Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: MKaSfq57ECWGOwlCJbSATgxSSjqPzVdd5MYujsRI1MU=
Subject key identifier: E4:32:7F:E0:64:F8:29:D4:18:5F:2C:80:AC:2D:01:2F:51:7D:E3:10
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019CAC467E52B5015A8D89F05D83631F0EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 0354
Signing time: Mon 02 Mar 2026 02:00:26 +0000
Manifest this update: Mon 02 Mar 2026 02:00:26 +0000
Manifest next update: Tue 03 Mar 2026 02:00:26 +0000
Files and hashes: 1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: N0ahRVif+2wGpHtcxBDReW71wy44RkF7CDOgH7rWzs8=)
2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:7e:52:b5:01:5a:8d:89:f0:5d:83:63:1f:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Mar 2 02:00:26 2026 GMT
Not After : Mar 3 02:00:26 2026 GMT
Subject: CN=e4327fe064f829d4185f2c80ac2d012f517de310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:ae:96:ea:5d:db:68:df:9c:96:65:84:39:
f7:4d:c3:80:3b:35:28:86:46:d4:3c:31:ad:0e:ed:
b0:8f:0b:7c:fd:1b:70:3a:55:cb:32:30:58:8f:a4:
cf:57:2b:84:31:b7:13:64:81:27:e3:74:18:95:7d:
a6:5f:3c:2f:db:cc:43:78:f5:86:67:44:45:af:08:
ea:1c:e9:24:e7:ac:a4:43:37:15:1b:fa:1e:63:3d:
37:1f:ce:30:6a:41:71:3e:18:3b:2a:74:c8:56:53:
38:43:be:60:75:ab:e2:02:87:71:aa:3d:1b:f9:97:
4a:f8:26:e3:29:ba:ff:72:13:57:fc:05:48:89:e8:
27:4c:1d:ca:fd:ee:5d:0e:b3:53:e6:4e:22:32:0e:
77:77:15:09:87:56:1a:01:41:c9:0b:a0:77:8e:eb:
4c:98:a3:64:d2:5e:5e:e7:18:bf:1a:9a:7c:1b:e3:
67:a7:9d:91:b7:04:c4:2f:3d:ab:94:e6:1e:09:e2:
65:e8:c6:1f:c3:e4:59:b8:49:e1:0c:8a:58:b7:d0:
f2:7e:54:de:0a:c7:cd:eb:5d:05:fe:b2:8a:b5:d9:
b1:7a:a1:e9:e5:a7:b0:14:f8:c7:85:4e:ea:87:30:
e0:b3:87:de:1d:b4:e4:b1:68:5e:e6:2a:08:7e:cc:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:7F:E0:64:F8:29:D4:18:5F:2C:80:AC:2D:01:2F:51:7D:E3:10
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c8:23:b1:88:c5:a4:2f:83:e4:59:6c:c9:9e:65:c9:4f:44:
9e:d9:09:de:90:f9:9f:61:bd:9a:74:4f:54:f2:35:56:a6:2f:
36:76:70:55:26:3b:c5:1f:d1:bb:45:86:4d:cb:97:ec:f8:ef:
e8:f3:f3:c7:f5:88:bf:58:ab:51:8e:f8:ab:84:22:51:ef:2e:
93:e2:09:28:23:40:c0:f7:f5:33:89:43:3c:ec:b0:d5:8d:aa:
b8:37:d3:9e:ee:cd:65:57:03:d3:37:d1:ce:14:ef:1a:f3:12:
8b:4a:99:76:d3:31:96:bc:8b:73:fa:f4:b2:ed:93:67:92:dc:
be:0d:16:61:2b:88:9e:40:e1:78:02:cf:28:56:80:7b:1c:37:
44:cf:e3:75:f8:91:49:10:1d:c1:74:66:0a:4d:47:09:48:27:
f1:ad:7f:ec:b0:54:53:89:d1:59:47:f2:60:d9:5f:cc:0f:6e:
13:a8:b7:3a:fa:dc:4b:b2:a3:7e:8b:46:62:b9:bf:86:e7:0e:
5c:b2:2e:15:4c:df:4b:48:c3:fc:b6:f9:ad:64:98:f9:44:39:
22:5d:17:cc:80:81:aa:3e:de:60:01:f2:69:0b:d0:34:13:fe:
f8:ff:01:74:ee:9a:d2:5c:48:01:f3:66:a7:d2:d5:d2:57:71:
56:c2:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:12 2026 by rpki-client