Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: IRzCt8rMj0QYUhNTEX8glnWXLAtwJizQJj92a0BNPCE=
Subject key identifier: 27:C3:C8:3A:1E:39:91:67:53:6C:D3:D7:98:64:F5:CF:65:4A:47:38
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 019CAD228391C8AECAFEC9B16FB4D1356554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 03EA
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: AHdn5PQ8Faho2Ar5IZyQUqtTxu125tHLXDzaOZdStNo=)
2: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (hash: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI=)
3: ra_bl9yXslRJGJzxTDV_d-BlUpQ.roa (hash: wtAAXjDyWZtJfFcEXNFbtV3UJ/ZOa4GX5loIbK1mn74=)
4: wFmuZt6OG-oR7DBeq01Ww8HvPa4.roa (hash: a0H1kPyDShFzTVMDinn/3X1ONbp+NjLhweJzA1FQdjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:83:91:c8:ae:ca:fe:c9:b1:6f:b4:d1:35:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=27c3c83a1e399167536cd3d79864f5cf654a4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:77:3b:0e:60:b8:76:ac:87:ee:7b:3c:7c:
75:af:87:aa:65:e9:2c:98:99:07:db:36:b8:a9:44:
88:64:1d:5f:ed:64:30:21:7e:9e:a8:4a:17:d9:0b:
02:77:32:1f:ff:c4:98:93:ed:97:21:03:18:01:68:
e6:b2:99:30:57:d9:97:cc:60:19:9b:84:86:9f:ba:
c7:2d:d1:be:dd:25:2a:86:b3:6d:a0:f2:41:2b:a5:
d9:bf:16:50:0d:58:0c:eb:b1:d9:fa:98:6c:39:c8:
c5:c1:d9:08:c7:2c:57:eb:23:41:a5:56:cc:f8:f7:
03:18:4f:fb:c9:31:24:6c:31:58:87:61:59:55:8b:
f6:10:be:36:9f:66:8d:44:57:d6:eb:6c:1c:66:a5:
4f:8a:93:b1:c0:c8:6a:27:76:fb:86:09:4c:0c:84:
09:b8:26:5f:09:cf:39:ce:ec:6b:cb:9f:10:c0:6d:
91:3c:24:58:6e:73:82:ec:d4:51:c6:f5:e9:0d:4b:
84:67:58:f4:e6:01:43:51:c6:dc:95:7a:90:86:41:
89:dc:84:32:69:63:ab:1e:d1:ef:cb:84:cb:51:d2:
f6:4b:c4:90:0a:6d:fb:1c:30:01:7d:6e:61:f4:c9:
31:4a:1c:a3:5d:02:46:9d:3a:fb:9b:d8:e6:80:be:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:C8:3A:1E:39:91:67:53:6C:D3:D7:98:64:F5:CF:65:4A:47:38
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:f8:0a:73:2e:f9:18:74:39:01:9a:91:f1:de:27:77:7f:
93:72:ae:d8:ff:64:0d:d0:69:8e:b0:50:33:8b:e0:07:0e:31:
13:19:30:ca:b7:a5:3b:d7:36:03:60:1c:c5:02:a3:11:88:b3:
80:b0:5a:df:98:1a:79:c6:b2:94:77:d9:e8:9e:25:3c:73:18:
bf:b2:0c:96:9c:4b:4e:54:ec:2a:89:70:7c:5b:e9:39:4c:46:
77:aa:1a:bc:2d:24:0c:1d:f9:90:7d:db:39:e4:d3:ee:77:ed:
8d:96:13:9b:af:64:f0:0e:96:41:ac:9d:94:48:a0:f3:5f:ec:
f7:47:60:9a:31:0e:87:d4:4c:c4:b1:d9:ff:49:b4:3b:af:cb:
9f:82:a5:c0:70:b0:d2:62:ae:f0:ab:aa:52:1d:7c:82:16:97:
1a:f8:e4:72:7d:47:4f:97:14:56:c1:63:34:70:b9:17:40:ec:
b2:ad:b8:a8:97:88:e7:56:3b:57:16:57:b9:e0:3b:43:80:96:
09:a9:f5:43:3f:86:f1:4b:5c:17:c5:4d:09:b0:8a:0e:c7:69:
53:62:d1:4f:b3:03:35:a1:0e:b7:ce:8f:da:60:21:0d:ab:a7:
ee:6d:80:c8:3b:c3:74:f9:43:32:eb:ec:9b:6d:bc:35:a8:15:
e9:e5:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:14 2026 by rpki-client