Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
File: UucbOdfElDC7x3u2WVLkAhoCUxY.mft (raw, json)
Hash identifier: oaljlFzEAn/eO+ayxxF5546mT1QJAdtUj7U5q4WFe+s=
Subject key identifier: B5:55:40:69:66:F0:FC:B7:02:82:5D:5A:BA:AA:82:B7:05:04:E7:4B
Authority key identifier: 52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
Certificate issuer: /CN=52e71b39d7c49430bbc77bb65952e4021a025316
Certificate serial: 019CAAFD4C2DB368C079973ABAB680AE2FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
Manifest number: 152A
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: UucbOdfElDC7x3u2WVLkAhoCUxY.crl (hash: WG6T3t9ClEnNK+hxTDDKkr89FmBZWNjh1zxJ+lnB4Y8=)
2: fAEQXEU8XqYl4iZbVuPiwUl1I_0.roa (hash: q8r4P3JkpztaMfofkjIYM4mXiBLUcbGTHnSsBJ/p6UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4c:2d:b3:68:c0:79:97:3a:ba:b6:80:ae:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e71b39d7c49430bbc77bb65952e4021a025316
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=b555406966f0fcb702825d5abaaa82b70504e74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:03:48:5e:9c:1d:89:dc:2b:3e:54:f2:d1:
eb:78:14:53:cb:5f:f6:a8:fe:1a:b1:39:80:9c:78:
b4:a8:e5:ef:50:a6:56:6f:e3:04:2e:78:01:88:2c:
f8:a6:54:22:b5:74:df:62:c3:01:6c:82:1b:07:20:
f1:f8:91:2e:73:fa:dc:5c:41:8b:f0:d3:fb:21:b6:
2e:53:9e:dd:02:82:00:b8:2d:24:2c:68:91:1c:35:
8b:29:93:24:ea:80:31:25:58:ef:48:fb:c2:14:65:
18:ca:50:50:4e:ab:2d:87:8f:1c:94:8f:3c:f0:50:
78:05:af:4d:03:42:2c:24:bd:50:09:47:fe:ff:22:
af:23:db:1d:40:a4:b0:3b:bb:ed:71:84:22:cc:fb:
06:1a:ee:a9:4d:9a:41:3c:68:97:e0:1a:88:35:e4:
73:d3:3d:52:cb:42:59:a9:e4:3f:f3:dc:1a:27:0f:
e1:2d:3b:e7:9f:5f:74:85:c6:fe:98:f7:76:59:8f:
39:6f:85:83:59:c3:0c:f3:00:64:31:46:b4:9a:b7:
ee:ee:4a:48:27:32:3e:f7:f3:e7:aa:18:38:88:37:
02:6e:6d:1f:87:3f:5b:e7:90:30:41:0d:cf:23:30:
03:60:64:84:85:f6:2f:07:6e:33:21:cd:d6:91:ce:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:40:69:66:F0:FC:B7:02:82:5D:5A:BA:AA:82:B7:05:04:E7:4B
X509v3 Authority Key Identifier:
keyid:52:E7:1B:39:D7:C4:94:30:BB:C7:7B:B6:59:52:E4:02:1A:02:53:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UucbOdfElDC7x3u2WVLkAhoCUxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c39a8c-3bb0-449d-89c3-6fba6a1e0ee7/1/UucbOdfElDC7x3u2WVLkAhoCUxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c7:5a:57:33:e1:39:93:65:fa:20:73:31:72:35:a6:04:69:
a8:3c:66:56:0d:91:9f:a9:33:92:4e:e1:85:78:aa:f6:e4:6d:
41:a9:05:ba:bd:78:3a:43:11:41:17:60:43:c8:62:39:d9:5e:
4b:ea:8b:71:c3:4a:8b:49:de:77:52:14:e6:1d:e5:e6:ed:56:
4c:83:cd:cc:23:de:41:7e:52:e7:ca:98:7d:44:69:f8:f9:c5:
9f:32:00:0a:40:c9:6f:81:89:ae:8b:2f:08:ff:d6:d5:5f:b3:
65:83:da:8d:01:6d:38:5c:48:65:7c:ff:32:ba:b7:a8:5d:3a:
04:a1:7e:fc:db:b2:2e:28:dd:e8:6d:20:1c:a6:2d:c2:7b:d5:
31:88:c4:b1:d6:b8:8d:3b:52:b9:7b:ce:7e:84:fa:58:aa:6c:
82:90:95:98:fc:85:3a:7d:25:2d:a7:e9:0b:34:a1:d5:64:b4:
21:db:e8:12:3e:d0:af:e2:13:0e:48:ca:51:7b:19:21:52:16:
8b:9a:83:78:d0:10:a1:da:ad:11:6c:7f:1d:ea:d8:92:9b:72:
a2:1b:fb:fb:05:53:01:0c:90:b3:72:45:35:5a:ff:02:d0:6c:
21:3e:ec:66:94:10:d5:e1:7b:4f:dc:ea:f8:f7:61:a4:dd:fc:
9d:d0:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:35 2026 by rpki-client