Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: G8LgApGODa6QyN+C6TDkpjN+ic1caoWTlSfGU82v9nY=
Subject key identifier: E4:22:7A:60:6B:25:4B:F0:22:ED:1F:62:F8:AB:42:E2:E4:48:D6:15
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 019CAA8FC3EA716F4F83137F478CFEB5FE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 0664
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: hU/pvsVXeHncmfLRM4EBjCK+JzkM5V5iO27YKvHWL4Y=)
2: gsSMevSvZTZe98EK6RP8YHuCxw4.roa (hash: X62VNlKw339lH1TCZ6ldIrCv+LWgEECVzzmdv2OQDYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c3:ea:71:6f:4f:83:13:7f:47:8c:fe:b5:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=e4227a606b254bf022ed1f62f8ab42e2e448d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:37:23:a3:5a:bf:8d:ad:78:d1:36:1d:e1:
57:df:6c:0c:ca:18:d2:28:dd:ac:f9:80:44:7f:8a:
c5:05:d8:be:65:f8:33:e2:96:3e:ae:17:a2:3a:be:
f2:b9:d8:33:2b:c0:84:d5:57:4c:27:d4:56:34:b6:
03:bf:e5:98:c1:14:87:fa:89:9a:20:68:d2:12:c2:
50:41:0f:0a:27:58:00:75:6a:ec:15:75:7a:5f:f4:
9d:e1:7e:4a:b4:ad:34:49:8f:53:e9:91:52:93:5f:
6e:a3:96:f2:87:1d:42:a3:ec:f3:86:95:b6:c0:18:
73:36:af:4d:18:65:ad:50:db:fb:7b:74:f5:a4:cb:
08:4b:8d:0d:17:e5:9e:b5:9f:14:65:ec:0a:fc:eb:
23:f0:06:c5:3d:c0:50:58:53:86:a0:d0:f7:78:52:
03:a0:07:ce:4c:8d:eb:dd:a8:67:03:98:c4:11:fa:
5d:c5:73:9d:6c:3b:9c:8c:4e:55:41:6b:be:84:68:
ad:45:4d:59:7a:12:d4:ce:8f:c6:01:62:3d:d5:fd:
28:36:48:d1:f2:ad:f6:59:9d:85:0d:da:cd:7d:bc:
55:2d:cb:4c:4e:7b:3c:4b:c6:6e:12:35:cd:cd:2f:
06:5e:83:ea:38:28:be:17:e8:51:1e:ad:af:62:73:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:7A:60:6B:25:4B:F0:22:ED:1F:62:F8:AB:42:E2:E4:48:D6:15
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:1e:86:72:aa:81:8a:48:38:b3:e0:45:0a:d7:c7:5f:cb:
7b:79:04:20:39:69:49:a0:30:4f:33:1a:e4:27:ca:28:45:1e:
67:a6:67:11:dd:b5:6c:6b:a7:55:e1:a7:58:c6:a9:99:cb:78:
23:d3:b5:6c:4f:be:94:40:ed:2b:f0:79:e7:65:97:5e:7e:38:
ce:da:1d:ad:f6:62:7f:64:41:f1:f1:8f:59:28:57:45:52:27:
70:72:d1:52:5f:b4:18:9a:e1:69:90:f2:26:c6:44:80:ad:35:
22:e0:97:64:8e:5e:39:c6:21:7d:a1:f0:21:99:b2:ca:6d:d7:
95:49:29:f7:fa:e6:9e:63:cb:38:06:a4:7b:a0:f0:b6:56:0d:
70:29:b7:11:cc:d9:ef:f2:2f:ee:f0:34:50:fa:e1:af:a4:63:
71:2b:fc:5c:58:15:e4:18:99:bc:6a:73:35:25:dc:46:46:5b:
5e:5e:8e:29:05:25:11:9d:02:af:46:4a:78:7e:7f:23:63:dc:
73:83:cf:f9:bc:c6:6d:e2:02:58:41:8a:34:48:0a:0a:a8:e5:
7e:3f:bf:19:0b:e7:4d:ed:1a:26:a6:a1:ae:69:5b:31:c4:91:
35:62:16:f9:d2:ae:9d:e5:e3:5c:fb:d1:ed:7f:23:78:4f:0f:
02:85:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:22 2026 by rpki-client