Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier: JcxXKNZ6hLMN0P1+w/BKyO/c3pveanmoBSZvk1HtQmg=
Subject key identifier: EC:F7:92:D0:10:C5:53:AB:AB:E1:2E:89:90:52:34:CB:1D:BC:51:38
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: 019CACB47AD3E305D7B833E141E88036B652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number: 0F2D
Signing time: Mon 02 Mar 2026 04:00:34 +0000
Manifest this update: Mon 02 Mar 2026 04:00:34 +0000
Manifest next update: Tue 03 Mar 2026 04:00:34 +0000
Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: fZO9eSvVJawTj1bKf7aB+tfQXsznN1x6DGKke7rCJJs=)
2: iAlVsYAfeyXYz_1uMV60y2Ryfds.roa (hash: jtM3bdjEHbWHHyELEbQ22EQKZ+IZ7PnI556Qy41j5xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7a:d3:e3:05:d7:b8:33:e1:41:e8:80:36:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Mar 2 04:00:34 2026 GMT
Not After : Mar 3 04:00:34 2026 GMT
Subject: CN=ecf792d010c553ababe12e89905234cb1dbc5138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:04:12:d5:30:ca:40:ba:c9:c5:c7:f5:62:
68:a7:07:88:9b:d1:c3:76:f4:38:46:ac:3d:22:44:
70:fb:17:01:60:42:15:31:af:7e:5c:c1:b6:a6:c3:
ba:82:af:9b:00:14:e8:14:76:01:d5:ad:61:5f:c0:
66:01:d8:ba:e9:ee:35:d8:06:32:52:13:2d:79:ea:
6e:eb:ff:a9:e9:e2:f7:2f:10:ce:40:46:83:d1:47:
56:72:44:a9:6c:40:5a:c4:56:b8:46:f1:c7:41:13:
21:e0:f9:98:c5:1d:64:54:25:0a:26:6f:22:33:ac:
55:c1:4e:00:cc:1c:e6:69:30:f8:77:88:54:dc:7b:
b1:4d:37:14:61:51:fc:cc:43:68:39:bb:00:57:bc:
da:32:55:54:79:e6:b7:98:db:e9:43:d6:5e:6b:4d:
27:0a:10:e0:f0:b6:c6:89:76:bb:80:dd:fb:c5:43:
43:68:a2:fe:86:62:83:c6:11:21:27:02:c9:1f:e1:
d7:a6:4f:e5:37:6f:d2:49:26:10:ac:22:b3:62:c7:
cf:2f:48:f6:78:1e:63:39:77:b7:c8:d2:58:f7:5e:
66:75:65:44:a7:7d:f0:c2:c4:a2:35:a5:00:dd:c7:
eb:41:1d:e9:48:8f:57:38:68:b9:f0:0d:5c:d3:b3:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:92:D0:10:C5:53:AB:AB:E1:2E:89:90:52:34:CB:1D:BC:51:38
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:65:9e:2e:c6:ff:c4:0b:4f:96:d4:35:50:66:d1:4a:08:c5:
18:7d:88:50:f3:ef:9b:ea:18:aa:0e:34:e7:c3:4e:a1:07:2f:
b6:62:ca:c4:c0:d2:e6:28:1f:9e:9d:d4:4b:51:12:4d:ca:18:
7e:10:c1:ea:9e:3a:72:16:26:17:df:ee:4f:7d:57:b7:54:f4:
2b:25:a4:ed:c8:d1:5e:8a:24:79:a9:d9:22:7b:7e:6c:89:9d:
88:98:06:ae:1b:00:5f:5a:b7:24:91:5a:85:27:bd:db:24:62:
de:82:3c:c4:17:b2:30:e0:a2:8c:52:b5:fe:a9:13:91:a7:68:
1b:d3:70:97:6d:6d:f3:3c:7a:c7:b4:a5:d8:19:52:99:4a:e7:
70:b4:e1:92:f9:e0:4d:bc:fd:9b:83:c3:94:f5:03:00:30:35:
19:24:28:77:52:d2:71:74:80:30:66:f9:36:09:30:2f:5b:90:
79:32:32:81:7b:8b:d8:29:db:ea:ac:09:ab:70:ca:58:26:38:
e8:1c:cd:a3:be:45:59:cb:ef:d7:2f:65:5f:4d:02:80:42:30:
2e:9e:37:4c:dd:d2:22:41:d3:cd:d6:b5:aa:69:7f:6a:05:78:
8b:7e:76:54:8e:37:da:fa:92:c0:f6:2b:a2:ea:56:a6:5b:62:
e1:b8:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:56 2026 by rpki-client