Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: CpKLdC4egXKrbzikL/UxVN9tUy1NruLdyG+ddNVMKXA=
Subject key identifier: 6F:34:A4:48:72:BC:8F:90:A2:0C:F8:C0:BD:00:DD:6C:28:1E:8B:F6
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019D39AF637D1E20AFDA1FFC9DC35568E822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 17F4
Signing time: Sun 29 Mar 2026 13:01:28 +0000
Manifest this update: Sun 29 Mar 2026 13:01:28 +0000
Manifest next update: Mon 30 Mar 2026 13:01:28 +0000
Files and hashes: 1: 7AUQmk1i8qtjdruOjZMPpBTiL6c.roa (hash: q33FWL8mHM8VvfHdKdh+6eQHgq4qLKkzK579GRNQTE8=)
2: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: HgBsZ5ZTnV/ww+T/2iuoR1KoM9pS1cKuRMc1psFUfRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:63:7d:1e:20:af:da:1f:fc:9d:c3:55:68:e8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Mar 29 13:01:28 2026 GMT
Not After : Mar 30 13:01:28 2026 GMT
Subject: CN=6f34a44872bc8f90a20cf8c0bd00dd6c281e8bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:95:35:83:dc:eb:4d:bb:1d:65:3b:8e:a2:
45:45:72:dc:65:d1:6c:3f:c2:2d:b7:94:ff:23:c5:
1e:5d:e0:89:10:54:6c:17:a9:f8:d8:4f:75:c8:b1:
8e:7d:2a:59:c3:dd:08:a6:ed:f8:4d:14:ce:f9:c8:
24:59:8c:9e:85:86:bb:aa:af:28:4e:13:dc:b5:7d:
7e:70:c1:db:09:f2:6e:d7:a2:ca:99:2b:31:12:e4:
50:5e:78:f5:8d:a2:5b:d9:7b:a6:78:74:4c:a3:cc:
ac:7a:8d:18:6c:1b:4e:49:af:23:b1:37:a5:1d:06:
59:a0:47:43:a4:0b:55:df:7d:53:60:10:21:cb:70:
63:b2:97:c0:b0:90:fa:2f:51:15:01:97:66:7a:c1:
0f:fc:17:ec:a7:7d:19:74:b6:a5:9e:06:01:c1:27:
61:ed:bd:e8:b1:15:d6:31:42:45:b5:35:9e:bb:56:
8c:74:81:c6:60:4b:bc:79:e5:a9:93:f2:67:75:ec:
7d:84:4b:af:dc:08:a3:28:6f:1e:94:da:3b:9d:fc:
47:18:5f:c7:08:70:5a:7c:93:3f:87:ed:8e:7b:c9:
1d:12:c2:9d:dd:af:55:67:b6:2f:2c:81:6e:67:03:
fe:be:84:d9:d4:d1:4c:50:28:38:d9:a2:19:ff:f2:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:34:A4:48:72:BC:8F:90:A2:0C:F8:C0:BD:00:DD:6C:28:1E:8B:F6
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:23:36:ae:a4:da:76:0a:0f:be:65:32:fc:bf:5a:8e:f8:9f:
0c:8e:7e:69:a6:24:7a:00:81:83:af:6e:73:80:71:e3:9f:67:
00:02:9b:b5:45:52:81:fd:2a:ba:f3:09:90:24:b8:14:0e:34:
13:66:ab:03:26:50:eb:e2:42:46:23:76:ad:b7:0b:ad:5e:df:
7a:a7:e1:44:36:92:94:0a:ad:34:63:d7:0e:72:60:4d:f9:1b:
5b:51:54:a8:08:d3:be:0a:ce:75:a3:5c:7b:f3:86:96:96:24:
03:25:b0:0a:52:45:59:62:98:81:66:0b:64:5a:e2:8b:f1:bf:
44:dd:2b:5c:f1:6a:5b:26:1a:98:47:a4:70:b6:19:83:1a:06:
f3:37:88:a8:5c:27:58:f5:75:e6:07:20:66:42:f0:9a:62:be:
e0:6e:bc:61:23:b6:99:1b:ab:2c:31:b8:42:a0:63:f7:42:f1:
bc:e2:4f:c8:1a:9b:ea:a7:3f:47:25:d0:85:8f:8d:16:8b:bf:
f7:96:ef:0b:6a:b6:17:39:60:da:ec:d2:70:51:ef:6c:a5:27:
3c:9d:75:95:c0:fa:f6:09:db:f9:69:f6:57:69:57:1e:42:44:
79:07:65:b0:bd:23:5d:dd:57:9a:62:f5:a8:62:9d:42:61:29:
4f:4a:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:20 2026 by rpki-client