Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: OhrW3t6x++OmKabFMklurgy7wiRdj1ulMu/r5PImn7M=
Subject key identifier: 74:F3:58:BD:54:22:3A:48:A2:19:EB:D3:B6:F9:70:AD:15:56:1A:9C
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019CAD2293BEFD1307BD583305A19503B6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 10CE
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: GeBmw8TTFtUGgIWNlyMn6TsLPnL/E4AtVe4VuBLkHQw=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:93:be:fd:13:07:bd:58:33:05:a1:95:03:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=74f358bd54223a48a219ebd3b6f970ad15561a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:44:86:15:cb:cc:de:d5:ee:d0:ff:c9:2a:
2f:0d:88:77:83:e8:fc:bd:a6:40:f7:b2:cd:46:53:
2e:02:65:07:f6:fe:57:da:7b:b9:76:3b:e7:25:10:
77:cf:9f:2c:ae:36:71:f7:dc:22:28:a3:a9:f9:9d:
16:5d:af:9c:cb:e0:03:56:6f:18:5e:8b:b7:06:ba:
e8:9e:c5:ff:72:27:ee:73:5c:c4:cf:f3:8c:3d:0c:
8f:e8:b1:03:f6:32:c5:3e:67:20:c4:cf:6a:a7:2e:
2e:4e:a4:74:82:a4:7f:e6:e4:52:ce:55:a4:e6:7e:
f3:43:17:91:66:20:8f:2d:64:94:29:02:18:e4:7a:
30:e7:64:08:db:f0:e2:71:52:e3:c4:2c:94:c9:6c:
23:d5:57:a4:9e:7e:d7:e5:87:10:b1:17:44:09:e9:
fa:43:ec:2f:d3:78:1a:73:60:46:69:4d:20:29:98:
0d:f3:38:f8:8d:73:3d:f9:11:79:6b:c4:7f:2d:1b:
c9:b7:e7:fa:59:e2:e7:7b:f1:da:dc:35:93:91:ba:
7e:8e:20:48:fa:c1:81:a6:17:15:8e:ec:b5:8f:8a:
9c:fd:94:44:e5:8f:a8:5b:c0:3b:77:64:e4:a3:a4:
a7:86:e0:4d:6c:aa:8c:63:c8:05:27:01:86:a4:50:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:58:BD:54:22:3A:48:A2:19:EB:D3:B6:F9:70:AD:15:56:1A:9C
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:e9:c9:80:17:6c:c5:2b:4e:dd:15:5e:f2:78:89:96:f0:
ba:a7:90:78:a8:c7:8f:7b:e2:e8:03:c6:77:3f:95:57:92:b1:
18:d9:e8:ba:c8:b6:4c:26:99:bc:ad:33:8e:dc:dd:60:08:b9:
20:42:3a:00:ee:33:b1:03:84:e9:35:08:f2:a9:25:1f:5c:a4:
d3:8a:b7:af:64:55:df:24:d0:90:fd:94:3b:43:63:30:4c:4a:
b2:95:2b:38:4f:a4:8a:c0:39:e8:91:1a:a0:45:45:c9:ea:f0:
a0:bf:15:88:9c:d3:23:e1:bf:7c:13:fd:31:f0:54:3f:5b:22:
0a:e4:46:22:f0:93:cb:3c:59:21:80:20:8e:eb:0e:ce:09:12:
27:22:fa:98:c9:80:a5:b1:46:1a:5a:ea:bd:2c:83:c4:bd:ed:
b0:70:e3:ed:94:83:ad:b8:dd:bd:58:01:4a:25:f2:29:be:93:
63:c3:aa:3c:da:b8:e5:b7:0f:f4:a8:18:7c:b2:a2:b7:31:bb:
95:02:de:5c:61:67:99:38:df:c1:46:35:81:c0:67:f7:b7:75:
64:8a:c4:80:f0:89:c8:87:cd:39:81:1f:16:a2:60:fd:9f:eb:
ea:98:eb:e4:40:94:d3:36:de:25:09:20:ee:af:c0:e4:2c:8d:
92:23:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:36 2026 by rpki-client