Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: AoNeQBuLtKA4AEQQPO2CVgx1na+zoBYMMKQXSO1Rq4g=
Subject key identifier: 9D:72:2B:FD:79:B1:BA:74:D4:05:EF:60:3D:7F:33:DD:FF:DE:43:AB
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 019E1EDA563EE3C9C085F458E0E3CEDC6406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 3E
Signing time: Wed 13 May 2026 01:01:25 +0000
Manifest this update: Wed 13 May 2026 01:01:25 +0000
Manifest next update: Thu 14 May 2026 01:01:25 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: sTG/q9aIVbDXHgIveT3t9LbQvs6TEI2NfmgzFjYayAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:56:3e:e3:c9:c0:85:f4:58:e0:e3:ce:dc:64:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: May 13 01:01:25 2026 GMT
Not After : May 14 01:01:25 2026 GMT
Subject: CN=9d722bfd79b1ba74d405ef603d7f33ddffde43ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:93:7f:77:54:37:fb:53:0d:48:2f:00:bb:
dd:63:a0:be:4b:77:a1:54:d4:26:73:bc:14:a8:0f:
12:ba:e2:1c:6f:db:4b:fd:be:24:0a:9b:9e:86:4b:
16:c1:77:79:04:ce:2a:de:4c:76:66:eb:7a:11:db:
f7:d3:13:65:f7:47:a3:37:d2:d2:88:34:8a:54:ba:
e1:e3:17:d6:1b:e2:78:02:19:2c:35:a2:3b:06:60:
bb:00:be:b4:fc:bb:17:ff:ce:b2:2b:20:87:4a:c2:
2b:65:3e:5a:03:d0:ec:46:f7:d0:47:b7:f9:a7:a5:
1c:94:ec:fc:95:c6:6e:70:a4:04:c8:ca:fe:7d:ac:
2e:c2:b0:7d:32:ae:ff:e3:98:7c:b0:84:f8:a3:f2:
c3:95:2b:88:26:0a:86:2d:54:c6:11:41:fa:42:ed:
61:26:b8:14:51:94:c5:91:bb:b1:33:3a:20:d1:6f:
0e:42:6d:4e:88:3f:a8:77:e8:e1:73:96:36:b0:af:
62:5f:18:63:e3:9a:44:a9:60:70:33:99:8a:e0:90:
84:7d:4c:ce:e1:be:56:29:57:45:95:65:d3:3b:2d:
1a:87:dd:92:73:37:e8:0f:81:70:20:ab:25:c9:01:
63:16:20:66:83:bb:d2:50:84:7a:a2:e6:a8:90:29:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:72:2B:FD:79:B1:BA:74:D4:05:EF:60:3D:7F:33:DD:FF:DE:43:AB
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9c:24:13:fe:21:b1:ef:5f:a8:75:bb:bd:af:72:01:28:19:
f0:fd:13:d6:a3:d7:1b:d4:e5:19:36:4f:0a:ee:71:77:a5:4d:
4d:2d:be:9d:ef:07:84:72:12:17:45:23:63:22:46:5a:6a:1e:
50:98:e8:e7:e4:15:dc:68:55:63:38:63:d5:61:5e:c0:51:6a:
a0:1b:95:86:39:e1:7e:07:dc:46:f8:99:02:c9:40:b4:0d:40:
63:4d:5e:f9:cd:f2:a2:3d:6a:c3:83:11:1b:f3:f5:3d:f5:87:
09:81:6d:cd:7a:e2:cb:59:83:c9:25:c0:5c:ef:56:ed:c3:5b:
51:16:1d:7e:cc:ad:35:9d:69:4b:3e:66:7d:92:25:98:39:f5:
87:ad:03:99:03:25:8d:85:c6:ef:9f:2f:95:d8:6a:67:43:e4:
56:cc:bd:82:08:7f:c1:16:ed:b1:df:09:47:a0:29:99:62:9f:
f9:1c:d0:e0:86:38:c8:37:ed:17:96:22:42:88:09:0f:68:92:
54:2b:d7:c1:72:b9:43:08:bb:cb:e2:04:1d:92:3a:b0:81:86:
04:7e:46:50:fa:e3:8b:95:e1:92:98:51:49:91:36:af:85:5d:
e1:93:ed:16:27:44:fd:75:75:7e:e8:b6:f6:ce:0a:d3:07:ed:
a0:66:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:16 2026 by rpki-client