Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
File: UZp1yrw_m8vraCB5f_1zzvwb-X8.mft (raw, json)
Hash identifier: RFFAsABQgCZ+FO4TAcns+yjVFFJ1k+GJ58blXFIfs7g=
Subject key identifier: D3:E8:92:CF:4A:1A:D1:43:CC:06:8E:65:9A:25:99:18:BC:66:E9:2A
Authority key identifier: 51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
Certificate issuer: /CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Certificate serial: 019CAB34A573CC42C157C498E0FC3824E247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
Manifest number: 5A
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: UZp1yrw_m8vraCB5f_1zzvwb-X8.crl (hash: S2uuGq8UWixFMTep8P2FNs5uF5grSppGIOiw1sETBIY=)
2: u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa (hash: D6JOFCXQmCbms2DaHL0CRRDHnlHYcP1xLAqC2NoBZd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a5:73:cc:42:c1:57:c4:98:e0:fc:38:24:e2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=d3e892cf4a1ad143cc068e659a259918bc66e92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:e2:f9:88:bc:03:cb:36:5c:13:c4:33:8f:
52:e9:1e:0c:85:c9:00:41:19:a0:a9:33:2d:f3:c5:
c7:e1:ae:19:22:5b:f1:ca:3e:71:9d:0c:a6:08:4d:
f2:7c:55:3d:55:89:9c:e2:d6:8f:31:f4:6f:05:7f:
f3:67:bd:0a:8d:6c:99:3b:70:6a:06:5a:a6:d6:34:
c6:d8:fb:63:6c:e0:5b:2c:41:41:81:3f:4c:a4:22:
aa:81:ba:d3:54:f3:e2:d5:12:3e:6f:04:79:bc:37:
8d:29:09:7b:61:76:a8:57:de:47:93:4c:be:eb:60:
25:b5:65:42:18:9a:7e:6f:26:58:f7:23:fc:db:a2:
7a:8a:f2:2e:96:e6:08:ec:4b:2e:2b:27:0e:f5:ed:
0d:37:e5:d7:5a:c7:cc:b3:c4:30:07:c8:5f:85:7d:
a9:73:2c:28:26:9c:d1:30:82:a7:51:fa:03:bc:d8:
02:16:09:8c:18:af:6f:2e:e5:0c:6f:4c:d0:0b:5a:
33:f7:8e:cd:23:5d:30:69:bf:a3:8b:5c:b0:1c:da:
0c:6d:1a:d0:94:71:2e:90:49:c4:9c:ca:84:e8:96:
c1:2a:94:59:ae:1f:1c:72:6c:3f:b0:d9:b0:6f:dd:
a0:cf:ad:60:2a:a4:7a:8a:b0:21:0d:dd:1d:60:e7:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:92:CF:4A:1A:D1:43:CC:06:8E:65:9A:25:99:18:BC:66:E9:2A
X509v3 Authority Key Identifier:
keyid:51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:b4:ed:ea:59:d6:57:ab:ba:10:8f:75:ba:f4:6d:c8:39:
c4:72:54:1a:13:43:a5:85:83:4b:8f:05:27:5d:e7:3a:d7:c1:
e0:8c:89:a8:d7:f7:88:a1:a5:5c:b0:ca:0b:d5:77:48:86:7a:
b5:8f:cb:02:1d:29:d5:a5:23:c4:0f:97:f2:0d:5e:00:6a:13:
1f:7a:f4:cf:d6:e0:5e:01:5a:90:5f:93:c8:9c:2d:8e:50:f2:
a6:4f:67:96:fb:e5:ea:78:28:80:e3:d0:48:6f:74:87:ab:1f:
84:d2:24:cd:33:10:0a:5b:c1:eb:27:ac:8c:ef:f9:14:7a:9c:
00:60:27:db:de:4f:34:73:d1:4a:9c:1d:5b:ae:13:01:ba:3d:
81:aa:66:65:c9:bb:67:e8:5f:48:e0:4b:48:93:ec:83:6f:69:
92:ba:35:e1:7d:43:d5:2f:94:3d:84:76:b3:b0:b9:7f:af:13:
b7:6e:56:2d:0d:d7:67:92:22:38:39:e1:60:42:a3:20:81:24:
53:93:27:4b:8a:0b:11:6f:3d:af:28:44:d0:4d:8f:3e:98:02:
9f:e5:96:36:20:74:22:a7:e6:74:6d:58:e5:0e:2c:3b:bb:5a:
93:b3:94:d3:3e:20:ac:35:66:6e:ee:47:aa:38:3c:83:7f:ba:
86:35:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:38 2026 by rpki-client