Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: qV+EYHoNUfxEk9Pf/YPdZL4tm+iG0Lv7XJnQf+8Wkjk=
Subject key identifier: 0C:DC:86:27:70:E0:49:B4:69:91:C3:81:7C:68:E6:2B:E0:0D:58:F2
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019CABA20C1E60BA7F3B0A92878B2C7EE902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 0A03
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (hash: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc=)
2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: dluAHPHCSyo8IPfnT/r+PrdAE2LdRnGTZ2U/DsQzF6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0c:1e:60:ba:7f:3b:0a:92:87:8b:2c:7e:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=0cdc862770e049b46991c3817c68e62be00d58f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:b1:0f:e5:a8:5d:11:b0:43:26:22:f6:91:
a1:49:b6:4c:6d:39:f3:27:c1:fb:03:be:b5:e3:37:
a2:3c:d7:bb:f5:52:a0:73:97:10:a4:c4:1a:bc:b9:
f0:a5:33:d3:64:68:d4:61:c5:04:27:89:6b:86:79:
0a:bf:ac:4d:a0:b7:8a:e6:32:26:60:56:7c:8b:22:
36:31:01:c8:fb:c8:a7:c0:ce:7a:a1:16:28:5f:c5:
59:ba:c7:86:05:37:e5:3b:f2:39:e0:2e:14:1b:1c:
f8:34:aa:16:a4:71:e0:a6:e9:c1:43:16:33:09:f6:
ad:4c:19:47:2f:67:c5:c1:09:42:53:80:24:80:d0:
f1:a7:3c:f6:b6:05:a9:4d:dd:f8:90:91:06:7c:f9:
2d:24:1f:61:5c:bd:6a:e9:9c:3c:28:fa:24:9d:13:
10:85:de:43:eb:35:34:58:ed:f7:d0:a8:83:71:2b:
26:75:ca:35:96:70:d4:45:30:29:00:58:21:11:37:
39:5e:96:7a:09:c2:99:4e:26:d9:d9:6b:fd:8f:4f:
40:f6:85:4b:49:ba:e3:12:95:dd:d7:86:f4:19:00:
de:b7:bf:04:4c:1d:aa:c3:c4:c7:3d:7b:a6:7d:7a:
80:52:cb:03:c9:9b:f0:27:ab:a4:5a:25:42:39:f5:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DC:86:27:70:E0:49:B4:69:91:C3:81:7C:68:E6:2B:E0:0D:58:F2
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:05:50:d4:7d:f6:77:99:98:dd:e2:5e:2d:6b:21:eb:6b:
47:3b:58:b0:5f:38:c0:b8:65:57:ce:74:17:fd:0a:17:16:a0:
03:f1:18:51:c6:1b:cd:9d:16:40:9a:54:49:8b:be:5b:19:aa:
0e:81:45:bb:b6:6c:57:c7:bc:71:13:15:d4:09:3b:64:d2:5a:
27:ea:8c:32:33:f7:07:1d:a6:b9:30:84:d1:95:ec:54:e9:6a:
50:45:bb:5a:8b:36:01:59:c2:35:36:98:cc:8b:d1:74:ab:f0:
d8:2b:9e:87:00:e8:9b:94:fa:5d:91:51:5f:14:2a:c3:ba:f1:
d9:a1:e9:4f:67:db:1a:b2:ca:5a:a2:61:6a:65:78:b2:e9:05:
a0:02:95:92:2f:48:54:66:80:73:25:71:09:02:70:83:c1:56:
c5:ef:81:fa:70:1e:25:92:5f:2d:b7:64:93:26:96:9d:43:0d:
6d:da:f8:94:46:8a:16:0a:67:12:83:0a:51:79:d3:9f:42:89:
16:a9:64:7d:ee:1b:28:f9:e7:9b:f6:d6:ef:fd:07:30:94:a9:
2a:d4:16:cf:85:53:7f:8f:dc:cf:c3:03:36:4f:61:af:27:d3:
b3:43:e7:a6:c3:4a:c1:37:ba:79:34:31:43:f4:c4:fd:65:62:
cf:16:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:02 2026 by rpki-client