Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
File: UzYFdCt-Ei_Psq66n7ENb8pI544.mft (raw, json)
Hash identifier: YzPCxUTDlKGt54FDv6j4crvJMKe8CbwttT6olBzcnFQ=
Subject key identifier: F7:09:94:17:46:13:4F:EA:12:2D:73:4B:DD:A0:62:9F:B1:D9:4E:F1
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 019CAB3432A0A5A859735DAE5F1C37BA47F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 21:00:50 +0000
Manifest this update: Sun 01 Mar 2026 21:00:50 +0000
Manifest next update: Mon 02 Mar 2026 21:00:50 +0000
Files and hashes: 1: UzYFdCt-Ei_Psq66n7ENb8pI544.crl (hash: hhNwf1rHtDoPbZbH7tYs5Dn6lrhCP+1dqj0maxFnkfI=)
2: ecFOCtyMPZjujJaE-20dAfii9DM.roa (hash: 2c3Yb3DHYLd5Kr4mOCYbpGtoKCki3dzbhWvRjPGqV24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:32:a0:a5:a8:59:73:5d:ae:5f:1c:37:ba:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Mar 1 21:00:50 2026 GMT
Not After : Mar 2 21:00:50 2026 GMT
Subject: CN=f709941746134fea122d734bdda0629fb1d94ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:d1:5d:ac:cb:f3:fa:4f:57:7d:48:56:30:
a6:53:a2:c7:04:81:c1:83:c0:b2:9b:6d:43:2c:d7:
88:cc:d7:f3:5b:d4:ce:b2:4a:fa:64:c5:1f:a4:b3:
18:95:c6:42:41:3b:eb:1c:79:26:ed:20:a2:5a:cb:
8c:64:65:24:36:6c:b5:ef:06:08:80:15:f9:62:96:
a7:e0:b3:45:1e:2e:d5:bb:45:49:f1:d9:e9:d2:69:
ab:42:94:b9:32:fa:8f:f1:fc:94:02:e7:e0:b3:39:
3c:2a:a8:f0:f5:63:64:1e:f1:7d:11:98:3f:10:0a:
c9:4a:8a:a2:3d:08:4e:0f:14:67:02:ec:fb:70:a4:
7f:41:73:cd:84:23:91:1f:7f:8c:6a:c4:e1:38:8a:
f3:98:cb:f0:c1:c6:17:30:20:3e:50:65:ab:7a:ba:
4c:47:f2:b4:0f:05:a5:3e:51:7c:6f:ce:19:09:b5:
2e:c6:ee:9e:72:8c:d4:d2:91:83:ef:bd:29:db:45:
58:12:3e:1f:7e:bf:6f:eb:43:ad:c4:ec:22:77:6c:
1c:2a:dc:c5:45:62:52:7f:a6:30:33:b2:a3:ed:b4:
bc:e8:49:53:e3:f3:e0:58:d1:de:d9:69:c8:66:7d:
5f:57:9a:a0:4e:1d:35:8f:d5:c0:7a:a6:20:11:2e:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:94:17:46:13:4F:EA:12:2D:73:4B:DD:A0:62:9F:B1:D9:4E:F1
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:79:61:13:9b:d8:ee:59:1e:a5:24:57:19:9c:79:68:e5:
f3:3f:d0:52:e1:a4:66:e6:87:0a:fe:34:9d:7b:9e:a7:0f:94:
f4:b9:04:a7:5b:47:7f:79:bd:22:fe:68:7d:91:2f:38:09:af:
be:66:fa:68:83:f4:9e:a0:c7:3a:b5:a1:49:cd:74:85:bb:e9:
1e:75:4c:d3:ff:10:35:d2:82:49:cd:59:2c:b7:4c:e4:ea:b0:
e1:d2:5c:2b:a1:ce:29:bb:fb:de:57:5c:df:a3:6d:89:4f:a5:
56:bf:46:42:26:d1:71:c1:0e:13:1c:a4:d2:72:a0:95:2e:26:
3d:ea:97:21:2f:0e:dc:47:cd:3f:5b:36:cb:ad:62:37:d3:2e:
a1:82:97:6e:3f:3b:4c:94:e7:e4:26:d7:30:cd:9c:ec:f7:fe:
e4:2a:90:a4:34:82:7f:e6:ba:62:6a:e9:d4:47:9a:66:13:dc:
33:48:c8:90:2c:2f:d4:f7:e7:e7:7c:46:a8:4d:8b:5b:7a:4e:
87:0c:d2:a8:e1:c5:a8:bf:13:31:27:ff:ee:26:41:39:c3:66:
7c:34:ca:1d:36:70:05:5a:b6:6f:0a:f0:fe:41:d9:3c:d5:7a:
ff:a8:76:47:b3:0c:5d:cd:14:9c:f4:6a:3f:cb:eb:35:0f:64:
6c:53:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:32 2026 by rpki-client