Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
File: UaLCwG3bhGaaiamfuHVglRNMh2Y.mft (raw, json)
Hash identifier: GAVf+3d8A3XHMudSuskO1+OG7VC4k0Va96k2YoQXhY0=
Subject key identifier: 20:2B:9A:31:6D:11:2D:A7:D9:95:B1:27:67:76:72:69:AE:41:7E:8E
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019CA9463BAB0A010113820EAD084B7D8C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
Manifest number: 06A5
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: UaLCwG3bhGaaiamfuHVglRNMh2Y.crl (hash: +2BkZ2eNKVcLrgCi4MfE62/+u9NoWXEg4CtNUmdJ5f0=)
2: Zw0BJ60leHVrZJiWPzlXTx_gu-g.roa (hash: zMGa6j4ctCusyJp2LtMLsXdNvm0G2MCLxoW8FpfFI3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3b:ab:0a:01:01:13:82:0e:ad:08:4b:7d:8c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=202b9a316d112da7d995b12767767269ae417e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:6f:73:36:59:81:28:7c:b1:a9:64:c1:2b:
44:bd:66:89:4b:27:0e:08:01:6c:b6:d8:47:a3:cd:
33:ac:5a:b0:2d:e4:88:bc:9c:39:c3:8d:28:55:7d:
92:e9:08:d2:64:ed:f8:04:06:8e:54:6d:5f:e9:0b:
0b:22:5f:da:a8:09:d0:aa:64:4b:8c:54:84:34:2c:
38:97:68:f0:f5:48:23:f5:22:8c:1c:34:dd:fb:76:
0e:5c:a5:87:81:9a:20:c6:a6:86:91:f4:c2:fb:d3:
c0:3b:d8:4b:ce:bf:35:a4:5c:c5:f7:75:36:4d:6f:
c2:b9:49:bf:01:16:3a:ac:86:38:63:dc:dc:4a:31:
7b:ca:e2:13:13:76:26:78:41:72:f7:6e:8c:21:7a:
fb:90:2d:1d:e1:24:45:75:33:1d:60:4f:92:cb:bc:
9b:8b:ae:cd:5b:19:54:39:1a:a2:69:13:5d:e9:48:
e9:68:7d:e2:e2:63:5d:04:7e:f5:f5:ef:2d:ab:2f:
26:90:3a:9f:69:42:4b:52:4d:44:e0:b5:60:8e:71:
e4:e3:d7:47:37:0c:fe:f6:af:be:e7:69:11:a3:6f:
1f:d8:3f:05:d3:53:91:c3:ff:0c:39:63:e4:6a:9c:
b8:ab:73:91:60:3f:fe:48:4b:b7:19:32:f1:70:ea:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2B:9A:31:6D:11:2D:A7:D9:95:B1:27:67:76:72:69:AE:41:7E:8E
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a3:86:33:78:d1:ae:bc:c0:49:d8:ad:39:f9:87:b1:93:a7:
88:20:ab:3d:d3:c4:3e:59:18:ba:e8:f0:68:0c:d3:8f:6b:3f:
24:1d:e2:9d:3e:95:b1:6a:79:40:a9:7c:08:2f:4b:b9:89:de:
da:f3:7d:86:e8:11:90:8b:34:e8:db:66:bb:14:8a:f0:8b:5f:
f5:00:a0:09:bc:ff:43:f8:2d:ff:61:7b:98:96:57:52:5e:81:
5a:08:05:24:df:e4:ad:e9:4b:a9:0d:2c:6d:7d:83:15:26:cd:
10:81:58:1b:50:41:00:5e:28:a8:60:26:1c:11:8c:17:60:6f:
b7:13:f7:65:3a:65:7e:bd:0b:37:5b:a5:cf:2d:d0:8f:78:c9:
b5:b1:96:7f:1c:5a:0a:1c:ca:81:b1:cb:17:5c:4b:72:57:82:
16:59:2f:e2:bd:bb:d0:e8:70:2b:4c:52:fb:1d:0f:5f:45:df:
4d:7d:18:f0:fa:ef:39:a1:11:fc:d1:e1:56:4b:5f:5f:b1:d8:
78:5a:30:5c:5f:48:42:35:a1:2e:33:36:f3:2c:da:de:10:23:
50:b1:29:c8:8d:fd:5c:a9:ac:fe:12:8d:8e:5c:21:28:6e:b2:
44:59:74:fd:23:d9:66:c6:33:8e:b5:7b:df:a8:2e:35:17:f2:
60:10:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:55 2026 by rpki-client