Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: GuuFyk1uovKG75LnEubCaFVU3AmjtsNL9X5ws+bFzNU=
Subject key identifier: 6D:AB:9A:04:C2:C8:2B:52:29:F4:83:DA:D2:A0:5D:9A:3F:DB:51:55
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019CADFE513CBECEF9573B3BBC6774EECD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0ED7
Signing time: Mon 02 Mar 2026 10:00:51 +0000
Manifest this update: Mon 02 Mar 2026 10:00:51 +0000
Manifest next update: Tue 03 Mar 2026 10:00:51 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: vtS7AdQ56+5ztU7sM1gJpAHwLkXx11sJqtYcMTTLAmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:51:3c:be:ce:f9:57:3b:3b:bc:67:74:ee:cd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Mar 2 10:00:51 2026 GMT
Not After : Mar 3 10:00:51 2026 GMT
Subject: CN=6dab9a04c2c82b5229f483dad2a05d9a3fdb5155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:5b:4a:b5:aa:b7:0e:7d:73:07:fa:39:c1:
76:0e:cd:c3:c3:49:2a:91:f4:e6:64:a8:e2:05:4a:
77:11:3e:16:14:6e:e3:c3:f3:23:80:bb:52:a7:48:
19:9b:40:6e:89:1c:17:94:00:02:18:89:b7:8e:87:
29:de:62:b1:7a:05:ac:54:aa:04:ae:4e:7c:24:99:
71:e2:2c:bb:83:9c:e6:2e:18:14:08:30:5a:6d:80:
a1:5e:c8:e3:c1:5b:7a:02:23:9e:ae:36:51:c1:6e:
3d:67:d5:2d:a3:6c:28:43:e1:20:8a:1a:e7:45:1f:
28:92:be:e3:b4:19:15:2d:89:ff:8f:4f:84:84:91:
6a:f3:ad:33:7e:04:0d:02:1a:58:52:65:68:5b:dd:
5c:97:11:ea:0d:99:4f:77:27:2d:70:84:23:53:0c:
b4:e6:21:56:3f:91:b8:dd:d0:af:b0:dd:35:50:ca:
c8:64:47:c6:a4:98:f0:56:f3:12:2f:61:dc:d5:98:
2f:cb:8d:d0:70:6e:c4:ed:17:20:be:8b:a6:52:1c:
d6:c6:cf:e3:7a:b3:80:9d:82:26:de:10:fe:23:0c:
58:e3:83:03:ef:62:5b:5a:bb:b7:6f:46:28:83:5a:
be:13:88:6e:99:bd:b6:21:96:8c:02:60:72:2d:68:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:9A:04:C2:C8:2B:52:29:F4:83:DA:D2:A0:5D:9A:3F:DB:51:55
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:53:c7:e4:4a:d2:8c:3d:10:ca:4d:48:6c:4d:fb:f2:86:96:
f4:b8:d7:df:9f:95:d0:3b:7f:8e:d1:80:2a:06:a3:22:71:a2:
62:1b:fc:ae:88:14:99:ad:a1:14:63:05:48:44:c9:8b:a9:75:
6e:b7:11:5f:02:cd:b5:46:09:fd:95:7d:c6:c1:c8:22:a8:02:
3f:3b:2e:dc:d1:12:fa:4d:ae:08:32:08:c2:ee:4b:68:aa:d1:
55:83:5a:d2:a9:8d:b4:43:18:9c:6b:2a:a1:58:43:00:b4:52:
c6:54:71:3d:cb:4b:fb:38:86:c7:53:ff:a4:43:f4:17:3c:27:
98:e6:ec:56:fa:ab:c8:fe:f3:fd:ee:07:27:31:44:2c:10:01:
a0:13:64:d6:d2:a4:be:03:09:fe:60:98:9f:ee:0e:3a:4e:b6:
29:e9:81:7c:14:6b:6b:ec:f0:12:52:3c:34:e6:51:01:9a:38:
87:0e:06:c5:eb:c0:c3:45:fd:5e:16:66:4e:dc:c7:41:79:af:
e2:00:d5:35:c2:a4:5b:34:fb:56:8e:8b:e0:1a:7e:61:6f:9e:
67:da:15:9c:10:bf:70:b0:e1:be:4f:71:15:56:ca:72:5e:dd:
68:58:c0:d9:e8:20:28:e8:bc:c9:b1:0d:a8:37:0c:06:c9:d5:
2d:cd:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:02 2026 by rpki-client