Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: 18gaEhNVg342doT/X+VdUolABmTT3PDkaxmujKe7yEg=
Subject key identifier: 51:1A:0C:84:EF:7B:7B:25:D4:2F:36:EF:03:DE:A5:6B:EB:19:AA:6F
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019CABA25DDA315CD5CD06019A8EF3B2838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0CA9
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: fsWNXUicfsiv3f3FjQ9KxzUrZp0oIi/AFwNtKH87PT0=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5d:da:31:5c:d5:cd:06:01:9a:8e:f3:b2:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=511a0c84ef7b7b25d42f36ef03dea56beb19aa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:81:77:f1:14:e8:b8:9b:64:36:68:e9:92:
39:50:b7:0d:31:4d:dc:44:d8:f7:ef:35:68:68:5c:
b0:76:c0:6b:5f:a6:4c:61:f0:3d:f8:9c:0d:e3:00:
d2:c7:40:43:3c:8b:bf:38:3c:60:9d:b7:db:7c:6c:
d2:e5:c9:15:29:05:1f:4c:bd:57:d7:f3:9a:e3:ef:
65:a7:d5:4a:dd:12:aa:dc:d7:02:f9:6b:12:98:a5:
17:0b:47:5d:16:79:35:01:7d:32:38:6d:18:53:ba:
5b:3c:06:75:f6:62:a9:c4:af:52:90:64:a2:f5:68:
dc:11:6d:14:6f:85:20:59:85:ec:06:ea:a9:a5:9e:
1d:fe:d1:4a:17:80:8f:05:f3:7a:e1:f6:63:e5:b2:
e0:01:55:5e:40:0e:6c:79:d2:8a:d1:3e:d8:4a:de:
40:a5:c6:97:a1:e3:49:22:38:09:31:92:a6:58:47:
bf:e7:cf:10:c7:f3:4b:d7:e1:fd:0b:7c:7b:3a:6a:
44:18:a2:f1:3a:de:ab:f4:e9:85:aa:19:c5:69:b1:
e1:89:79:da:86:c4:c9:9a:0a:e0:6b:d0:84:ea:ff:
3a:b3:65:87:52:58:8a:8a:e2:5a:54:24:0e:6f:32:
b6:19:f3:05:b4:dc:54:a6:85:1d:2c:96:17:35:ba:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:0C:84:EF:7B:7B:25:D4:2F:36:EF:03:DE:A5:6B:EB:19:AA:6F
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:04:cb:7c:68:22:a2:9b:2d:fd:1f:09:b6:d4:7a:c4:cb:
28:dc:0c:c6:b4:6b:d1:29:14:0d:8c:23:47:6e:e2:46:d0:b8:
18:3f:64:df:16:f8:e9:90:9c:4b:fa:60:b1:32:30:84:4a:3d:
d4:b0:76:d3:95:64:e5:42:04:1e:02:00:db:67:1c:2e:cd:33:
0d:48:82:b0:94:18:bf:c9:c6:c5:f3:68:54:d7:4f:83:4b:c6:
2b:8e:6d:33:b9:4a:36:3a:49:8d:1f:fe:d8:df:4f:4a:ba:5d:
24:76:a4:58:4c:ab:af:ca:a1:53:3b:e2:16:8d:f7:48:ca:e1:
02:cc:d9:02:54:1c:46:12:31:74:6a:ce:d4:43:d0:55:b5:69:
de:b3:63:76:88:fd:a4:11:92:bc:96:79:4f:f8:d6:ef:9e:50:
7b:b6:28:cb:e5:76:64:20:45:3c:ad:fd:24:ee:1a:ce:ff:68:
8d:65:ad:55:ea:1a:e5:4d:68:83:e2:87:2b:43:9d:04:5a:0f:
ca:81:26:6c:eb:db:11:4b:f6:ef:3b:98:60:a6:ec:2a:7a:7e:
fd:3e:bb:6e:6f:c7:ef:80:aa:ca:ea:65:4e:9d:f2:65:28:f3:
86:eb:88:f3:2b:7a:91:08:22:8a:8e:03:49:c1:a6:d9:74:c3:
5e:f4:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:11 2026 by rpki-client