Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: sFfZqD/oQRRwiGPVNiz+84AYGkmBA3RcFsXMC+sp3eY=
Subject key identifier: F0:CA:8E:55:30:E4:E6:AC:AC:6D:AA:53:1D:C9:1F:67:61:E5:2E:70
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019CAA5866CE652A3B3729EC9F942491849C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 104D
Signing time: Sun 01 Mar 2026 17:00:46 +0000
Manifest this update: Sun 01 Mar 2026 17:00:46 +0000
Manifest next update: Mon 02 Mar 2026 17:00:46 +0000
Files and hashes: 1: RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa (hash: ArSk8FNvQG5dEX1fm0nCfGPhiKh2s1aLul9gIYaDXF8=)
2: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: 4ryd4VEmv3Zb/kXDG7kQSxIFLDfyGNLE/gvps0NiMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:66:ce:65:2a:3b:37:29:ec:9f:94:24:91:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Mar 1 17:00:46 2026 GMT
Not After : Mar 2 17:00:46 2026 GMT
Subject: CN=f0ca8e5530e4e6acac6daa531dc91f6761e52e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:af:48:79:71:72:0b:b4:b6:fb:26:81:43:
4e:ae:22:8d:8c:87:ce:c2:9c:f0:c5:f4:f5:66:4b:
25:c7:b5:49:6c:88:1f:60:6e:91:fc:bd:6a:35:4b:
68:3c:94:5f:57:72:fe:94:27:7b:97:1f:c2:33:d7:
af:5e:63:d1:d7:23:31:c0:9b:94:b8:24:fd:ab:9f:
a2:70:af:47:80:78:03:6b:5c:13:70:83:a1:12:2e:
fa:4b:55:12:6a:e2:7f:70:ae:e9:57:5d:81:06:bb:
03:0f:e5:59:f4:e4:02:3c:f6:3d:ce:c8:d9:3d:67:
50:ae:c2:50:a7:2a:e8:6b:44:40:af:67:e4:89:dc:
4b:b1:c4:72:60:bf:2e:d9:8e:74:ea:ee:98:23:10:
b3:71:2c:0b:9d:4f:9e:aa:d8:ad:69:b2:fb:17:24:
9e:d6:c8:a8:a8:45:14:45:55:82:ef:e7:82:61:9f:
1f:18:f7:ec:ac:e6:ef:61:e0:f9:56:88:64:df:37:
a1:c0:ee:89:a3:be:c8:fe:a9:6e:40:45:28:21:ae:
ff:1b:77:b3:39:e8:c3:88:71:c7:37:7b:3c:25:cf:
42:2a:70:c4:df:aa:63:b9:e6:e7:c3:0b:55:a8:0a:
f6:b0:87:4a:ff:5c:98:85:b3:ee:c4:bf:bd:c0:45:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:8E:55:30:E4:E6:AC:AC:6D:AA:53:1D:C9:1F:67:61:E5:2E:70
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9a:87:b6:e4:13:a8:1a:84:b7:8e:77:1e:7d:f7:88:a4:f4:
c0:50:7f:77:67:62:d2:8a:9f:0d:61:97:27:29:22:d5:fb:1d:
59:28:9a:d2:70:f3:63:40:00:9a:88:ea:af:99:2d:e9:90:7c:
f4:e8:fb:82:a3:43:8b:08:f1:8c:04:5a:ff:61:7f:9b:35:c8:
a4:b8:7c:37:17:d8:78:cb:8d:76:c4:4b:35:04:16:62:6b:50:
63:0d:d7:b6:ea:68:47:f1:59:3e:86:1a:00:99:44:99:1e:d2:
21:ff:eb:9e:d8:ea:ed:e5:7f:d1:2e:fa:5f:47:46:0c:91:07:
8c:a3:09:c6:2e:e1:59:f3:b3:69:b1:97:3d:48:20:6b:5d:f6:
fe:b5:c6:46:4a:89:b1:24:59:f3:f9:cd:ef:3d:bb:60:07:f8:
ea:16:99:8d:e3:4a:21:e6:04:c6:b1:57:45:9d:a4:65:98:b4:
3c:8f:60:1f:ec:db:8c:cc:21:ac:87:1a:b6:c6:0d:4a:c7:dd:
9f:50:e1:05:8a:44:0c:05:ca:b2:72:51:c4:2e:88:1e:0e:d7:
4a:db:99:64:e9:2b:b8:bf:af:90:78:98:b1:d9:69:d0:07:d6:
99:e1:5f:2e:a5:45:50:b0:57:4e:27:43:65:99:55:4c:5f:72:
48:c0:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:07 2026 by rpki-client