Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier: +PxUVDny+5Eq5bCOE02EsqPT73Oh7Dcnz5/J8JEirOc=
Subject key identifier: C2:87:EA:00:C0:7A:3F:58:15:43:B9:DA:82:FD:1A:F9:C9:61:E6:C8
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial: 019D378941B02B0521741AC7A2ADEF979376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number: 0936
Signing time: Sun 29 Mar 2026 03:00:35 +0000
Manifest this update: Sun 29 Mar 2026 03:00:35 +0000
Manifest next update: Mon 30 Mar 2026 03:00:35 +0000
Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: fhR/gBH/n/sbWTLkOZDbw/OekaNO+t9sXmeGNMBv+G8=)
2: zeTmjM1efMeaIVBsxyvvNq4AsaE.roa (hash: 59k70zw01dCfn2bvYSfvqkTPjOjJ1wFS22WS6baIDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:41:b0:2b:05:21:74:1a:c7:a2:ad:ef:97:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
Validity
Not Before: Mar 29 03:00:35 2026 GMT
Not After : Mar 30 03:00:35 2026 GMT
Subject: CN=c287ea00c07a3f581543b9da82fd1af9c961e6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:cf:d3:43:c5:45:e7:d5:76:cb:48:92:96:
c4:74:ce:7f:bf:f0:be:42:f6:d3:9b:a8:89:e9:17:
80:fc:20:84:43:af:5f:81:e6:98:a2:54:5c:04:b1:
53:8d:67:0e:05:77:8b:df:34:af:13:a8:98:44:94:
00:1b:ba:0c:62:0f:47:bd:2f:95:f1:28:d5:80:2d:
7f:9a:27:72:d5:b3:60:c2:ca:63:cf:9b:c2:20:1c:
fc:8a:bc:7f:66:16:33:d9:dd:bf:e2:d9:6e:b5:71:
f5:20:b4:da:f8:f0:8f:8f:a7:e5:3e:64:ac:9e:b6:
82:87:4a:a0:04:28:c9:cc:6a:50:94:ff:e8:f7:f0:
45:e9:12:5f:a5:b4:77:97:10:37:82:b7:da:5f:41:
99:a8:b7:47:66:16:08:7e:f1:53:2e:12:ee:58:6e:
61:6c:99:45:45:ff:71:2a:38:8f:a1:74:59:90:15:
aa:b5:0d:46:e5:84:d9:c2:d3:89:7b:63:f5:cd:a1:
c1:ea:32:44:58:86:a9:80:95:e0:2a:d7:39:df:e4:
65:37:a0:b3:4f:6d:c1:1a:9e:1e:a3:a1:12:85:52:
25:c4:9b:22:ef:24:1e:35:f5:7d:58:62:1e:73:9a:
bd:e3:a9:17:af:36:ad:4e:02:9a:da:93:a6:a6:e0:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:EA:00:C0:7A:3F:58:15:43:B9:DA:82:FD:1A:F9:C9:61:E6:C8
X509v3 Authority Key Identifier:
keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1b:90:43:73:fe:41:bb:03:1d:d1:11:4f:1c:3a:b0:53:54:
2d:d6:fa:45:b7:47:8e:81:f9:23:85:7b:d5:a8:38:e7:73:6d:
c1:42:48:11:87:2f:56:bb:bc:28:b9:95:56:de:05:e0:2c:31:
33:9b:b1:e4:73:4a:3b:ac:6c:9d:90:75:50:d0:5b:75:8f:f8:
d5:98:58:fc:96:3e:db:74:d9:21:37:03:8e:43:a9:f3:f2:f9:
c1:98:2f:32:fa:c3:57:91:2b:1c:b4:f6:1f:c9:93:02:53:13:
3b:f6:da:88:c5:9b:ca:ab:12:3d:47:f0:3b:2e:97:56:fe:fc:
df:46:c1:44:7c:c0:4e:69:9e:bb:62:a0:19:33:59:b6:a5:ef:
1e:92:e3:91:87:a0:2e:d3:96:c1:6a:44:3b:70:e7:0e:80:42:
e9:74:1f:36:e6:eb:12:b4:75:00:14:94:51:72:90:2b:27:d7:
e5:a7:4a:b4:42:02:f0:89:78:70:17:bf:9a:84:4c:7b:67:c3:
0f:00:7b:de:25:77:97:61:ab:5d:2f:5f:21:a2:08:16:f8:9b:
95:c1:23:49:c6:2e:d3:9b:90:55:40:43:7c:12:fc:45:1d:8b:
5c:3b:df:0a:1f:a8:58:22:dc:57:10:8d:25:a2:82:37:09:6c:
60:dd:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client