Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: 4gY/U/gAhgg4jl1YZCybn9vhUyapZmiNQf9lyj4y9Gk=
Subject key identifier: 1F:F5:98:75:60:35:D7:8C:C8:F8:57:CF:BD:07:FB:77:1D:D2:3B:1A
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019CA9EABA9230CCEC1D4B4B6160EA1D0292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 16F6
Signing time: Sun 01 Mar 2026 15:00:58 +0000
Manifest this update: Sun 01 Mar 2026 15:00:58 +0000
Manifest next update: Mon 02 Mar 2026 15:00:58 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: 5ca2OxowJYSgHaZNRcyvjBY8Uj7g6LQ9j2C6P4P0Pz4=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:ba:92:30:cc:ec:1d:4b:4b:61:60:ea:1d:02:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Mar 1 15:00:58 2026 GMT
Not After : Mar 2 15:00:58 2026 GMT
Subject: CN=1ff598756035d78cc8f857cfbd07fb771dd23b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:8b:be:2c:b3:70:3b:a3:e1:0b:c1:48:7f:
38:15:ef:d8:06:22:e0:9e:99:10:f5:04:ae:ff:7c:
c1:f1:b4:60:1b:44:d8:61:07:a8:64:23:e8:a7:f8:
46:8d:84:90:0b:a9:71:b1:34:93:4d:81:c3:60:b8:
b6:bf:3c:90:21:2d:68:4c:44:57:27:26:6f:f7:0a:
d3:54:fb:b0:5b:2a:da:ee:4a:3b:84:98:f8:0a:74:
a5:fe:6f:31:72:04:ce:58:f0:1f:12:47:ad:8e:e1:
25:98:22:3a:db:41:15:27:82:8c:c3:41:10:79:08:
0a:b6:0c:b2:6e:6d:25:94:36:a7:ee:47:08:80:73:
2b:a9:b9:c7:c2:01:f4:ae:5b:cf:c5:27:cb:db:f7:
09:46:3e:d0:8c:a6:bd:b2:27:07:b1:e9:55:f1:17:
ba:b5:a2:cd:68:8c:e9:db:4c:e9:e9:07:10:78:b8:
ba:0f:c0:8e:a4:cc:f4:cd:b9:f2:67:2b:91:37:6d:
aa:43:32:fb:dd:63:55:5f:a2:00:70:e6:1a:b9:9d:
cb:b1:3a:09:34:96:56:0a:48:c0:53:27:23:1c:02:
2d:f0:6b:bc:be:fa:93:02:25:45:2e:6f:24:7f:83:
99:2a:47:db:ba:f3:ca:27:02:94:40:30:e8:0a:17:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F5:98:75:60:35:D7:8C:C8:F8:57:CF:BD:07:FB:77:1D:D2:3B:1A
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:b5:bd:5f:56:c1:b0:44:04:a2:25:ed:81:98:45:82:d6:
99:c4:f4:19:91:61:2e:b6:7f:48:68:57:76:c7:1c:94:75:b6:
16:6c:b5:a9:e2:65:a6:17:8c:1f:1f:0e:17:79:66:c9:f6:62:
95:1c:c5:80:62:24:a0:6f:7b:8d:a6:73:4b:bc:79:14:aa:3d:
16:56:b9:37:ac:95:ef:b3:43:0d:f5:99:73:01:53:0f:8f:a4:
95:5d:f6:76:9d:da:27:a7:94:4d:b4:1f:26:e7:16:15:fe:3b:
80:36:a3:d4:2d:c7:36:2a:56:bf:cd:42:09:34:77:a2:dd:17:
93:da:fe:43:22:32:da:99:13:40:88:08:c5:c8:09:f7:db:96:
f8:68:b9:90:e0:10:fc:60:18:6e:2c:a0:31:b6:f1:78:05:4d:
a2:39:21:35:9a:7e:fc:aa:23:03:b0:3e:94:fd:5e:1c:1a:a1:
38:cf:30:7a:6f:8e:f4:85:57:12:73:29:61:94:7a:fb:a7:b2:
07:47:78:91:b4:c2:b4:2b:90:76:89:18:d2:3b:4e:92:11:14:
6d:84:7f:30:d2:33:16:aa:cf:81:8a:f9:16:bc:c9:2a:66:dd:
b9:e0:be:f0:09:00:8c:0c:4c:e2:d7:98:ba:5e:9c:3c:e5:28:
38:fe:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:13 2026 by rpki-client