Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: ppF5BdlcfAj3/VX0JH1Lj82WhHjaiJUuf+LK2guRTIE=
Subject key identifier: 51:62:9D:6D:E2:FA:1D:FC:F5:A6:D2:3B:2F:28:47:2C:39:65:64:4F
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019D3752FDEE0987F80E581473DBE4FFC545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1359
Signing time: Sun 29 Mar 2026 02:01:18 +0000
Manifest this update: Sun 29 Mar 2026 02:01:18 +0000
Manifest next update: Mon 30 Mar 2026 02:01:18 +0000
Files and hashes: 1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: dkkqClZ28gOXKELC5p9IWGzq8pYXCeO3SyZ8pcJRRJ8=)
2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:fd:ee:09:87:f8:0e:58:14:73:db:e4:ff:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Mar 29 02:01:18 2026 GMT
Not After : Mar 30 02:01:18 2026 GMT
Subject: CN=51629d6de2fa1dfcf5a6d23b2f28472c3965644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:8f:2f:e0:6b:08:ca:18:fd:71:4d:0c:d3:
2c:08:50:b2:e6:a1:03:af:e5:de:05:94:80:79:9f:
64:62:88:d2:62:43:60:db:16:f3:ff:cf:72:a2:69:
18:1b:05:76:d4:02:a6:95:a3:85:a0:ad:be:0e:26:
e9:44:a5:b2:dd:a8:3d:77:39:cb:fd:cf:b2:e4:e3:
e1:94:41:e0:b8:64:ce:26:3a:0f:63:62:0f:e5:6a:
ca:c5:54:64:3b:d8:4c:58:57:04:cc:58:03:92:5b:
20:67:08:ac:32:fc:e2:34:21:2f:b8:1a:6e:8c:7e:
f8:21:5c:db:a4:bb:90:73:de:f1:f6:d2:48:e4:38:
73:3b:b4:34:ef:01:97:f9:7b:68:cb:26:92:f7:d5:
b0:24:f5:c6:1a:52:96:f8:97:11:75:52:a9:71:53:
cf:54:3e:82:da:c5:9e:4a:5c:05:10:39:68:1d:0c:
b0:cf:44:06:56:8c:a2:70:cc:d1:e3:47:a6:cc:25:
11:37:8d:1c:9a:57:2d:03:5e:c8:94:e7:be:e9:f2:
45:52:b1:76:b7:d8:4a:5c:46:9c:27:62:bf:be:ac:
da:db:83:6b:c8:6e:29:9e:d4:53:d8:71:4e:f7:b4:
4c:64:28:45:ae:bf:2e:48:55:71:61:f2:65:e6:39:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:9D:6D:E2:FA:1D:FC:F5:A6:D2:3B:2F:28:47:2C:39:65:64:4F
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8f:57:ce:fe:76:ce:15:f6:c0:10:68:af:49:4c:fc:2a:a0:
5f:0f:f3:b2:79:9f:7b:eb:26:8c:73:b3:fb:56:f4:bf:17:1f:
79:f3:bd:37:9b:d0:22:84:f1:cf:78:99:9e:13:44:d1:7b:99:
ba:14:3f:ba:ab:ec:fd:ad:04:10:9e:1e:29:11:01:c5:10:16:
7b:04:1d:4f:16:51:8f:53:c7:e5:0c:df:2f:b8:36:3e:9a:72:
e6:9f:d5:3c:bb:f6:1f:3d:d5:38:45:4c:0b:e2:d0:f1:cd:da:
ba:eb:2d:f8:cd:d7:25:79:06:26:3f:56:c4:6d:7b:94:9d:70:
d1:c8:51:fb:78:c6:dd:da:06:59:47:68:d2:f2:97:0f:91:9b:
a1:97:11:dd:0d:56:5e:03:c7:fd:8a:1b:1c:4b:1e:9a:f9:33:
14:91:86:c2:de:5c:ac:6f:80:7f:43:f8:8c:26:47:ee:1b:a5:
24:19:cd:9d:53:d8:72:a7:6f:c7:76:49:1a:42:15:e0:12:d1:
e3:03:85:49:71:95:08:d9:b4:97:76:9e:9c:15:a1:02:df:42:
39:1d:41:99:13:d2:e0:70:bc:1d:bb:8e:10:1d:da:7b:7f:52:
eb:14:52:4f:2e:c1:ce:5f:f5:4d:ed:db:cf:ea:07:16:fa:40:
00:73:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:56 2026 by rpki-client