Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: rk25nqnkxeJAbOpKMtCHVeT/yGECjFVkVKb5+yQnIX4=
Subject key identifier: 8E:C4:A4:BA:ED:B3:34:92:A6:2F:1B:07:D7:1C:F8:C5:61:22:8E:8D
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 019CAB6B7CA94601088E4551D8B6F814DC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 1768
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: DkKDajpTHwTuNMIpxKTAMDGQDDo.roa (hash: X10Ua4dlXVpqCEjX6L/K3mZaPDpI5fuPVZc9nBQdT8k=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: +a06N/6b1ZcloFSsXYI2WWhsiH/CvDqkXRyJ2gqynvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7c:a9:46:01:08:8e:45:51:d8:b6:f8:14:dc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=8ec4a4baedb33492a62f1b07d71cf8c561228e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:f4:d8:52:2a:9e:4c:ea:b8:bd:12:8f:c6:
e3:e2:02:b5:9c:61:ec:ec:bf:1e:14:86:66:0b:c0:
20:cd:eb:59:c0:3f:1f:ab:ab:11:46:a5:ed:f7:d0:
fa:29:60:92:ee:05:9b:82:4a:eb:3b:9b:ad:95:99:
4c:f6:71:27:b0:86:9e:81:3c:a0:74:1a:f9:1d:ab:
ab:89:1c:e9:ba:49:ca:e5:3f:c3:47:da:02:21:50:
30:d5:70:7d:b9:e2:69:0b:90:e5:28:4e:43:d0:e4:
16:76:4e:76:96:6e:f9:b5:f4:5d:6e:64:94:52:7d:
d9:43:05:66:e6:55:47:6a:9c:52:96:88:19:88:d7:
54:80:18:ab:57:7b:79:61:2e:2f:0d:32:80:38:42:
17:30:aa:38:cc:63:66:cf:36:cc:1b:de:2d:9f:07:
00:34:f0:ff:d9:e6:6d:9f:42:4e:2b:f3:22:f7:aa:
3e:bc:56:05:c3:e7:ee:a1:17:73:28:94:0c:ff:9e:
31:8f:da:8c:eb:ce:2e:a0:d3:07:96:77:2f:eb:4f:
f8:a1:30:9e:bb:23:69:31:86:8b:d0:ea:ea:b7:95:
d8:00:66:fd:d0:38:e4:e7:d2:f4:a9:23:8e:95:03:
a2:b8:95:ee:e0:64:a2:2b:27:49:a2:a6:0b:4d:f6:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:A4:BA:ED:B3:34:92:A6:2F:1B:07:D7:1C:F8:C5:61:22:8E:8D
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bd:93:7d:32:77:4f:37:bd:52:17:34:c2:59:cb:87:f6:72:
8b:94:04:58:d3:1c:7b:c8:69:30:58:79:d0:5e:ca:b0:da:fc:
84:13:ed:8a:5a:85:af:26:eb:34:a6:78:fa:2a:cd:7e:ef:04:
0b:7e:d0:b1:34:d8:cd:2c:f7:3c:6c:67:81:23:13:2b:2b:1e:
27:69:76:68:b2:dd:9a:7c:e8:99:a4:d5:3f:e0:d6:e9:ec:24:
c1:3e:29:a4:5f:5e:29:8c:12:43:28:23:dd:29:b8:8a:fd:e2:
49:99:35:d2:55:ad:a6:e9:66:5a:e7:e1:4c:0c:fd:24:ad:bf:
7e:58:d5:eb:dd:f8:20:0c:8c:00:d8:95:97:cf:8b:85:53:ed:
9b:e4:e7:b2:98:b2:bf:68:3b:fa:4b:65:5d:c8:2c:12:da:86:
03:a5:33:28:03:00:ed:53:9b:2b:9c:2a:1c:f9:12:8e:ad:e2:
0e:c5:e6:ab:ec:ff:04:17:91:15:e8:43:f6:e7:23:06:1d:0d:
35:93:7e:80:1c:f0:48:4f:d1:c0:9d:62:5c:ee:13:ec:30:75:
79:81:ad:1e:22:61:c5:41:71:36:31:f5:0b:41:23:fd:4f:6f:
11:67:45:5e:6e:e0:f4:e5:3e:1a:3f:ff:74:03:95:09:a9:9b:
ce:e7:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:15 2026 by rpki-client