Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: dUlY8WEQK2RUUxaNJ4dvYTg1nkp8HoXFbYzGdQFObSU=
Subject key identifier: 52:DA:B7:C3:80:F1:2D:B1:EC:E4:2B:68:5B:8F:E7:11:25:2D:FC:BF
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019CAE6C2D4FD7BD36C157C7D67C36771494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:50 +0000
Manifest this update: Mon 02 Mar 2026 12:00:50 +0000
Manifest next update: Tue 03 Mar 2026 12:00:50 +0000
Files and hashes: 1: 5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa (hash: 3BzgmGQESa9eTcM0ODtiMc7GJiSKtttHkfqVjBBtvdQ=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: 4IQEg3eENTSkvAFfDvmax4Mc2FnnvHGjlqz+liP+TMk=)
3: wJ7_Xvzpdt1CtacBkZyFEU6Rq8w.roa (hash: mYKkkRY5nHeUPjxezloUDprRN7Wi7BEuCqiUJh2cLUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:2d:4f:d7:bd:36:c1:57:c7:d6:7c:36:77:14:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Mar 2 12:00:50 2026 GMT
Not After : Mar 3 12:00:50 2026 GMT
Subject: CN=52dab7c380f12db1ece42b685b8fe711252dfcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:d1:4a:fb:c1:83:a2:53:bf:06:8c:32:a9:
19:6f:3d:49:1a:e5:d8:ea:21:cc:5b:ad:d0:6c:aa:
47:3f:bb:8c:44:d8:39:9c:00:4b:9c:4b:aa:e2:fd:
0a:81:46:f8:3f:21:3a:ec:68:ef:2e:10:84:93:b0:
0d:9b:06:4b:d3:6e:9f:e4:79:17:6f:ff:02:47:f9:
15:8a:0e:b3:e6:5d:60:75:4f:bf:78:21:28:78:11:
99:35:29:97:3b:9d:02:f5:37:c5:1f:d3:2c:75:ef:
97:eb:03:c5:67:d9:ba:0d:42:3d:ef:d3:5a:56:3a:
9e:8a:7f:1c:50:60:78:1a:81:9e:b6:7f:23:6b:7e:
78:68:fb:9f:46:5d:87:91:70:70:fc:3f:c8:d3:48:
d8:b9:63:ca:2f:e9:4d:50:63:22:2e:11:e3:8b:c7:
6f:67:fc:dc:70:3b:50:57:63:e8:28:08:17:0d:89:
bf:dd:38:1a:04:19:23:4f:f2:f4:0a:2b:ea:eb:ff:
3a:33:c9:bd:c1:23:2a:e2:cb:bf:64:71:34:31:4a:
f4:7f:68:09:ad:b5:90:35:0d:16:67:5b:ef:60:57:
6b:b4:00:c1:91:8a:35:f2:b3:dd:15:9f:47:e3:5c:
12:35:38:90:50:ae:9d:e9:08:bc:d3:5d:c2:90:0e:
a8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DA:B7:C3:80:F1:2D:B1:EC:E4:2B:68:5B:8F:E7:11:25:2D:FC:BF
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:4e:a9:55:50:97:d5:92:dc:d9:4b:9e:5d:77:33:d3:57:
73:79:9f:e7:6e:e3:6e:ff:94:aa:79:57:e9:e7:f2:15:67:73:
54:10:96:2b:fb:33:26:0d:76:33:f9:59:1e:d8:99:42:d6:fb:
00:54:21:e2:12:ee:32:4e:75:70:a3:6e:2c:d4:31:0e:ed:71:
8a:fe:48:04:1f:7f:02:69:bc:f2:36:cf:36:98:0b:44:fe:e4:
1e:dc:4e:c9:9d:41:a4:4e:da:1c:24:ab:49:56:a2:b6:27:ee:
65:ae:bd:b5:63:a4:73:a2:31:3b:dd:ff:d7:fc:1b:bd:2b:56:
2b:d9:de:d6:06:3a:b0:31:d2:86:99:91:03:c4:1b:84:51:83:
93:0a:cd:a2:2e:18:a9:1a:15:03:c1:5d:03:5d:75:42:65:80:
3c:da:75:f7:48:34:46:43:b6:04:3c:92:95:3d:fb:e6:62:f5:
4b:42:26:2f:67:bc:71:36:29:63:cd:54:3c:a8:b7:8a:16:45:
bd:8e:77:32:69:dc:cc:b1:6d:32:f3:03:95:97:68:7c:a3:b2:
c3:41:93:c0:6c:ac:57:a0:25:c6:9b:ea:1c:63:5a:67:f4:cb:
6d:0f:06:70:bd:27:af:7d:38:65:71:b3:fe:64:3f:fb:6e:88:
d6:a0:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:48 2026 by rpki-client