Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
File: UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft (raw, json)
Hash identifier: JJWhIGU69Pvyx3htX7I8QgjGmREImg5P+trQTFa+ruM=
Subject key identifier: 1D:CC:1E:62:C3:18:E4:C8:0A:12:A8:02:79:70:53:F7:19:AA:0C:4B
Authority key identifier: 52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94
Certificate issuer: /CN=52f4897f7a873f47fa5352a1cdfc903d23263894
Certificate serial: 019D3941554C21C702DC3E9A42B6838C0F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
Manifest number: 24
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl (hash: KO5L/GpqDMhUOt06uLs2Bm0mCGJZx7gvEV7D8s9mwys=)
2: XbkH5_i2k4jHzcNh6FE4UyKwysc.roa (hash: 4o2UxH6bGJou1LD39yY2Re5P0lbU2Modup85oP1m1j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:55:4c:21:c7:02:dc:3e:9a:42:b6:83:8c:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f4897f7a873f47fa5352a1cdfc903d23263894
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=1dcc1e62c318e4c80a12a802797053f719aa0c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9b:9a:4c:27:e2:d6:b6:92:24:99:87:b0:cb:
e9:58:25:50:b2:1d:28:c8:d2:7c:11:39:3c:ba:a8:
2b:f1:f9:d6:fb:23:d7:ca:2d:44:57:f6:40:e0:67:
76:b6:af:3b:a6:7e:b8:0b:48:87:10:9b:b5:f8:62:
ea:ae:b0:e0:f4:b3:3d:64:db:5a:ab:a1:69:9f:e8:
ed:38:c9:62:e8:60:7c:25:46:c8:1e:2f:ce:8d:22:
f4:99:ea:c7:45:54:da:02:36:bd:56:56:60:1e:89:
41:7e:03:cb:c2:13:7c:fd:10:59:c6:a8:86:fb:52:
69:ec:4b:6d:7f:1f:1e:6a:d9:60:8d:1a:6c:0f:56:
eb:57:d7:a3:53:b9:96:3c:75:77:ab:7a:91:a3:72:
0b:c1:18:4e:7b:07:64:b8:e2:8e:64:77:cc:e7:6e:
e1:d3:27:73:f7:d7:14:5c:53:43:8e:55:12:99:26:
c5:8a:d6:42:c1:d2:ef:90:21:0e:84:7b:98:5e:b1:
26:9c:16:81:cb:93:dc:23:cd:b2:79:95:85:9c:3c:
38:44:00:ca:e7:ed:0a:d7:e7:15:c8:44:d3:cb:b3:
f8:01:85:f0:75:51:2a:44:2a:16:d1:cf:43:1a:48:
9a:7f:a1:0f:06:e5:1f:76:1c:61:f3:60:39:47:97:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:1E:62:C3:18:E4:C8:0A:12:A8:02:79:70:53:F7:19:AA:0C:4B
X509v3 Authority Key Identifier:
keyid:52:F4:89:7F:7A:87:3F:47:FA:53:52:A1:CD:FC:90:3D:23:26:38:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/960ddf-2c00-4b52-ab43-25fd7429b26e/1/UvSJf3qHP0f6U1KhzfyQPSMmOJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:d5:8a:d3:e2:cc:f0:ad:e2:56:97:73:96:fa:1f:c0:25:
26:5c:13:54:a4:6a:05:b8:64:f8:47:6b:a9:48:e4:4c:03:0d:
d3:36:6a:dc:ea:ca:4e:18:4c:11:94:69:10:a7:b0:41:72:79:
4f:b1:e3:b1:9d:91:71:bf:eb:9c:66:f5:99:9f:a2:b0:e8:19:
86:c4:25:a9:91:7f:9e:3a:0c:b9:0e:ae:f6:62:3a:03:6f:72:
65:aa:0c:17:85:3c:9f:39:a1:56:4c:f0:32:06:e1:d7:62:d7:
d3:12:37:e1:12:d5:e5:75:01:e9:d2:86:49:98:34:34:31:2f:
66:d0:9a:1a:0f:02:51:7b:a0:e5:4f:97:e1:a6:27:f5:de:b7:
fa:c3:2c:c4:a5:76:fe:d9:bb:49:d3:c5:88:84:78:8c:8a:f8:
aa:3c:0a:95:c8:bc:da:88:88:11:b7:c0:81:b1:f6:6f:29:cd:
a2:14:e2:68:ce:fc:bd:e1:02:68:62:92:0a:75:e0:66:11:26:
43:8d:74:9b:3c:cc:d9:b9:69:6d:1f:40:f4:29:5f:14:12:5a:
68:7f:ce:08:10:d9:1c:71:bb:d1:1e:6d:ab:46:54:d2:91:09:
66:29:6f:c8:5c:d6:78:2b:25:5d:2c:6e:31:30:8d:24:6a:4b:
d9:00:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:46 2026 by rpki-client