Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: OWV8VJ+xw0Ciw6RCVQhG/nvueV0dC+qV2N8pdbxhMpI=
Subject key identifier: 7D:39:46:BD:2A:27:79:3F:6C:9D:E5:AE:7F:8B:3F:E4:01:ED:23:2E
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 019D38D2F249181E7E8B28433BE694EB88D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 049F
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: 5Q7N-3fXWN3xn29Fyqm_IsIQro0.roa (hash: 5S1tBvFwi+gvAdb/PmkhPOQ/g472ZvTYAltGyhI7l3o=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: SkJinxrHyWm4uX0WgDJmGPDb0kYSOqdoEV9OwrZy/cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f2:49:18:1e:7e:8b:28:43:3b:e6:94:eb:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=7d3946bd2a27793f6c9de5ae7f8b3fe401ed232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:6f:68:35:53:75:8e:ca:74:8e:d2:9b:a4:
7f:06:82:74:2c:00:63:8d:15:19:bd:ef:f3:7e:f6:
cf:86:14:43:66:9a:9f:5a:05:f9:49:52:5d:97:e1:
fe:d1:7f:4b:fc:fd:21:78:50:85:f4:f4:db:d1:05:
95:a1:a6:c9:26:c9:17:78:90:53:90:89:9f:db:43:
5a:be:af:b8:ac:c1:b8:e1:b1:72:cc:d2:42:f3:86:
d0:ef:14:4d:af:a9:ac:ce:28:42:4a:23:80:fa:46:
96:13:1e:af:49:50:18:51:df:e6:6f:db:d8:db:19:
d5:c5:51:cd:c7:87:77:ee:05:29:2a:33:37:d2:0b:
9e:ef:c5:67:8b:b4:d9:62:5a:37:db:24:bb:ce:59:
67:3e:01:7f:ff:ea:b5:5d:98:96:83:5b:7a:ce:f2:
d2:73:93:d9:af:65:ec:05:cb:4b:47:4c:3f:e0:22:
5f:f2:8b:7c:ed:98:5b:6e:aa:68:55:4f:de:8a:34:
02:9a:bc:27:46:95:67:0e:d4:7e:6e:88:15:fb:e9:
a7:46:3c:e9:52:3e:57:bc:fb:5b:f9:8c:34:fd:7b:
3b:26:5d:de:2e:d7:17:0a:ae:69:34:0b:ed:f8:d8:
9e:ff:fb:72:ec:6d:f2:68:39:51:af:71:1c:36:ad:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:46:BD:2A:27:79:3F:6C:9D:E5:AE:7F:8B:3F:E4:01:ED:23:2E
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:86:f8:69:10:d2:eb:ea:89:08:a9:01:90:c1:fc:0b:2b:
70:b7:22:09:27:f0:c2:3e:35:07:0e:8f:0a:67:da:09:29:d8:
e8:34:87:c5:36:3d:cc:d4:26:47:11:c8:85:96:69:be:f4:72:
b3:91:dd:4d:54:e1:ec:ce:53:f2:b9:28:b2:0e:a5:f2:18:4b:
4f:08:b0:f8:f1:5a:be:ac:f0:3b:ed:0d:8e:12:c1:79:97:29:
df:00:1b:0e:20:6a:63:4b:c8:2d:ad:47:f3:c3:27:42:84:68:
19:16:85:ee:f9:1f:41:a6:87:38:3c:26:90:4a:38:1a:06:e6:
38:6e:a8:73:f0:fd:0e:e6:12:c6:7f:00:bc:62:a4:75:22:be:
f3:71:b7:9d:a6:c3:7a:ad:6e:9e:74:48:12:c4:fe:25:b2:e0:
27:14:88:f1:24:a0:ee:45:d4:7d:68:20:22:c4:a1:56:22:7c:
d4:bf:b3:c1:57:83:9b:55:9d:48:3b:6c:e7:8a:06:bc:e7:6c:
17:de:7b:58:e9:a1:6d:ad:a4:62:f1:d1:c4:94:9e:78:e4:e8:
d5:c4:0f:3e:0f:3d:ef:0a:b5:05:27:66:f1:40:4c:e2:5c:a4:
be:2a:ed:ec:fc:f4:25:08:0f:30:3f:da:b7:c7:84:7a:6e:58:
d3:40:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:44 2026 by rpki-client