Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: 3AhGHCtGfny4zkZirET4nAnmwDzRJwU78R2dD5+t/dk=
Subject key identifier: 5D:C1:CF:45:7D:81:11:6B:76:6C:07:AE:FA:8B:F3:CB:D7:14:51:72
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019D389C44AC17E6B54BE4C2FDD62DAED7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 0A4C
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (hash: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc=)
2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: GI6rqM4WvRszo5/jURNWLL5UEQedh3hSCcbwGGdtV34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:44:ac:17:e6:b5:4b:e4:c2:fd:d6:2d:ae:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=5dc1cf457d81116b766c07aefa8bf3cbd7145172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:2f:3d:29:e3:83:a9:68:d5:83:99:9a:55:
1f:06:38:74:af:d2:9e:1f:4a:e5:27:c5:f1:1b:f7:
85:47:bf:5e:e2:40:9a:80:bc:8d:e2:59:84:2b:20:
53:81:8a:54:d0:08:59:b0:2c:15:ca:34:5f:a6:ed:
96:fd:f2:46:a2:de:b7:09:34:46:94:08:84:05:b2:
bb:8f:b8:62:f7:79:ec:fe:6c:dd:6a:4e:8b:a5:8d:
62:71:75:9b:c6:5b:cb:4c:e8:c2:81:0f:57:c3:f7:
b4:27:03:11:13:55:fa:a6:80:15:5f:c5:8a:5d:bf:
30:60:f9:fd:dc:6d:bc:49:8a:1d:20:ee:62:df:1f:
f0:08:c3:b0:1f:e1:16:87:bf:0a:d2:c9:a8:d3:8c:
9f:da:bb:53:98:0c:d5:9c:42:4f:47:27:92:c1:49:
f2:0b:b2:77:c0:13:44:89:d5:57:c1:20:13:41:d7:
66:e8:83:0c:fd:f5:87:32:b8:8f:8c:40:9a:97:2c:
45:99:14:96:a6:e3:ac:fd:2c:ea:27:69:e7:0e:a0:
1f:7c:96:fd:cb:ee:73:a4:f1:5f:52:96:70:60:23:
76:d6:39:66:11:84:0f:1d:5c:42:18:2d:35:43:c1:
e5:e3:b3:97:d5:a5:43:cc:28:76:88:4a:5d:3e:0f:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:CF:45:7D:81:11:6B:76:6C:07:AE:FA:8B:F3:CB:D7:14:51:72
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7b:bc:fa:d9:ae:e0:a6:36:f4:36:00:29:99:9c:06:23:4b:
4e:60:3a:90:4c:f1:d3:c7:dd:60:30:0f:1f:78:b9:13:2d:8e:
13:63:9b:62:2b:d8:e8:30:7b:1d:8c:d1:b7:0b:6d:91:18:ea:
66:1e:49:2a:b0:ee:7d:ce:ae:73:f2:4f:2b:fe:30:92:cd:a8:
88:26:0b:12:0a:00:9b:5c:f1:3d:0e:34:8d:11:df:e3:54:cb:
73:0b:ca:c1:7d:84:98:f2:97:ef:00:83:93:c1:96:88:2c:18:
26:a0:a7:0d:2b:5b:2c:a4:7b:1a:89:9e:99:cd:8a:94:7c:d9:
61:a8:be:17:34:73:9f:db:0a:fa:18:6b:31:67:a1:be:3a:5d:
96:00:fe:0e:66:74:b0:8c:08:38:56:6a:5b:a3:97:0d:e4:b0:
a6:78:c5:dd:9a:1d:9c:c0:6f:cc:cc:66:bc:53:84:a9:ef:0c:
df:72:ed:dc:20:65:20:7b:2f:02:cb:19:23:c4:39:85:45:4b:
a5:e2:e1:4c:48:69:1b:5b:c9:af:48:1d:b5:53:f8:ff:88:c0:
af:16:73:8b:70:e1:7a:ff:32:30:c8:cb:13:df:23:da:37:ed:
51:06:91:12:d5:9b:8e:37:90:14:51:21:0e:67:a5:32:fd:f4:
62:65:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:01 2026 by rpki-client