Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: Za2kk1Nll6THjU5K3EmPF16SwQopWA8R1c8wXgHe390=
Subject key identifier: 00:D7:22:AF:A6:65:D8:19:FC:61:97:26:AD:59:4B:C7:CF:85:C2:A0
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019CAC0F96C5381886201BAA161BC0719CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 138D
Signing time: Mon 02 Mar 2026 01:00:28 +0000
Manifest this update: Mon 02 Mar 2026 01:00:28 +0000
Manifest next update: Tue 03 Mar 2026 01:00:28 +0000
Files and hashes: 1: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: Rrzj7PF14rQvmV6cqmDn0/sXbWV3RK5nce/K4O9Vr38=)
2: b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa (hash: v9RBu20odxkvsGZtyEDAzqjRkkYtJXPNlrRBy/h0EkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:96:c5:38:18:86:20:1b:aa:16:1b:c0:71:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Mar 2 01:00:28 2026 GMT
Not After : Mar 3 01:00:28 2026 GMT
Subject: CN=00d722afa665d819fc619726ad594bc7cf85c2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:6b:c8:f7:f0:b9:98:55:66:75:61:6a:a2:
51:08:35:13:a6:1b:96:cf:0e:a5:07:9f:72:e7:5c:
de:47:fc:d6:48:ff:0b:03:59:40:4c:e8:1f:da:d0:
4f:29:21:20:eb:64:6f:21:14:bf:d4:68:c8:99:22:
4c:1a:57:f5:1b:63:9e:38:3d:f3:7c:37:53:c2:dc:
94:05:7a:9d:5b:f3:6b:57:d2:12:d3:f8:9f:75:6c:
8b:e1:0e:53:ee:ca:96:af:3a:8a:8a:19:5c:f8:c9:
76:6b:b5:c0:16:50:ca:68:82:c9:cc:db:07:a2:69:
77:2c:9f:01:8f:a9:55:84:5c:50:ae:e3:68:51:80:
fa:17:2f:ba:13:88:09:6b:8e:a5:fc:4f:5e:28:77:
7a:a2:da:ea:2b:9f:86:03:e2:4b:35:10:05:6f:73:
62:c3:90:dd:1b:58:3e:93:53:68:7c:ce:6c:e3:6f:
3c:75:a7:4c:e0:87:dc:8a:00:78:96:90:ff:1a:b1:
94:15:43:ed:a9:a0:5e:f9:15:45:6d:f3:e1:94:97:
5c:c3:d4:d6:16:9b:5b:11:c3:c1:e6:d9:dc:0b:7d:
8f:4e:35:06:40:be:c1:d4:01:53:bd:1d:9b:1c:79:
02:1f:b8:b5:19:90:ef:c7:d2:3e:67:a9:af:a1:de:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:22:AF:A6:65:D8:19:FC:61:97:26:AD:59:4B:C7:CF:85:C2:A0
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:15:db:96:a1:e3:f4:64:41:9f:85:a5:17:8e:d6:53:7d:92:
85:19:8a:41:e2:73:89:81:f0:84:14:72:3a:49:47:f2:61:15:
c6:4b:01:c7:ec:fb:93:c6:d3:36:b9:7f:1e:6c:bb:94:e1:82:
5d:d4:6d:a5:9c:85:d0:ae:0a:70:dc:04:4a:e3:be:22:41:a6:
a2:0c:03:1d:50:da:98:22:82:e8:25:e4:69:d3:3a:d4:97:07:
b8:a0:06:8c:40:a3:c4:2b:d8:29:61:bd:1b:f9:77:ac:fd:d5:
c5:39:32:71:7a:b8:c1:c9:66:7a:9d:3e:2d:8e:6c:1c:57:b6:
46:bb:6f:49:75:52:82:6a:f3:0e:d6:63:b9:c4:7a:8d:93:f2:
76:d4:07:4b:b3:98:45:df:2c:c8:ec:ae:8f:d6:67:f0:8e:af:
57:54:b1:01:9c:1e:c6:0f:df:47:d8:8e:2d:3a:b8:8d:0e:c4:
2a:aa:07:04:3f:15:b0:15:1b:72:97:8e:f7:36:c8:0b:40:90:
50:86:54:6a:9b:83:fe:4a:52:ec:25:b8:76:ea:31:54:c2:80:
36:48:e4:bd:87:83:be:80:88:e0:97:bc:97:87:e0:8b:be:7d:
67:07:db:74:06:0a:32:08:f4:c8:de:ab:d0:4b:75:36:bd:0e:
2a:79:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:48 2026 by rpki-client