Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
File: UztG46ndW36oqL_aL247rRVQkRM.mft (raw, json)
Hash identifier: HmmB74npTcF6HFQ5If1jUjMjU7Bl0IuCHgArOiHKq/o=
Subject key identifier: 2A:29:C3:00:98:8F:44:E3:43:05:07:5E:4B:C3:F2:3F:EE:28:A8:19
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 019CAD5A3D7B7B7B266BD0EE775B714EB8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: Kioc6B7Fyfli6FCiujhE8Qm79C0.roa (hash: QvwIZ61NmPvndcfj0ICAM5kw0hGVe6xU34dEpUs0Jmk=)
2: UztG46ndW36oqL_aL247rRVQkRM.crl (hash: TH0qyVGJtDBFhiFhnKysa9iIBzL9gmhcB/zqvkLF4Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3d:7b:7b:7b:26:6b:d0:ee:77:5b:71:4e:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=2a29c300988f44e34305075e4bc3f23fee28a819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:92:28:8c:2a:d9:68:9a:32:97:76:c2:a4:
03:e1:7b:40:77:c9:67:73:f2:a1:25:17:2c:f4:e6:
0b:29:0e:0f:b6:0f:f8:87:22:36:bb:b1:2f:73:55:
d5:42:39:22:75:19:54:ed:51:24:d9:18:26:e4:25:
1a:6f:a5:c8:34:98:63:7b:fa:3e:37:91:dc:81:52:
30:8a:c1:2c:af:68:04:14:6a:82:37:cf:60:d7:81:
03:2a:ec:82:e0:52:53:c5:b3:70:ee:e7:ae:f6:f5:
b3:69:aa:1d:d4:e7:c0:c8:0c:99:7a:3b:75:3d:8d:
af:5f:60:a2:6a:be:d1:6b:05:f1:bf:a4:23:c8:99:
2c:e7:04:5d:4c:db:20:d6:12:ae:b3:e9:94:56:92:
ce:eb:75:16:04:e9:2b:3f:21:70:c3:54:11:a4:8d:
a3:d7:37:72:79:a7:b4:33:a0:f9:e2:d6:57:fb:54:
7e:7b:c9:85:86:f1:b9:3f:3b:fc:d4:cc:8a:74:fa:
28:40:72:30:46:8b:79:bb:f6:6e:62:eb:a2:4f:a2:
53:d0:24:02:0a:5f:01:54:f8:6d:32:06:48:a1:98:
1a:f6:cd:c5:f2:4d:ea:23:57:db:39:ac:79:b0:13:
74:db:73:26:80:ea:17:3e:a9:74:c2:05:a2:e1:21:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:29:C3:00:98:8F:44:E3:43:05:07:5E:4B:C3:F2:3F:EE:28:A8:19
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ca:3d:c7:2d:84:27:f8:4d:38:f3:c5:6a:3c:a4:d1:f0:33:
86:79:98:53:60:48:03:88:c1:bf:b3:ec:fb:ba:95:cb:48:80:
e0:20:f4:71:c2:0e:db:ca:fe:8d:f5:48:13:0a:76:e2:b4:d7:
1c:f9:48:97:6e:3e:f2:e7:a2:4e:ac:d6:e6:0d:ae:1a:70:6f:
e5:2d:c9:5f:75:e3:05:eb:28:74:f3:98:7b:70:e6:0c:df:86:
12:36:f2:a9:8a:ba:a4:f9:96:c7:a3:c7:a8:95:ac:bb:3e:0d:
1a:96:f2:02:a3:9d:e5:45:b9:df:3e:a4:e3:06:c9:23:54:72:
0d:e9:63:6a:ad:c7:50:42:ed:dc:88:b8:cf:54:39:cb:81:86:
f5:ee:be:68:f7:13:6f:f0:12:bc:e4:9e:8f:47:f9:14:82:0b:
f3:37:5e:d8:86:93:2a:04:63:32:f3:07:d2:e5:fc:75:8a:46:
19:a2:05:69:ef:65:0a:9d:f2:6a:bd:34:26:ab:bc:6a:25:5f:
5d:c6:1a:f4:c8:93:03:97:b5:33:eb:f7:4f:47:df:55:b8:2e:
c1:f4:41:84:f5:23:5e:17:34:37:72:d1:e5:ce:d9:3e:6e:01:
a5:c8:10:be:bb:14:39:32:59:ab:f9:56:2a:df:c0:a9:4e:fc:
12:06:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:55 2026 by rpki-client