf:d0:
ab:b0:5d:a9:8f:da:29:0b:06:22:70:ed:82:57:36:22:ca:49:
40:01:01:25:13:19:e9:47:a6:1d:5d:b3:19:34:d8:2e:9d:c4:
27:b7:20:9c:4b:11:cb:ec:71:36:62:39:df:5e:c3:c3:e9:80:
b9:f3:5e:2f:5c:c3:a4:ce:08:74:3e:c3:de:9d:71:a1:36:9b:
42:ba:c3:a6:46:76:86:bf:18:de:8d:82:65:96:9b:e7:4b:e1:
6d:d7:25:1b:19:8a:75:74:dd:74:9a:05:66:52:51:1e:f8:44:
57:a3:65:3d:53:9b:cc:a5:02:52:25:7f:f4:da:d2:44:54:bd:
94:27:ba:73:5b:da:3e:69:25:18:8a:bc:01:91:bd:c2:03:40:
86:c8:5a:c5:94:55:e7:9d:08:b9:4a:3c:10:1e:e5:68:2a:35:
99:8b:00:42:88:51:92:82:98:bd:09:6a:61:39:c6:1a:5e:bb:
36:74:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:28 2026 by rpki-client