Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: eodRvM+dePwVrYhF6m9QHoGd/ssWhi3KIe6nK/lcb8A=
Subject key identifier: 3C:EC:EE:13:DC:A9:7E:28:D0:C4:DA:1C:EF:F3:BD:37:DF:86:63:28
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019CACB4C1C5BC4462B5BB1E4820344CE0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 04:00:52 +0000
Manifest this update: Mon 02 Mar 2026 04:00:52 +0000
Manifest next update: Tue 03 Mar 2026 04:00:52 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: NaIyVy81ifTfs+0jpZImfF54pcjfTEEoJndPTlXbtyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c1:c5:bc:44:62:b5:bb:1e:48:20:34:4c:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Mar 2 04:00:52 2026 GMT
Not After : Mar 3 04:00:52 2026 GMT
Subject: CN=3cecee13dca97e28d0c4da1ceff3bd37df866328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:0a:1f:1f:a1:6e:2f:ba:34:6b:af:2e:9a:
79:40:53:4c:48:14:c1:80:ad:5b:42:74:32:5c:5f:
49:ae:7f:2d:06:3d:05:fb:96:e3:68:9f:62:97:37:
21:83:8f:66:0d:0d:95:aa:cb:a1:34:f2:e0:24:cd:
68:2f:2c:87:1d:b9:0f:d5:94:fe:22:8a:63:e0:bc:
d1:76:92:a9:cc:42:1f:0b:bf:cf:d4:7b:e6:cc:99:
f7:2c:cb:c6:5e:87:fd:99:26:77:0e:7b:55:62:d6:
a3:76:8c:83:22:94:58:9d:46:d6:0b:65:e9:64:35:
29:6d:1b:c3:34:21:9e:cd:6c:61:c0:33:5d:7b:aa:
96:23:c9:d5:e1:05:14:5f:44:27:76:04:46:92:09:
d4:81:d0:13:8b:fd:6b:67:25:a1:40:da:e1:32:25:
42:22:b9:49:2b:cf:37:ec:5d:cc:8e:c9:a2:a8:cf:
48:0c:c2:71:de:6f:46:a8:22:e4:3a:d3:66:82:04:
da:85:e5:9f:21:46:3a:7b:00:13:99:7a:de:b1:37:
f8:1d:f4:63:9d:d5:d7:b3:b0:91:17:84:41:ad:fd:
16:38:f0:67:ef:3f:d1:41:bf:69:b7:eb:95:e6:c5:
e4:2a:cd:1c:fb:a3:51:d0:9a:00:80:07:c2:7f:80:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:EE:13:DC:A9:7E:28:D0:C4:DA:1C:EF:F3:BD:37:DF:86:63:28
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1f:a4:cf:ab:dd:90:92:b8:92:f2:07:42:42:5a:18:77:7a:
74:a8:25:99:22:3a:13:cc:ff:82:86:03:49:fc:9e:06:f2:6f:
29:20:e3:7b:75:b9:e2:04:e5:da:29:47:7d:2a:97:f4:a8:6f:
b3:80:f6:26:03:f5:9c:96:41:7f:f4:22:77:3a:59:42:21:16:
f1:7b:06:9a:e8:72:0f:15:07:1f:8c:6e:2e:12:f7:23:5a:71:
8f:8a:ca:11:56:d2:f0:90:6d:d1:e2:a0:ea:ff:d9:2d:b8:56:
5a:6b:68:18:95:ec:3b:3c:f2:e3:90:62:00:17:8a:37:a1:ec:
59:6b:6a:64:79:f4:57:0d:a6:2b:db:41:59:84:63:9f:78:9a:
a6:bf:41:97:2a:5d:9d:57:7a:99:c4:0b:a1:12:dd:ea:9a:8a:
a5:a6:e0:88:cb:a3:eb:1f:ff:3e:bc:36:30:65:bf:fb:61:dc:
92:53:4b:42:cb:98:28:3d:71:44:9e:c7:35:68:75:a4:27:f6:
7b:01:67:da:34:9b:34:1e:40:3d:45:9f:6e:70:5e:97:f6:2a:
1a:3d:1e:41:bd:ac:fd:5a:25:67:b9:4c:98:53:3c:0b:3a:91:
e2:01:75:67:a4:48:50:bc:04:16:e3:b7:cc:37:40:ee:4a:4e:
8e:88:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:39 2026 by rpki-client