Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: Pd/wmxHIkcgxS582C8J9Sp09GhILqspvVeVXiVLdEi0=
Subject key identifier: 1B:84:3D:51:E6:A8:6B:A2:93:38:A7:39:AC:C8:3C:8D:1E:51:FE:D3
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019D3909D13F65A97C1E91223CE242F35FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0F1F
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: IwllFHG1504kl4FzUKLy7fJrNGI8Kcijr7N0T+49IDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d1:3f:65:a9:7c:1e:91:22:3c:e2:42:f3:5f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=1b843d51e6a86ba29338a739acc83c8d1e51fed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:cf:3f:b8:bb:4f:ed:41:b4:38:b2:6f:97:
08:ea:5c:78:74:4d:36:bd:9b:de:4a:05:9a:8c:c7:
fe:f1:8a:2e:29:9c:4e:ac:cd:65:4a:66:92:76:ff:
f5:71:54:64:fa:d2:65:ff:62:e0:8a:dd:d6:3c:b6:
b9:48:8c:43:ac:7a:d7:97:68:53:85:bf:98:3c:ba:
21:a3:82:84:04:12:aa:12:b4:45:17:f5:3a:a3:7f:
f2:36:6e:ee:42:ef:4b:01:71:db:a3:c7:d3:fc:dd:
95:2f:f6:2a:42:0a:e3:01:47:bb:86:2e:43:a7:4d:
1e:e0:47:91:c3:d9:88:24:b4:4d:10:0f:0f:92:41:
13:9e:52:f4:b7:49:7c:d2:1d:33:8c:6a:c2:34:15:
da:e2:01:91:5e:39:60:78:4e:7f:fa:05:b4:9f:96:
6e:0d:71:4c:f6:a4:70:46:fe:f4:c9:27:79:86:10:
4f:c8:48:ee:20:4a:2c:1e:9c:ab:dd:72:fa:a4:42:
a0:f6:a7:cf:5e:88:27:2c:0c:33:46:be:cd:83:5f:
d4:98:4c:f4:07:98:b9:24:82:1c:63:b1:c6:36:8c:
4b:6a:eb:d4:1a:1b:af:5f:d9:7d:9a:40:1b:ab:fd:
b8:13:bb:38:03:ad:2d:8a:ed:d1:e8:f7:41:4c:52:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:3D:51:E6:A8:6B:A2:93:38:A7:39:AC:C8:3C:8D:1E:51:FE:D3
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:d4:ad:5b:0a:fc:6d:28:6b:5f:b1:67:97:a8:0d:02:6f:
ce:33:17:dd:3f:72:56:af:51:0b:50:e3:3a:f0:a0:03:94:5d:
a7:fd:8c:2d:ae:ec:eb:ce:fa:5c:de:c6:b9:3a:f6:70:9c:cc:
89:ce:0e:c6:94:d6:4c:bf:96:a4:40:6c:cc:59:8b:7c:0a:e3:
4f:9e:20:fa:32:45:fc:ef:bc:04:e7:3d:e8:2d:ea:3b:e9:bb:
7b:bd:ab:ce:99:33:76:2c:59:85:a7:03:f5:a9:e7:8a:a3:f9:
76:71:b5:19:4f:98:3a:86:39:d5:d1:96:b8:46:52:4a:c9:4b:
77:7d:ec:a4:12:c0:60:3e:23:bf:da:e4:43:ff:b3:55:1f:f2:
d3:f6:b8:7f:41:94:34:42:c7:a5:7a:ea:65:e2:b3:78:0f:3f:
91:e3:ac:ea:dc:fa:03:49:78:68:be:a2:2f:4d:25:47:3a:2a:
ca:e2:d4:ec:db:74:ec:d9:38:e0:65:3f:57:46:4f:29:59:8a:
0f:78:96:75:b2:54:0c:b5:3f:6f:db:88:5f:36:17:74:11:b4:
2f:bd:22:f3:e8:88:97:b0:d5:70:69:4f:50:97:a0:02:56:6e:
ad:47:d6:a8:35:8e:bf:51:e0:3f:d1:21:ff:9a:6e:a8:58:7a:
59:9a:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:40 2026 by rpki-client