Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: xkw9DFdg5oRfQMqnFIg4XQSTyP9uQUSloObqwFlBrHc=
Subject key identifier: 88:AF:EC:9F:D8:F9:E3:75:44:C2:79:EC:4E:49:6C:24:C5:5E:C6:8C
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 019D2B4EC0C052FE2F3C1976372E4BEB7228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 18:01:14 +0000
Manifest this update: Thu 26 Mar 2026 18:01:14 +0000
Manifest next update: Fri 27 Mar 2026 18:01:14 +0000
Files and hashes: 1: H962oq62C4HZ1q-2ZR6ka9i7iTk.roa (hash: BBJJ5WWdTfXTRvB9xlvrZCxW2c0xyH6m419fkAsKFyU=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: 5w5vqXiL1HGQyl5hJ7gvpe7r1odneTGzHurYPxkWTwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:c0:c0:52:fe:2f:3c:19:76:37:2e:4b:eb:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Mar 26 18:01:14 2026 GMT
Not After : Mar 27 18:01:14 2026 GMT
Subject: CN=88afec9fd8f9e37544c279ec4e496c24c55ec68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:0b:18:93:f3:9e:45:48:53:b6:05:61:26:
bc:19:16:e1:aa:17:d1:fb:d1:9c:ee:bb:13:2a:fa:
fb:64:c5:61:d1:51:73:11:cd:8d:3e:95:4e:5c:68:
2a:54:45:64:43:97:04:77:08:db:45:62:29:03:0a:
0b:04:13:4e:a3:91:a0:04:1b:48:ab:b4:dc:fb:48:
13:70:c3:5e:c4:ab:38:c6:d3:a4:75:fe:ce:63:c0:
39:4b:08:b0:3d:d4:c5:c9:8f:4e:9d:6b:65:85:36:
47:84:2d:f8:0c:82:76:62:15:95:21:98:c5:d1:81:
b2:b1:5d:ca:83:d9:25:bb:fa:6a:5d:1f:33:31:1a:
ed:2f:f6:4e:5e:f3:ca:5b:94:d0:92:d9:42:83:6c:
2e:34:03:e3:df:c3:a2:2a:92:84:d9:0a:76:99:83:
71:50:f6:69:4f:c8:f5:22:90:82:4b:1e:db:8d:93:
33:d6:0d:9f:d6:6d:e7:88:03:d7:3e:c1:b7:d1:37:
b4:31:48:7a:20:a1:72:6c:61:c3:89:30:d4:f1:4e:
2a:02:bc:be:01:bc:53:d7:f9:04:bd:5e:a5:66:d4:
81:8c:5a:fd:5f:d9:21:da:29:ea:d9:af:32:8c:47:
d4:e2:90:52:e6:fd:0a:74:0c:0d:5c:a4:04:1b:7d:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AF:EC:9F:D8:F9:E3:75:44:C2:79:EC:4E:49:6C:24:C5:5E:C6:8C
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:41:99:d1:f1:e0:20:4c:a4:f6:08:0b:c3:57:3b:87:38:
09:ef:bd:c0:2a:46:0f:68:a1:a6:7e:18:77:54:87:d0:b3:a6:
74:c4:c7:d3:21:1b:37:e7:ee:cf:23:44:bc:9e:a4:61:07:39:
67:ea:70:82:3a:a5:0f:78:1f:73:a7:8f:51:09:a3:5e:ff:fe:
2b:97:8b:06:71:06:c7:29:68:8b:17:24:28:2c:b7:cb:fd:21:
63:0f:bf:84:03:74:84:bd:34:67:4d:03:3a:54:49:b4:56:2b:
58:d5:9b:02:33:f4:18:47:ce:86:ec:99:47:a4:c8:8f:b2:83:
cf:33:a5:1f:7a:b0:0e:83:b4:b1:68:fe:c6:1a:ef:45:3d:e6:
9b:ce:6a:cb:77:16:dd:5d:82:0a:95:ff:58:15:db:45:61:3d:
82:59:76:58:f1:30:a8:e1:7d:da:75:1d:ed:68:87:ef:ba:4e:
75:69:7a:bc:81:fa:4d:49:cd:61:4b:73:cb:39:b5:da:cd:81:
3b:75:d8:4d:73:33:a8:0e:ba:09:36:6e:82:6e:e1:10:dc:25:
cc:48:0c:d5:0b:91:57:86:99:e5:f1:4c:1e:67:f2:a7:db:c2:
76:b2:05:6d:75:0f:05:bd:00:c7:86:f6:37:fa:ab:48:bf:71:
0b:8e:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:52 2026 by rpki-client