Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
File: UoVvOOBRP5_qsFeMd3170GOidKo.mft (raw, json)
Hash identifier: BySg4wuIDggHlcDYMvXEAhYiThZ1mEXSHoMDzQ0Yn/Y=
Subject key identifier: 52:41:08:D8:19:87:1D:76:85:48:BF:BA:A6:0B:27:94:D8:B9:E3:4E
Authority key identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
Certificate issuer: /CN=52856f38e0513f9feab0578c777d7bd063a274aa
Certificate serial: 019D38D295097A9265B40E2C2B42B0E87E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
Manifest number: A2
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: QwFKvvopZqKlG9j4iBrrVAusGsg.roa (hash: 14iSYLqrVub3iW+aJenPS0umnDZDvuXqPyuEeqJM+DE=)
2: UoVvOOBRP5_qsFeMd3170GOidKo.crl (hash: ssSJIVMAJFB1r6hwmju5OVqSGLOecCOqYJ3x8Smm+rI=)
3: nn_JfFoGDqXnHnXClRYM8BVKfms.asa (hash: Go99gPjwQ2qP0Poq+GhGWvW0PoWn1a+y2XVSES6ZIPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:09:7a:92:65:b4:0e:2c:2b:42:b0:e8:7e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52856f38e0513f9feab0578c777d7bd063a274aa
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=524108d819871d768548bfbaa60b2794d8b9e34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:e7:50:d2:85:ec:a4:8a:9d:20:8b:ec:40:
53:b6:c3:90:7d:ee:76:e6:ca:95:06:5c:57:f8:36:
c5:d3:bc:5c:f7:43:df:e9:e5:20:46:09:e1:65:b5:
e1:74:47:c5:8d:17:10:9a:39:64:e0:3c:a6:9b:31:
07:98:62:f3:d2:98:be:59:a5:b6:fd:51:3f:c4:e0:
d6:d2:bc:6a:93:6c:46:92:02:92:d4:a8:91:eb:8e:
c2:7c:19:f3:42:1e:03:bb:b2:5f:32:49:7f:91:31:
bd:56:07:72:a7:f6:47:fe:e8:92:80:52:e6:c5:bb:
14:72:ea:cb:da:d8:b3:95:16:2e:6c:e1:d3:ba:4d:
9c:74:c8:c1:91:d5:a3:53:99:69:47:46:fc:0e:53:
5c:f0:32:00:ff:a1:9d:52:e4:1e:c8:cb:98:38:da:
07:3e:45:16:99:86:da:7d:ec:66:0a:42:37:ec:81:
ac:70:8e:75:73:00:82:e8:bf:a1:cf:af:4a:07:31:
e2:47:ed:52:36:c6:58:98:f8:80:dc:88:5a:f1:ab:
21:c3:da:84:a2:eb:48:81:01:65:01:4f:e6:1e:64:
9e:06:14:ea:e7:42:65:2b:8a:bc:50:6e:7e:33:a8:
58:b9:9c:c2:30:95:2e:74:46:22:08:b8:a7:d1:7c:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:08:D8:19:87:1D:76:85:48:BF:BA:A6:0B:27:94:D8:B9:E3:4E
X509v3 Authority Key Identifier:
keyid:52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e9:6e:08:ae:1e:5e:5f:02:60:fe:fd:9a:c2:55:6e:a9:79:
8f:82:d1:8d:38:fa:21:25:88:1b:9a:9c:69:a3:af:98:54:f2:
0f:39:aa:0d:05:25:37:ac:ab:17:28:fa:3d:64:c8:0b:2a:41:
55:70:df:25:99:33:fd:91:bf:c7:35:33:6e:9e:9b:b5:98:fd:
d5:91:b4:41:1e:75:d6:b6:38:57:a9:4e:bd:b0:a7:2f:d0:67:
f1:59:27:72:09:a2:35:b7:c9:26:8d:38:80:55:91:78:d8:83:
32:a6:4f:44:31:84:99:b4:0d:d3:fd:31:6e:8b:62:31:29:69:
dd:ff:b0:20:de:cf:de:20:93:39:dc:7b:f1:39:88:f1:90:51:
1c:f9:18:b7:30:19:a7:8a:38:95:fb:b1:ec:b1:c6:75:c7:a5:
92:f8:e2:fa:d0:6b:de:24:1e:87:e9:bb:ae:f4:ea:52:72:84:
bc:fa:f5:01:23:7b:9d:83:7c:3c:1c:b5:3c:42:98:d1:b5:99:
71:1f:9b:07:90:54:54:91:88:7b:f9:34:a3:52:94:32:0c:98:
f9:71:ba:7c:5d:96:f4:c7:15:60:15:6f:60:24:82:a9:04:db:
5a:92:44:e8:f9:f0:5d:8e:7d:da:33:9d:1a:ff:34:9b:12:ca:
33:7a:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:50 2026 by rpki-client