Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: az7JFRmZpJU2Pw+9QrRMrt+PoxoNvZTocl+K4/tr3YE=
Subject key identifier: 2E:FB:7D:8D:3B:6C:96:DD:CC:7D:D1:46:85:19:18:83:D5:DB:A1:D2
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 019CAC47020D438A48AEB8269179472B2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: P+mv0Dn0zWAS+iPkTP5vSlj36iE2PgGzD5lmhv6TJJs=)
2: mT1y4Vcpn5hGJXQzo130fr7-JU8.roa (hash: 5+RIIvJ1lvndyR9sJPil/4SfnDQMNqbmhhM2Do86aWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:02:0d:43:8a:48:ae:b8:26:91:79:47:2b:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=2efb7d8d3b6c96ddcc7dd14685191883d5dba1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:11:d8:a2:16:98:dc:97:5a:c2:cd:4a:55:
f3:a0:0c:31:07:99:92:49:e8:9f:ca:13:9f:88:62:
79:1b:13:09:4a:84:c1:38:ad:00:11:81:c0:ee:c0:
15:56:db:d1:d5:0c:e4:8a:b5:58:f8:21:f6:ee:be:
a1:1c:72:4d:08:f6:e2:d8:6d:8d:89:c6:32:0e:12:
9e:e5:43:f9:1c:15:fd:62:8d:ce:12:7e:66:d9:03:
7f:7d:41:fd:f1:ef:96:36:4b:a6:bb:b8:8e:28:0b:
75:50:1a:65:67:f8:92:53:5d:08:92:05:df:0b:0b:
03:09:05:4b:c9:4e:9f:3b:09:bf:e1:dc:a0:6d:04:
99:1a:62:25:cf:2a:a0:af:47:7d:9d:28:77:16:84:
98:57:8e:bf:6b:fc:02:f7:d3:a0:97:44:2a:df:5b:
37:74:f7:fe:41:89:fe:8e:40:c3:09:37:75:e7:b6:
92:87:4c:9b:9b:44:25:3f:9e:5d:91:5f:cd:80:c2:
d2:69:d1:dd:f0:8f:0d:0e:8b:01:a4:24:65:59:f9:
b2:1c:79:5b:90:52:dd:fc:a5:8f:7b:53:99:44:50:
c0:9c:53:ee:f9:0b:d5:29:92:81:b2:11:7b:82:fc:
a2:6f:2d:76:c6:e2:8d:f9:34:85:76:3e:9f:93:7a:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:7D:8D:3B:6C:96:DD:CC:7D:D1:46:85:19:18:83:D5:DB:A1:D2
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4f:50:1b:f2:b0:a3:64:f3:dc:89:af:03:1d:d2:1e:95:39:
6b:46:b1:93:76:84:92:9b:0f:ef:1a:de:0c:00:46:a1:d4:e3:
aa:55:a9:c6:aa:62:58:9e:89:ae:72:19:51:11:e0:04:a0:11:
b8:05:f5:f8:bc:05:44:2e:85:06:7f:d9:9e:f5:00:80:74:02:
e0:14:ea:ad:b7:2e:8e:9a:38:db:c2:08:e0:29:ca:f5:71:0f:
f5:96:a1:81:7e:24:9c:74:2d:a4:b5:8b:17:5c:12:6d:5b:35:
7f:1e:5f:87:81:dc:3a:e6:53:17:39:ec:3a:b6:d2:27:f7:1f:
22:6a:a4:8c:44:bb:6d:c2:1c:fa:5e:e2:cf:a6:c0:e5:fa:0e:
84:b6:e1:0c:0c:1e:72:63:9a:3d:b6:83:e6:dd:65:5f:79:9e:
0b:84:d9:5b:3e:02:c0:e3:fe:d5:db:31:c2:36:ba:c7:40:b6:
04:42:99:56:22:df:70:8f:05:e4:f5:5e:89:f4:bd:04:4c:a4:
ad:7b:c6:8e:76:1a:51:65:ca:5f:78:6d:7e:99:a3:87:0f:e5:
78:a0:72:67:55:18:cf:b0:f5:44:f4:ca:5f:4a:96:d5:53:65:
0c:55:06:24:3b:b7:01:10:a1:2a:d1:b8:76:0d:be:f8:0e:4e:
56:75:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:57 2026 by rpki-client