Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: ePpsDEIycsdjBeFQEDwKKk2K0buzL0eT5O2yCLcnQUk=
Subject key identifier: 4A:C3:BD:95:41:64:BC:AB:EF:E0:49:6A:94:B0:24:BC:BC:7D:D6:A5
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019CAE35F0BA901DD1F528F164C3196D9B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0C55
Signing time: Mon 02 Mar 2026 11:01:36 +0000
Manifest this update: Mon 02 Mar 2026 11:01:36 +0000
Manifest next update: Tue 03 Mar 2026 11:01:36 +0000
Files and hashes: 1: HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa (hash: OQoHpJCgdLNrLAKiPR4smDKveNyBf+LPF6Xo5G3zvkg=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: p9tAtZ1PEuuXSZRMJVw1jHyFMR4/Nqo7c4YVYLpMopU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f0:ba:90:1d:d1:f5:28:f1:64:c3:19:6d:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Mar 2 11:01:36 2026 GMT
Not After : Mar 3 11:01:36 2026 GMT
Subject: CN=4ac3bd954164bcabefe0496a94b024bcbc7dd6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:99:50:f9:64:31:17:d9:40:14:ed:d6:c1:
16:66:12:41:2e:3c:09:e0:1f:97:fd:b5:77:0c:62:
8f:fa:53:41:56:37:6a:f9:1e:bc:90:9f:f1:9c:f6:
70:6d:21:22:a6:21:3f:79:ba:f9:c4:24:da:09:07:
c5:9f:7c:47:14:df:e8:f2:01:15:90:9b:c3:66:90:
c6:09:0e:c9:d9:34:72:50:11:93:ca:57:c0:fb:bd:
a1:47:7a:ee:12:39:41:82:2a:5c:58:09:db:9a:e7:
af:f1:37:ef:62:77:88:67:56:08:55:4c:a9:85:cc:
9e:a6:30:e0:be:3e:56:fb:af:de:61:dc:0c:d9:1f:
79:99:c1:cf:e7:18:90:08:32:ed:04:d8:5c:45:08:
90:42:e0:2b:e4:1a:2c:d7:8e:51:9c:7c:30:3a:60:
a7:e5:eb:19:c7:c8:d6:ff:20:2f:06:d4:82:57:b6:
3f:f2:97:79:38:b8:f8:43:fe:35:c0:fe:e4:03:86:
cc:73:4a:6a:c3:01:df:d3:3f:ae:15:b3:e6:78:f9:
48:31:da:05:a4:c7:65:7d:b1:99:3c:cf:f6:1c:cf:
91:9c:a1:09:9a:d4:a0:e6:64:dd:76:2d:6a:53:13:
f4:93:6f:c3:95:81:a6:b8:3e:a8:be:46:b8:d4:30:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:BD:95:41:64:BC:AB:EF:E0:49:6A:94:B0:24:BC:BC:7D:D6:A5
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4b:2f:0d:ca:a7:45:15:85:c6:30:0e:6f:95:ca:87:d1:4a:
68:89:8b:57:18:f9:9e:34:96:21:68:d0:3a:d8:d9:9c:4d:e5:
59:c8:76:8f:f0:b0:fc:fd:59:8e:c6:94:d3:40:4c:fe:0a:58:
94:62:67:69:99:21:95:b6:16:85:c2:9c:08:af:11:f9:6d:3d:
3d:21:ec:5c:b6:76:f4:9a:81:4c:65:41:fa:8b:59:82:e1:7e:
fd:97:38:92:75:79:e6:8a:3a:b1:4c:fd:9e:d7:f9:c8:8a:ad:
05:38:f7:ad:bd:34:64:d2:f3:ed:69:19:d8:3d:7e:53:99:ec:
5c:24:40:c1:e4:21:48:b9:0b:26:f4:d9:7f:15:cc:d0:85:86:
02:df:8a:ca:9b:fb:0d:50:67:02:64:cc:ce:3e:45:f3:c2:b0:
8f:32:d7:9c:31:98:16:f9:fd:ee:88:98:50:32:24:b7:52:22:
1f:ac:9f:04:8a:c0:7a:c8:fa:84:2b:9d:cb:cd:4d:ba:51:b9:
27:98:5a:14:d0:78:80:10:f5:f0:e5:e0:00:e5:df:ba:ea:60:
7d:88:18:7b:67:57:4f:d6:fe:ae:63:ad:1d:9a:9e:b4:38:7d:
d6:1f:4a:20:88:67:43:32:15:3f:47:a3:2c:a5:0f:84:5b:6e:
3d:0b:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:31 2026 by rpki-client