Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: qkf5vbbGPsKSZmgNZQ1D1KplryI76R5AwWfPqZnLhjY=
Subject key identifier: B5:21:A0:D9:4F:31:6A:48:F3:1F:DA:12:99:4E:7C:9D:D0:92:CF:B7
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019D28F3060FF7BD7F091AEC592F34768B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:48 +0000
Manifest this update: Thu 26 Mar 2026 07:01:48 +0000
Manifest next update: Fri 27 Mar 2026 07:01:48 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: ii9UjA3hSW7bWSpiiPCaS8ruZ1r+6wkJEkVpoLwBN14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:06:0f:f7:bd:7f:09:1a:ec:59:2f:34:76:8b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Mar 26 07:01:48 2026 GMT
Not After : Mar 27 07:01:48 2026 GMT
Subject: CN=b521a0d94f316a48f31fda12994e7c9dd092cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:65:34:eb:d4:1f:42:ce:59:dd:89:a4:54:
fa:00:cc:58:f2:5c:34:3a:0e:9a:6c:eb:70:f0:14:
88:6c:18:b7:58:16:f1:dc:1c:f8:2c:a0:d8:aa:29:
f6:9b:dd:73:b8:77:d3:a6:0a:03:18:32:ab:99:fa:
a8:4c:9c:7a:cd:d6:04:89:a4:d6:7b:8b:64:91:86:
82:5a:a3:9d:a4:d3:07:18:c1:bd:c4:65:c9:24:8b:
24:7a:b9:83:d8:d4:8f:fe:62:f3:da:b7:9e:48:65:
84:4b:16:9a:77:95:be:77:7d:d2:65:f9:96:9e:7d:
37:91:88:ac:9f:82:98:40:5f:c6:5b:b6:6f:92:77:
63:ee:b5:e7:12:95:46:1c:37:fd:a6:d8:29:2b:37:
6e:b8:9f:c2:fc:b4:16:75:2e:84:48:67:cb:48:60:
5a:bd:42:5e:0d:ee:44:07:15:31:0d:16:a7:91:3e:
e6:b9:3f:9d:8d:bb:3d:40:f7:ad:ec:9a:44:cd:29:
39:b1:b9:3f:9a:8a:45:2c:0e:d8:e3:7a:92:4c:2b:
33:ec:71:72:81:bf:bb:75:53:1b:b7:37:7f:9d:c5:
d6:eb:2e:dc:35:5b:58:57:da:4b:ca:21:3a:27:60:
75:f5:e2:94:a9:64:e0:32:93:83:e0:f2:67:10:2f:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:A0:D9:4F:31:6A:48:F3:1F:DA:12:99:4E:7C:9D:D0:92:CF:B7
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:18:3e:c9:8f:47:7b:98:9e:ec:c4:66:2d:cd:e1:a3:0d:00:
0c:52:2b:c3:f2:91:e8:a6:8e:3a:26:9e:ff:2d:00:f3:bf:83:
43:a0:e5:55:fb:90:0f:54:0c:37:dc:1b:00:2a:bd:65:08:0d:
18:31:47:76:40:41:57:64:96:87:53:d0:41:ba:df:e4:c3:65:
1d:d3:0d:f6:45:f1:36:6b:e1:87:25:69:ab:c4:da:8a:b2:56:
93:79:f3:5f:96:56:21:f6:61:fb:e0:00:15:ef:33:32:79:fe:
2d:be:7b:62:39:42:e7:be:09:76:71:f6:7e:65:3d:06:ad:c3:
82:9e:04:e0:0e:d8:96:71:bb:b8:14:57:53:70:40:f8:04:b6:
65:b7:73:23:2f:c8:7a:f9:51:b0:1e:6d:c7:f3:e7:06:ae:32:
a8:04:20:56:71:f9:43:fb:12:1d:df:e9:0b:f8:de:b5:4c:f7:
98:f0:a7:c8:a3:60:eb:b9:19:5e:07:d4:d6:2c:81:f9:28:40:
09:5d:dd:d7:98:39:b2:30:13:80:5a:e1:4e:6d:14:27:ae:38:
21:b9:87:73:99:8a:29:b5:30:8b:7d:cf:4b:b6:f4:88:07:f9:
f2:53:e5:40:68:6d:6e:32:be:03:5e:28:6a:9e:28:25:39:18:
8a:f1:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:27 2026 by rpki-client