Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: HBwReNAGXhxLtEGRLowrxOQXl0rGGsOtu0uA3WcJJj4=
Subject key identifier: 25:82:FE:EA:EB:13:85:87:0A:EB:7E:C6:5F:61:81:AD:EF:99:28:85
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019CAC4712747FC2CBD03B315F6D377CB3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 17C9
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: OzTQl093nPuHgvb4uJ0q61uAdgo.roa (hash: hmpXzU1F+pG+U/TeV3XVItayY49E8Q1T8eDs1027tKg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: Q3XFLhfpA19dJPryeFDj1GDwqRF5gd9ppyqv+L0jSFE=)
3: jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa (hash: qr2NzVnl1VJwrzaYNmZtgYoQsTO097Vnonun3IEMl60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:12:74:7f:c2:cb:d0:3b:31:5f:6d:37:7c:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=2582feeaeb1385870aeb7ec65f6181adef992885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:53:b1:42:be:59:05:54:81:63:b3:54:05:
b5:2e:a0:fc:07:7b:30:15:f1:65:32:6c:ba:a4:22:
90:c9:ef:c5:70:32:4f:db:92:56:5c:27:ad:d6:29:
3b:46:31:22:1f:9a:23:15:14:d4:6b:ae:1c:b5:c2:
d3:51:67:99:3f:11:de:9b:73:8b:0e:b6:6a:0b:98:
e3:a1:f7:b5:0d:8c:27:c9:57:48:ed:0a:c1:ef:e7:
25:49:80:27:91:83:ef:89:67:b4:70:e6:85:f4:6a:
0e:09:c8:84:18:2e:f1:23:50:30:f9:2d:8a:ae:d0:
53:8f:c4:65:d1:79:67:cc:b8:64:ef:92:d2:1f:af:
8d:51:53:ab:b5:0c:d2:34:60:55:10:5c:92:df:4b:
2a:59:28:1a:ce:7c:f6:43:6d:29:a4:e2:ca:40:c2:
45:dc:3e:ab:73:3a:7c:30:12:37:d0:84:e9:68:d3:
4f:25:47:c2:34:7a:2d:0a:a5:f3:dd:05:fd:dc:ae:
f3:39:51:f5:a6:4b:7e:2e:46:db:b6:4a:94:ca:2b:
60:4a:16:d4:b3:4a:a6:ab:d3:2a:7d:49:a0:6b:19:
ef:7f:ae:46:7c:60:c1:30:e6:27:1b:94:05:06:b2:
54:ca:c8:83:40:76:6b:52:71:ee:56:12:10:33:a4:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:FE:EA:EB:13:85:87:0A:EB:7E:C6:5F:61:81:AD:EF:99:28:85
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:5c:29:5c:30:9a:26:04:6e:ec:d9:14:16:6e:9c:4a:c0:
7d:2f:a0:87:56:2b:08:84:25:ae:f2:0e:cf:7c:3c:79:81:1d:
43:c4:93:3c:7f:17:ed:c4:cf:5b:07:c4:8d:7d:fa:3a:1b:bc:
03:8c:81:6b:dc:e3:4a:c7:58:c2:06:3e:26:81:f4:d4:58:61:
3e:88:dc:b6:52:16:d9:0e:ca:97:a3:8e:8e:18:35:0f:b4:d7:
79:ea:89:85:2e:d8:77:16:7f:9b:a8:99:6c:5b:6d:03:dc:87:
d9:d6:ae:42:dd:76:1e:b3:d8:32:79:a5:10:7e:60:01:4c:55:
7d:ea:fd:f1:7a:d2:d9:b5:f3:6c:ab:6b:fb:52:61:e4:ea:b3:
9a:5c:58:b0:76:6d:fd:85:73:95:e6:05:cc:0e:f7:c1:29:33:
3a:a0:54:67:b6:8e:28:be:30:b3:8e:c8:02:2c:c1:5f:b2:d2:
fd:35:0c:ee:ca:1b:fb:e6:ae:9f:f0:74:c2:37:5f:99:8e:cc:
3c:3d:f9:4d:61:55:12:cd:65:58:8f:96:1b:0d:8e:dd:81:b6:
65:72:76:32:ba:75:9b:b1:27:6c:8f:ed:cc:2c:79:94:de:43:
16:7a:5c:ce:64:bb:94:6d:ac:c0:22:5e:23:18:07:0a:d1:74:
3d:d4:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:27 2026 by rpki-client