Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: 4B5Nfizo+KYiG30t3j132/786Z1N3ixh+L76146u1AQ=
Subject key identifier: B0:52:C0:3B:01:DB:81:C3:CC:F5:F0:9E:5D:36:55:01:CA:17:06:34
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 019CACB566C55EF2BEF6F43BD8666D441C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 0B13
Signing time: Mon 02 Mar 2026 04:01:35 +0000
Manifest this update: Mon 02 Mar 2026 04:01:35 +0000
Manifest next update: Tue 03 Mar 2026 04:01:35 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: BbzfJlwE7EyHstpVHUkMc1B3/s4JNcWibKjuylnVGIs=)
2: jmPiqOSodqrdA8k4949EnF32jqs.roa (hash: m6Q9/wIpIS6OjtKLHT/2uqXxN+T3zmjZa4o1CBlJhOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:66:c5:5e:f2:be:f6:f4:3b:d8:66:6d:44:1c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Mar 2 04:01:35 2026 GMT
Not After : Mar 3 04:01:35 2026 GMT
Subject: CN=b052c03b01db81c3ccf5f09e5d365501ca170634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:ce:b8:b2:84:02:20:5f:19:e7:75:68:bb:
8c:e4:bc:dd:f8:80:f3:d9:94:37:f8:8a:df:6d:a8:
d7:9c:f5:d5:9d:b4:78:09:65:c3:a8:93:5a:e1:08:
d7:34:60:23:15:82:24:3c:f7:93:c3:6d:ca:fb:7d:
5f:e8:7b:ce:93:e7:b9:45:25:01:eb:7a:7a:a5:db:
aa:bb:01:45:9e:d9:6a:2b:2e:f7:8d:21:80:57:fe:
ad:21:d6:ca:99:4f:39:4c:f9:f9:83:35:f5:4c:5d:
a1:0c:8b:18:da:4c:02:9e:9b:30:2f:87:7d:dc:d2:
45:18:cf:5a:a6:56:23:55:18:61:88:72:1e:8f:d5:
a1:f7:8f:ce:fe:b9:73:e9:c1:51:d6:06:ca:8d:67:
a0:ce:a1:96:7f:ff:b0:9e:22:25:aa:0e:80:1f:cc:
ff:1c:c8:ed:6d:fd:49:29:40:be:9b:61:43:61:53:
63:07:08:09:57:09:65:82:c3:b0:e6:8d:f7:00:2b:
fb:7f:d4:11:d0:c6:b1:28:f3:2c:dd:c8:7b:27:c0:
a9:1e:8a:21:b6:1e:c8:a0:b7:0c:c6:f6:08:19:c6:
12:05:e3:ac:37:41:f7:25:75:5d:93:ae:92:92:32:
e9:33:4a:f1:9f:ec:ec:ed:6e:6e:66:d2:31:8f:63:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:C0:3B:01:DB:81:C3:CC:F5:F0:9E:5D:36:55:01:CA:17:06:34
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b5:af:5b:dd:18:70:3f:49:9b:a6:b8:58:00:73:c0:02:c0:
dc:ef:ae:7e:f4:1a:00:fa:b1:81:8a:a7:54:a7:e7:16:40:98:
f0:d1:4e:f7:0a:05:a1:1c:0b:12:d6:6f:3f:a1:58:c4:0f:4d:
65:45:ca:d5:ca:41:07:8c:9a:fd:49:82:44:f0:df:4b:c0:01:
9b:90:1e:cb:2e:c0:de:4a:b1:f0:51:e4:ad:ce:4a:ad:5b:b4:
fa:5c:f8:30:d7:5e:8a:58:b8:4e:ac:4e:67:84:26:40:43:55:
fd:e5:9c:61:3b:b5:68:3e:13:24:bf:ba:8c:c7:85:82:2f:d3:
76:f9:bb:b0:b6:53:18:3a:3f:9b:5d:56:d1:64:60:46:f7:bb:
b5:b9:54:c0:21:f0:01:2f:3a:5e:1e:74:5b:73:09:fd:51:fa:
59:15:11:c3:94:1b:44:b6:96:62:6d:dd:ce:f0:23:67:d1:d4:
ec:2c:d7:d3:31:c3:f3:1b:ae:29:7b:f7:87:1a:e8:0d:ea:61:
90:8b:de:92:db:b4:f1:db:1f:52:d3:a5:a0:b9:f7:a3:83:2f:
de:19:69:c5:f0:80:84:03:92:ab:bd:66:20:54:54:ba:dd:a3:
b7:93:5d:be:9a:a6:a8:94:90:a7:fd:db:35:e8:db:b0:2b:cf:
bb:2c:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:42 2026 by rpki-client