Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: XeNm2WEr01rDd6h62CA6u6urKJX48/d3JAarZZWwQnM=
Subject key identifier: 1F:6C:F3:09:59:1A:11:BD:6B:39:DF:16:05:18:E0:9B:33:C6:CF:77
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 019CAE35196047C7AA7EFF62D3DEED646A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:41 +0000
Manifest this update: Mon 02 Mar 2026 11:00:41 +0000
Manifest next update: Tue 03 Mar 2026 11:00:41 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: cRctRbJur0/yBFTbOWyoUxa+qEFIbyKmkDE+NSri8Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:19:60:47:c7:aa:7e:ff:62:d3:de:ed:64:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Mar 2 11:00:41 2026 GMT
Not After : Mar 3 11:00:41 2026 GMT
Subject: CN=1f6cf309591a11bd6b39df160518e09b33c6cf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:90:44:48:12:c3:b1:3c:6e:f2:9a:6a:c5:
2d:81:f6:91:1d:6f:21:2c:a7:6a:f4:92:5a:82:ae:
4c:de:a9:76:47:a0:f8:66:8d:69:0b:e2:40:b4:30:
c0:11:33:b6:57:2f:94:25:5c:c8:e4:82:a5:59:41:
8a:7c:bf:f3:45:d1:ac:16:88:e4:d8:b2:26:ac:96:
86:70:aa:5b:f1:62:7d:c4:6a:fb:71:dc:fe:3d:f4:
55:b3:70:71:78:e5:ec:83:b3:05:90:df:c0:b0:44:
ac:cd:a4:0a:ee:1c:16:51:cc:13:00:65:a4:bc:d8:
a7:1c:61:73:e5:fe:b3:e9:be:ad:fd:88:81:52:6f:
db:95:ed:95:6f:0d:b4:ed:2f:3e:70:04:9d:be:3f:
e8:e4:7f:27:3f:c1:03:e2:d0:73:37:6f:85:f4:e9:
59:97:77:42:6d:c2:d3:bf:94:f8:c4:cb:55:fd:ba:
7c:39:4a:07:23:67:a0:64:87:a7:2f:25:0e:0a:7b:
52:50:8a:3f:91:c1:ec:a1:60:09:b0:a0:fb:ef:bb:
1d:26:60:56:43:8e:60:b3:58:a9:8f:74:1a:a5:02:
8f:e5:f8:e0:1c:95:18:16:b0:7e:19:65:9f:f4:3a:
7b:18:57:43:e6:77:a5:df:5e:54:82:85:77:fb:45:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:F3:09:59:1A:11:BD:6B:39:DF:16:05:18:E0:9B:33:C6:CF:77
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d5:cc:55:56:1f:9d:03:ee:e2:1e:1e:c3:59:93:7d:1a:bf:
c7:19:e6:3a:05:5e:00:c0:7a:76:4b:0b:88:4c:5b:6a:e2:71:
7d:b0:db:e3:13:c8:89:c9:8e:64:69:7a:6d:c0:6b:bc:72:57:
44:11:05:72:9c:ce:2c:db:21:5d:e6:24:04:7d:e8:92:23:04:
15:a9:e5:5e:da:07:14:37:2b:1e:c8:31:a0:ce:2a:47:28:c6:
39:c8:12:0b:c2:40:0e:30:6f:5c:ed:f5:56:c8:90:81:04:f8:
80:30:c3:f0:ef:9a:04:1e:2e:0b:dc:bf:be:0e:09:3e:b3:14:
04:1c:3e:04:1a:fc:91:fa:40:88:84:6b:2e:17:aa:fb:25:7b:
4f:a5:51:8c:53:7e:00:06:f5:8c:33:63:d2:9a:70:48:ea:28:
00:cf:f3:29:97:5e:d6:84:f9:c9:cf:22:0c:46:a1:b3:5d:c9:
fb:3b:d2:96:0a:54:99:4a:f5:54:82:98:1b:3d:36:b4:a9:ef:
45:6e:10:59:05:8f:9e:23:a3:11:00:3c:83:43:f5:1c:22:5a:
68:c9:fe:bc:4b:9e:3b:e1:73:de:00:46:12:47:35:0d:69:59:
3c:3d:76:09:e4:d0:e4:d6:90:be:e8:ba:ee:7b:da:11:79:b5:
d5:78:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:47 2026 by rpki-client