Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: sQECyZ8IWqGWYNpD/GiGCn2kIGhTt1iXsixXyCr2wd4=
Subject key identifier: B0:28:2F:53:5E:49:FD:F2:81:06:12:09:07:C6:92:95:7B:E8:47:2D
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 019D27043A1007401AD2206D4230F2F36DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 10A3
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: 2GdVWpyHcUZuha5almj4Sspe2bE.roa (hash: VRGJz/bJneNeY1Kgq/MA7FsnEvzZjU8NRF6ZfAOUyew=)
2: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: SBe1YJU6d76dv4e845HI/x91BZiS1qnlZskKjfb2YWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3a:10:07:40:1a:d2:20:6d:42:30:f2:f3:6d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=b0282f535e49fdf28106120907c692957be8472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:f0:1b:f3:0b:d0:f9:34:84:3e:4c:e0:7d:
53:48:8d:c0:b5:18:09:e2:b1:44:ff:1b:01:64:91:
35:d9:47:1d:16:89:d3:39:6a:75:89:ac:5c:7e:ab:
bb:22:fa:eb:98:2d:4f:4d:1a:07:ef:e6:e3:64:05:
12:a3:4e:e6:87:27:87:23:32:e9:41:e1:5b:0c:a7:
ec:ee:1a:37:70:06:79:7c:c1:ff:c6:5a:b9:a8:8b:
03:9a:37:36:e3:03:b9:da:a4:63:81:3f:0d:72:d9:
bf:d9:c9:be:c1:86:fc:77:08:fc:35:4c:ff:6b:97:
e6:56:a4:40:dc:f1:54:13:52:a6:3d:de:22:55:2c:
1f:06:5d:ce:3e:e5:fa:41:e3:55:41:1f:87:d9:77:
e5:3f:4e:40:da:bc:b1:6a:1d:67:58:35:23:af:08:
b8:ac:4b:c6:ce:04:03:bc:1f:fa:b4:54:35:f8:df:
37:8b:5b:bb:4f:49:be:79:7b:2a:0c:98:c6:20:d5:
37:03:33:f2:53:09:b7:13:1d:ea:90:6c:38:4a:02:
f4:88:4d:09:24:8c:4b:0c:bb:fa:e6:0a:a9:4e:b5:
67:27:40:10:ea:af:11:50:ba:0b:9c:4c:47:f3:a6:
9d:62:bf:8f:57:a2:8f:e1:39:b4:da:8b:59:cf:3b:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:2F:53:5E:49:FD:F2:81:06:12:09:07:C6:92:95:7B:E8:47:2D
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:29:4a:71:c7:38:d4:e4:82:37:34:ad:6e:e8:ec:71:f2:
b0:11:98:3c:42:a6:49:d7:ab:85:ab:59:91:db:51:87:59:01:
35:af:f2:04:6a:51:de:99:c7:93:a6:a9:5f:3c:b3:95:7a:cd:
f1:6d:b2:34:2b:82:7c:c8:cf:3a:66:19:9c:8e:5d:ea:d6:9b:
14:99:c8:78:12:92:c3:c8:88:ec:7c:50:4b:09:2e:4e:1f:e7:
fd:cf:95:29:f1:8d:45:c2:a4:e0:24:6b:ca:ea:e0:37:5f:42:
1e:36:ec:a6:95:32:f0:67:67:ba:f3:c5:21:8f:79:60:7f:92:
a9:d1:f8:f5:19:4c:7a:1e:b8:85:62:d3:8c:87:cb:e5:f4:23:
b4:9a:89:01:02:df:87:f6:cd:19:5b:b1:33:db:ee:b6:a6:75:
8c:de:90:88:4a:31:80:a3:cf:a7:ca:70:51:33:de:51:d4:bb:
15:48:3b:ee:bf:94:c5:e6:63:17:34:09:eb:ff:40:a5:f8:c3:
75:61:93:16:fd:e7:6a:3c:73:31:42:dc:fe:11:95:52:15:0c:
50:34:1b:f2:6b:81:af:c0:b4:0a:9b:17:98:bd:60:58:98:5f:
fa:91:d6:84:3c:3d:fe:da:1f:78:da:05:cb:e9:00:81:9d:e6:
40:66:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:29 2026 by rpki-client