Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: yAczGCzEwbP1oiJyhOuSCtEUt6FDlLYl6m9uCo6XIkc=
Subject key identifier: 98:03:17:69:1D:95:06:C5:DD:17:7E:DA:95:36:90:D4:F5:40:53:67
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019CACB4C7567A76D3358189445530F99DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: ko/XEcu3IqWOa0HwZG9dFji5B6QumVaVolFnWzEKkjk=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c7:56:7a:76:d3:35:81:89:44:55:30:f9:9d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=980317691d9506c5dd177eda953690d4f5405367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e3:ed:c1:59:8a:95:b4:e5:d1:fc:43:e9:76:
e2:37:74:8f:32:5f:a5:83:f8:f1:40:65:9b:09:cf:
3f:f1:1f:0e:fd:28:3f:5d:ce:f2:ba:f9:dc:0c:bd:
12:f6:c3:eb:20:25:09:eb:d3:9c:c0:03:67:fe:7e:
f3:96:4f:97:7e:9c:27:28:7a:39:e2:43:2e:a0:e1:
9c:53:91:d3:18:22:26:3c:74:d5:da:5d:ce:fe:e8:
90:a4:98:a3:d6:91:a9:85:aa:cd:3d:d7:c8:37:d0:
24:a2:f5:c8:59:ec:3e:e5:fc:15:0e:58:0f:00:51:
b7:6b:d4:6c:f2:ac:35:ec:ac:34:18:82:39:ea:86:
c8:84:60:2c:97:fa:78:4f:2b:18:a2:60:d6:3a:96:
4a:ff:0d:de:4f:b4:f4:c2:94:39:9f:8f:84:45:61:
81:de:73:24:3d:32:23:b8:5a:d6:2a:e3:3c:0a:8b:
0f:44:7c:74:d6:73:10:81:c3:22:8d:4d:57:14:13:
39:c1:77:2a:dc:b5:4a:54:7f:1a:87:c5:9a:b7:d8:
06:2b:fc:4a:12:5a:3d:84:b4:d6:e8:1d:cb:56:3d:
0e:f9:f3:cf:7d:a7:bd:b1:00:69:17:87:93:ba:02:
2a:fe:96:66:e6:a4:3f:3c:46:01:9e:19:4a:7d:51:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:03:17:69:1D:95:06:C5:DD:17:7E:DA:95:36:90:D4:F5:40:53:67
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b7:5a:53:e9:af:52:da:0b:81:90:29:4c:ef:fd:54:72:e1:
cc:d9:bc:60:68:99:59:50:6f:38:b1:c5:94:46:c3:29:9b:88:
85:3b:6a:33:f5:e3:9b:09:4c:8e:40:8f:6c:8d:e9:4a:c2:30:
3a:48:05:17:13:9c:5b:47:eb:d4:0f:bd:b4:45:9a:40:a1:88:
a2:d2:f6:cd:79:a9:8c:dc:6f:36:2c:3b:1e:2b:b2:75:1b:c4:
4e:bf:33:b6:c3:ae:e0:31:b3:0e:ca:71:ab:34:80:66:46:8e:
5e:37:a4:3c:15:04:d8:f3:43:2b:ca:ca:42:2c:fd:7b:3c:4a:
90:d2:b5:a7:20:76:bf:66:f5:44:ac:0f:93:f8:e8:e2:c4:67:
e5:97:93:b9:e0:99:ed:06:e1:53:9b:34:55:02:b5:c1:68:9b:
7a:12:f4:b3:06:ba:7d:8b:cb:40:04:42:7d:ac:40:ec:f7:e1:
9f:2f:ad:d4:99:d7:e1:ad:02:e2:b3:bc:28:e8:01:da:ca:d9:
86:9a:ec:b2:bb:bc:ed:be:58:ed:f4:a6:46:b9:1a:69:e3:3b:
ec:b1:dc:53:42:c5:71:c3:a1:40:90:b9:b9:24:94:3e:08:12:
1a:7c:15:c7:c7:70:72:b9:67:67:fb:2a:7f:bb:05:57:4a:4b:
bf:b0:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:39 2026 by rpki-client