Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier: M5OsTCTb90ePcRE7ZkvZCTuFopfkfEnUYwZdl5qahsY=
Subject key identifier: D3:BD:12:8D:8B:A2:47:01:BB:59:D3:BB:F4:35:FE:20:75:05:E4:D6
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019CAC47936B1CB479F9966930C5755DF25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number: 1708
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: 1-XgzExb87B342Vy7rI92swro5Ko.roa (hash: QjIobcr5W/51qEI0M/xq1gTl7eaLdwnyA/ijNSdgtjc=)
2: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: kwFCXRFZMn8mfFLXAxPAJI2u2mgxRO6iOAUO6Lutnrk=)
3: hyqfjg6g6o8uq-QACPMTfQs5lQc.roa (hash: hYE/MgKu1hpnAI+3myRRccnC0a+MVJNeTXAHofbn5YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:93:6b:1c:b4:79:f9:96:69:30:c5:75:5d:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=d3bd128d8ba24701bb59d3bbf435fe207505e4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:31:e0:b4:c4:b9:1f:f3:ec:6c:3b:7c:76:
a7:9a:9a:7f:dc:28:58:6d:05:2b:de:4e:9f:ca:60:
32:08:81:4e:d7:58:e9:32:bb:a7:96:6d:95:1d:f7:
83:d8:cf:5f:3e:3b:ff:3c:57:ae:ce:cf:86:b4:af:
6c:8e:da:c6:8a:79:df:51:f6:95:3e:fe:2b:5c:10:
e4:c2:ab:15:38:50:5f:0c:0c:bb:d8:5f:12:43:e3:
be:5b:c3:4e:a8:11:34:0b:66:93:f7:14:a5:f3:bd:
54:13:da:23:81:be:3c:4b:7a:88:65:bd:8b:72:c1:
9d:1f:28:c5:23:65:4a:9d:49:de:26:bb:6f:44:7f:
1d:28:1e:ae:51:4f:fe:7d:d2:06:d5:29:6e:98:74:
6b:84:81:fc:3e:7c:54:2a:46:78:cc:97:74:b2:3a:
76:2b:47:da:78:a0:1e:4b:0e:d4:36:a3:96:7e:ef:
f2:0b:da:3b:1a:4c:d6:26:7f:d4:1d:69:b2:22:58:
47:49:2c:a2:2b:da:51:1a:43:fa:c6:85:0d:d8:93:
ee:ea:fe:cd:e8:b0:3f:8f:4e:c6:e1:b5:78:e4:df:
42:27:7f:f3:ef:d0:0b:b6:d9:fc:7b:8e:d1:fc:8f:
5d:c0:a4:a5:40:a9:1a:3d:34:ab:ad:fb:c6:15:82:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:12:8D:8B:A2:47:01:BB:59:D3:BB:F4:35:FE:20:75:05:E4:D6
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b0:9f:30:be:78:f5:2a:eb:eb:f3:6a:0e:e5:da:32:17:ee:
c6:14:86:b9:10:d7:c5:08:9a:b8:d0:8f:a6:9c:d2:df:24:f0:
53:24:9d:c4:59:d1:c5:6a:ff:32:7c:f1:d8:17:48:c1:9b:1b:
7b:6e:0b:3b:44:89:e7:ca:f3:56:1f:ca:0b:60:26:d3:46:9c:
15:bf:81:db:ae:24:39:6c:15:1c:74:09:a1:72:12:ba:bc:29:
d4:b5:96:47:98:24:44:11:a8:f2:de:c4:36:43:8e:8e:ad:18:
04:60:c8:53:18:28:b4:92:b9:a0:b7:80:d2:d3:65:f1:96:fd:
91:64:cb:34:87:e3:f5:d8:31:81:ef:fa:7d:45:8b:18:f6:7c:
11:06:1d:96:3a:04:0b:67:3c:b0:f8:ff:5c:7d:72:7a:4e:c2:
d7:80:cf:5f:24:e7:fd:b8:ef:c2:fd:9f:12:3a:b0:42:6c:2d:
b1:e7:db:7c:59:48:59:e9:a7:c4:5d:51:50:bb:33:0b:f2:be:
d4:53:99:fe:72:26:89:50:ae:5c:18:49:6d:d3:d5:49:15:ec:
49:e9:c6:77:96:96:03:13:cd:91:9a:a1:9e:7a:cf:a8:87:1d:
e7:dd:0a:f4:6f:9e:19:f0:12:de:2e:ed:24:70:ba:85:17:1a:
70:bb:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:32 2026 by rpki-client