Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier: 3av3+r9Sy6UEMSNxFnA46ufCOkGPFew+ng2VTEdtz3o=
Subject key identifier: 38:87:A6:4C:1A:87:A9:0D:84:99:D4:9A:EC:C3:E0:23:5D:49:6A:32
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 019DA45376697E05CEBFA58D51F99243BEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number: 1858
Signing time: Sun 19 Apr 2026 06:00:26 +0000
Manifest this update: Sun 19 Apr 2026 06:00:26 +0000
Manifest next update: Mon 20 Apr 2026 06:00:26 +0000
Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: doxMWDMRMwd5kJsk60VVakK1so7u+SMMIQgm4Nt/Yb0=)
2: ecFOCtyMPZjujJaE-20dAfii9DM.roa (hash: 2c3Yb3DHYLd5Kr4mOCYbpGtoKCki3dzbhWvRjPGqV24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:76:69:7e:05:ce:bf:a5:8d:51:f9:92:43:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Apr 19 06:00:26 2026 GMT
Not After : Apr 20 06:00:26 2026 GMT
Subject: CN=3887a64c1a87a90d8499d49aecc3e0235d496a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:e6:ed:df:8d:9e:b8:31:99:7c:c9:24:79:
db:96:76:54:2a:24:a8:c5:d4:75:51:ed:b1:77:fc:
42:71:2d:fe:5e:ad:c5:ec:ee:90:5f:44:4e:f3:f9:
4c:fa:d3:c5:cf:96:63:2a:ad:1a:7d:58:bd:c9:4a:
7b:05:8e:43:88:07:1b:b1:44:cd:49:d6:72:77:f9:
73:92:ea:ae:f5:ec:d4:b8:b5:f1:93:13:9b:80:00:
e9:9d:d9:ef:12:83:30:ac:a5:e8:c7:3b:88:15:c8:
13:e6:f8:75:ef:fe:a2:6e:30:73:76:5b:a4:ee:5c:
b6:54:73:03:ee:7c:01:fb:c9:30:0e:6e:f5:ba:7a:
5c:45:96:94:ea:81:4f:5b:67:f6:8f:03:ae:78:fe:
de:0a:06:40:a0:66:34:a7:c4:10:00:51:b6:ed:18:
0f:ea:23:2c:e2:f0:da:a7:c1:bf:cc:c2:9e:b0:c7:
13:bd:b7:84:ac:11:d3:ee:d0:af:43:36:c6:e6:e6:
03:1f:4c:31:d6:0e:d7:67:b0:ed:2f:ab:03:e3:10:
70:ec:56:59:e8:d4:7d:a8:1f:f1:d2:8a:df:7a:55:
2d:7c:3f:65:a5:e4:ee:8f:3c:15:7a:c9:37:c5:dd:
7d:79:bf:f3:3e:dc:2a:e4:1c:7f:6d:91:83:92:9b:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:A6:4C:1A:87:A9:0D:84:99:D4:9A:EC:C3:E0:23:5D:49:6A:32
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ac:1c:7d:ee:c9:d2:ae:eb:0c:8d:3b:92:d6:86:08:ff:95:
2f:29:7d:19:1a:a7:f5:03:67:cb:d9:92:5b:1d:0a:84:d6:5b:
75:c4:44:e6:10:f0:a1:43:0f:aa:fa:0f:39:09:54:5e:9d:79:
2b:d9:12:8c:85:09:fc:37:b6:c7:df:75:72:08:8e:54:4c:03:
39:9e:7b:a7:00:f5:43:91:74:14:f8:fd:79:22:d5:bf:bb:f0:
96:aa:53:55:c5:96:2f:60:d0:5b:c9:dd:1b:0b:ed:d1:68:16:
fc:f2:5e:82:f4:d0:6c:06:d7:99:0d:03:e4:76:50:94:d2:11:
4c:50:01:d2:38:d7:b7:12:85:3b:ba:c9:45:05:c1:ac:78:1d:
5b:fa:8a:94:fa:34:37:0a:2f:de:69:92:98:99:0d:17:ae:11:
9c:53:fb:e0:ba:63:04:86:9b:8f:c1:9f:9f:75:ef:51:c6:8a:
9e:6d:82:6f:33:ca:91:1b:f6:f1:96:6d:94:f9:5d:a9:00:35:
a0:93:b5:fb:58:0c:1b:08:65:6c:53:77:66:d5:e9:9f:24:ca:
39:2f:47:7b:ad:a8:07:3c:18:c1:f1:6c:38:37:f1:1b:2e:a2:
d4:1f:81:cf:92:3e:17:5e:79:cc:d5:2e:4d:34:2b:5c:37:13:
a3:9c:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:43 2026 by rpki-client