Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: roLubRdrFgTDj3BWCrIzQHYEDlzIy9RHVWyiVVy1hns=
Subject key identifier: 2D:C8:49:91:6A:78:7C:0F:BA:88:DF:8C:0D:66:D7:C4:FE:67:2F:77
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019CAA8F8D90340708D1F1470A63E321C833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 1259
Signing time: Sun 01 Mar 2026 18:01:00 +0000
Manifest this update: Sun 01 Mar 2026 18:01:00 +0000
Manifest next update: Mon 02 Mar 2026 18:01:00 +0000
Files and hashes: 1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: 5e+7kCbbsgmj8yjE2Qg1/6o0chKkrS3pDbJyR7J0En4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:8d:90:34:07:08:d1:f1:47:0a:63:e3:21:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Mar 1 18:01:00 2026 GMT
Not After : Mar 2 18:01:00 2026 GMT
Subject: CN=2dc849916a787c0fba88df8c0d66d7c4fe672f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:fa:8c:02:12:b3:83:da:70:4f:46:b9:b9:
fe:aa:96:5b:a8:a7:ed:74:f0:be:0e:a3:80:fa:f6:
2c:de:06:6d:55:f5:f3:4b:97:87:cc:9e:88:c3:44:
92:19:bc:e9:71:37:94:f4:b9:8b:2d:d3:ba:b5:ea:
89:5a:9e:12:1a:d2:18:2c:df:70:63:77:53:e0:39:
5f:a9:aa:7d:7b:6e:37:cb:4b:3d:c6:3e:de:85:3f:
8a:1f:df:ae:58:a0:fd:ed:41:9b:b7:2c:eb:cb:f3:
0f:cd:7c:bf:10:8e:60:ed:42:a6:c6:41:47:4c:50:
15:e9:de:9c:44:55:21:77:97:b8:47:53:30:21:7d:
54:d7:25:60:ce:56:ad:d6:70:4a:4f:ff:cd:0d:11:
45:4a:cf:1a:61:aa:f0:a3:8d:a5:d1:a7:35:db:6c:
3b:3a:10:76:99:91:cd:83:ad:97:ce:1e:a8:aa:c6:
1f:05:65:3e:82:77:4a:f5:b4:0d:b5:a8:89:9a:f2:
f9:6c:f6:f4:1a:2c:3d:f6:db:05:bc:56:34:0d:a1:
3f:ae:e7:ea:5b:dd:f6:a1:d9:fa:12:24:62:21:7c:
c4:28:1b:41:f7:47:70:36:65:f6:af:9a:4a:ab:b3:
67:61:86:63:d1:92:1f:cf:97:5d:88:ec:e9:68:7f:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:49:91:6A:78:7C:0F:BA:88:DF:8C:0D:66:D7:C4:FE:67:2F:77
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:da:56:41:9d:d0:54:2a:33:44:19:0c:d3:53:f8:a8:1d:2a:
fb:9a:1c:fd:98:20:e3:e3:8a:1f:6f:6b:87:aa:9d:87:64:c3:
f6:4c:0c:79:3f:49:1e:d1:76:9e:94:85:8e:1a:ac:82:88:59:
86:91:9b:77:02:74:ad:03:35:e1:2d:67:ee:e4:a2:85:1a:09:
4e:85:d2:d0:22:64:ef:cb:c1:a0:d3:b5:28:59:ab:b2:a5:db:
43:ff:35:b6:9d:51:3a:71:41:c6:fd:07:c7:62:5a:2a:2b:eb:
48:d9:23:c2:87:64:d2:cd:b8:03:60:cb:2c:58:0a:cc:59:c9:
d5:66:3b:77:87:36:ff:9b:f6:55:90:fe:50:fb:d0:3d:74:6a:
52:a1:6d:29:d7:bf:e1:34:ba:40:fa:7c:0b:2d:f0:60:77:10:
95:a1:53:bc:cd:7f:59:2d:88:d9:53:b0:0f:28:64:e6:4a:c0:
40:75:e3:4c:f1:3c:7f:f6:51:e9:24:d5:fd:df:d8:6c:5e:5d:
b8:53:d8:9e:45:0b:6a:34:9b:c2:85:b3:47:9e:d0:f3:eb:0f:
5b:b9:3d:29:a9:53:2b:10:3e:13:c5:1f:c9:8b:2e:cf:e4:a2:
48:72:f3:44:df:e9:e3:fa:9e:60:24:58:bb:00:9f:ec:2f:6c:
92:b0:4b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:11 2026 by rpki-client