Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: FExGnyLtgLMNd88tJVPXXPdRLiwhokkxn/eGQcJKtOM=
Subject key identifier: 27:32:C3:EF:46:E0:CF:68:06:F5:90:3F:83:63:10:96:BE:AB:AF:AB
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019CABD91282A8D06DB6D65E8CE9592BE7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 081C
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: U1OgyFWpYB0xgt1zUe_Xabq5QUk.roa (hash: FE6pVOLnYWKz4tHW+KV6wVdY9LEvvCCMY15EnpTO5NU=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: sZOmH0SHP1Rz+i0ig/PfeTCmQGM8DYSUp1Q+pOzj4Sw=)
3: ZiID9bA4kVJXaS6I_e7XfY_pEWQ.roa (hash: Si+JLMLd7OiqxpqpbnGko1NX7RV2TJpWFgx4YxD8Q9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:82:a8:d0:6d:b6:d6:5e:8c:e9:59:2b:e7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=2732c3ef46e0cf6806f5903f83631096beabafab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:f1:89:3b:12:66:9c:2a:44:01:74:4a:62:
61:90:ca:82:65:6d:29:e9:c9:86:55:7b:14:5c:b6:
21:bb:b5:f1:96:d9:e5:7f:02:0b:78:b3:6e:67:cc:
3b:33:d8:4d:16:1b:68:03:e2:69:cf:62:ff:a3:5f:
19:57:9e:64:f7:1d:bc:fa:e6:73:6b:62:ba:72:19:
bb:63:46:4e:a6:99:5d:e8:7e:a8:ff:4d:0c:72:9d:
4a:37:f4:c9:78:4d:16:ab:ce:e0:b2:b1:0a:56:1a:
f9:d2:d5:16:c7:28:0a:58:f4:8f:ea:ea:ee:fe:7c:
e3:12:92:2f:97:66:73:6b:b7:6b:79:a4:88:26:be:
91:4c:1c:de:ba:a7:90:0f:c5:2b:ea:da:ba:c2:a5:
ee:13:10:cb:5e:ee:d3:e8:fe:00:0e:65:98:bf:ba:
6d:dd:33:ce:93:2f:5b:f6:80:de:ab:d9:b7:66:6f:
ca:b3:85:31:06:ed:b3:80:3f:98:d3:1b:41:a8:3b:
d9:e9:b8:52:21:b3:57:a8:d1:d0:b8:96:67:ef:15:
99:2e:ef:05:6b:4a:e0:44:f8:3f:91:e8:c2:81:c1:
0a:8a:0a:7f:3f:72:f8:cf:f0:0e:de:f9:1b:57:e0:
08:7e:b7:36:86:a5:53:af:d4:57:65:44:22:ab:3a:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:C3:EF:46:E0:CF:68:06:F5:90:3F:83:63:10:96:BE:AB:AF:AB
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:65:b8:f7:b6:e3:4c:d6:93:e8:8f:7c:55:5e:59:98:c1:
40:f2:5b:f6:19:b9:87:9d:92:c0:54:40:40:9c:ee:e7:c2:36:
a9:39:79:dd:91:56:04:d1:e0:ba:e0:3d:3b:0f:d3:d3:f9:3d:
6f:7e:6e:f0:7b:bd:b1:f9:7a:42:69:83:90:ff:fc:a4:c1:af:
fd:12:6e:18:8c:d8:8a:d8:69:51:38:92:39:e2:94:23:69:90:
79:ce:9f:43:d8:f0:eb:47:c2:5c:83:55:57:58:e6:70:19:26:
a3:f4:ca:4a:f0:da:ec:af:31:7b:00:40:61:cc:aa:46:00:9f:
e2:f5:c9:1f:72:7d:2d:a5:a9:43:12:6a:c3:43:73:35:e6:70:
ef:d1:dd:c5:bd:85:90:f4:68:f5:90:97:4d:9b:ec:d4:d3:9c:
a6:eb:bd:d8:a7:03:fd:72:b2:64:0a:63:bc:1d:25:8e:2b:b7:
88:10:f6:c0:d9:08:37:43:e4:05:9a:7c:30:b6:20:4a:96:2b:
10:e5:f3:60:81:d3:ac:d2:90:26:e6:59:1c:53:c9:83:4a:8c:
97:43:f0:be:00:e3:56:c1:f3:13:90:3f:88:d2:02:0f:cc:45:
e4:61:92:fb:f9:2c:cc:4f:2d:eb:40:26:1c:af:af:8c:28:06:
6d:da:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:13 2026 by rpki-client