Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: 0kSYQDt07orVaeR18Gz/xMESSRCSEsbNTDANfCazhGc=
Subject key identifier: 4E:1A:50:D5:13:F9:8D:AC:46:A6:BE:29:04:38:7C:F1:E7:0B:C5:30
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019D389C46D01D34F9CD13C4544FF6FE3370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0CF2
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: c17ujbVUMYCwGnyQ1yTg9KqB+pECqAH3J111GFV44O0=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:46:d0:1d:34:f9:cd:13:c4:54:4f:f6:fe:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=4e1a50d513f98dac46a6be2904387cf1e70bc530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:3f:91:f0:e6:62:26:c7:12:48:34:09:ea:
e1:41:ce:36:3e:ce:56:45:74:27:87:ff:42:7d:74:
be:57:6c:fd:1d:54:02:c1:b6:dc:dd:bd:56:1f:e5:
17:0e:46:0c:f3:3c:85:d9:f4:0e:70:ec:53:2c:2e:
ff:b2:4a:0d:31:4d:7c:8b:24:52:7c:b6:41:7d:60:
ff:92:22:8d:d5:9f:58:aa:f0:89:66:75:85:a6:e2:
25:35:57:53:d2:09:3d:02:69:be:f4:fc:15:14:26:
67:e2:9a:48:83:f7:9a:f5:57:d7:15:56:33:8c:c7:
fb:3e:c7:36:ff:24:4a:f7:ef:69:51:fd:da:e2:82:
c8:db:4d:d8:f6:15:d2:00:da:a0:5b:f3:47:4d:d2:
93:b8:1a:fd:2b:f6:a1:07:3a:28:fe:a3:89:2b:2c:
27:ae:79:87:c1:c7:67:0e:b4:32:12:39:d2:ba:9b:
48:75:5c:59:fe:e5:01:d7:68:2e:fa:a2:48:8a:fd:
36:09:a4:a2:c4:21:35:40:96:68:93:63:71:97:ec:
39:61:13:3d:8c:3a:dd:69:ea:68:38:58:dd:75:b0:
00:49:6a:8e:1a:f9:7b:96:38:8b:94:2e:1a:bc:c5:
16:33:5f:8f:44:d4:e2:2f:44:21:1c:28:5e:4c:79:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1A:50:D5:13:F9:8D:AC:46:A6:BE:29:04:38:7C:F1:E7:0B:C5:30
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c9:00:8e:2a:3d:04:0a:64:28:76:c2:d1:d0:6b:90:7a:e8:
4e:f8:0a:b0:b8:9b:64:51:34:9c:76:36:06:1d:b3:93:32:1b:
6b:d5:b2:dc:5f:0c:31:c5:2c:7b:9c:86:e2:57:2c:c3:87:fa:
56:65:76:41:44:a7:84:bb:ea:ea:82:9f:b8:3d:5b:93:ea:cb:
f9:3d:2b:7c:08:6b:37:fa:ec:e5:8b:20:ee:e4:3f:24:46:57:
d9:53:b8:70:fa:7a:07:43:e7:33:b4:13:67:47:af:f7:09:0f:
75:01:42:bc:7f:dd:20:fa:14:18:a8:d5:aa:e0:92:3a:07:cb:
4c:15:1d:b5:86:f5:6b:a0:06:b4:14:53:5a:dc:5e:59:7b:0b:
f4:69:fa:9e:68:90:eb:ff:e5:38:f0:0e:19:e2:bf:c4:bc:85:
92:81:fa:99:98:11:e8:89:bb:74:4b:e9:a7:79:b3:2b:a5:88:
b5:a1:2d:f8:2b:59:be:64:53:85:f1:bf:79:f9:31:55:90:40:
7d:e8:81:8b:74:a4:ba:d3:a2:a2:90:61:51:a5:7e:16:a6:b1:
09:82:94:a9:7e:4d:46:ab:8d:92:c2:5b:ca:8d:1e:40:d1:cc:
0a:f6:d2:d3:4b:12:72:23:4e:25:fc:de:f6:ad:b6:1c:23:75:
d0:17:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:57 2026 by rpki-client