Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
File: uKUWv-ySscjHVz_4hNhBaA5veD8.mft (raw, json)
Hash identifier: fEXZvJmqpkSBJYJZDSlGSfnzagL7bWwzV6HmJjVd1h0=
Subject key identifier: 5D:5C:A2:BA:74:E4:A5:A7:03:1F:F8:7B:87:EB:FA:70:FD:E8:F8:6B
Authority key identifier: B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
Certificate issuer: /CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Certificate serial: 019D3A1C91611D421059A0975E224C2807F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
Manifest number: 0355
Signing time: Sun 29 Mar 2026 15:00:43 +0000
Manifest this update: Sun 29 Mar 2026 15:00:43 +0000
Manifest next update: Mon 30 Mar 2026 15:00:43 +0000
Files and hashes: 1: kkTc02amPtTlIxSek3MxXh3dx5I.roa (hash: 3304PW+xk4phx9Vfcb2WHYzghsy9uXZSyT0CrQETvuk=)
2: uKUWv-ySscjHVz_4hNhBaA5veD8.crl (hash: QL//J/6ihuB1FN/OJyqBFs0q7YpCap1tJvG+vcqQPhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:91:61:1d:42:10:59:a0:97:5e:22:4c:28:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a516bfec92b1c8c7573ff884d841680e6f783f
Validity
Not Before: Mar 29 15:00:43 2026 GMT
Not After : Mar 30 15:00:43 2026 GMT
Subject: CN=5d5ca2ba74e4a5a7031ff87b87ebfa70fde8f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:ae:04:be:34:11:91:93:7b:00:b5:8c:dd:
9f:1d:8c:6a:0e:2a:b8:f0:17:4e:16:2b:13:8e:39:
cf:21:03:ed:b4:53:4e:4e:80:30:cb:54:03:6c:b9:
62:3b:ec:45:29:f2:7d:71:e3:d8:4a:3c:b6:74:1c:
37:9f:39:f9:91:49:f5:f2:81:c2:69:3b:90:f4:36:
93:83:2f:83:7d:14:24:55:24:1f:7d:93:cb:e8:51:
fe:55:19:c9:d0:64:1a:32:0b:f8:7c:6f:c6:20:b0:
51:4e:e7:28:a1:86:1d:b7:48:13:a6:42:aa:20:67:
b8:18:4f:5b:bf:dd:d4:67:44:53:77:74:32:ce:1d:
9b:09:7a:30:48:3a:98:cc:da:b0:d4:60:22:fb:25:
6b:64:4a:9c:95:b3:a8:57:71:fc:08:d8:8a:43:30:
57:3c:41:1b:93:6e:c4:ef:cc:27:6e:04:65:2b:90:
99:86:dd:cf:27:43:06:e9:2f:26:11:f4:c4:98:73:
ad:18:52:45:d0:41:2c:b4:82:ed:db:e2:72:67:6f:
2f:c9:b4:af:85:94:75:63:df:f9:1b:f0:69:bc:c3:
52:14:c7:99:9c:35:e9:71:0d:5f:cd:03:6f:09:64:
e3:31:32:7b:74:18:45:2e:01:01:4c:b8:90:ed:8a:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:A2:BA:74:E4:A5:A7:03:1F:F8:7B:87:EB:FA:70:FD:E8:F8:6B
X509v3 Authority Key Identifier:
keyid:B8:A5:16:BF:EC:92:B1:C8:C7:57:3F:F8:84:D8:41:68:0E:6F:78:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uKUWv-ySscjHVz_4hNhBaA5veD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5fbc20-1367-4d64-ae05-e15339f772c5/1/uKUWv-ySscjHVz_4hNhBaA5veD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:06:bd:19:7c:5a:e1:95:e6:df:23:b6:ad:ba:d4:80:67:
44:23:b0:51:96:47:a7:b5:5c:59:19:fc:b7:7f:a3:bd:e9:e3:
d0:7c:4f:0b:c8:e3:b1:d4:2f:d3:6c:81:57:89:5e:d1:0f:15:
c2:e3:97:98:6b:0d:e0:e0:45:0b:4c:ba:c8:b4:26:89:a6:21:
d7:05:6f:a6:e6:65:78:ad:0e:c3:92:03:66:b0:0f:1c:a1:66:
a4:41:b8:04:ba:47:c2:cd:00:42:bc:88:c5:19:1b:cf:62:e1:
44:d4:49:0b:04:6d:73:20:6b:73:80:91:06:a1:25:e3:f9:ba:
8d:43:b8:ff:33:7e:e4:07:60:86:2a:cf:93:fa:de:8b:9e:63:
03:0a:61:4d:6c:d3:e6:25:33:89:ff:ba:01:6b:58:71:53:98:
10:91:b1:33:4d:4e:8c:dc:f5:b4:42:ce:03:15:6b:ce:fc:37:
4e:37:09:a4:de:19:da:99:5d:e6:91:5f:6c:01:53:8e:43:02:
c6:a5:4c:71:37:74:73:25:72:7a:39:13:eb:9f:19:1f:47:6a:
de:c2:53:1e:58:66:08:34:80:91:09:60:f6:a6:27:4f:91:56:
7f:9e:01:66:60:fc:30:92:bb:3b:d0:09:50:1a:cc:f0:de:d4:
f1:0a:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:01 2026 by rpki-client