Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: TIzpMuobkJYGSM866Ss7Wz+IukuHew7xfGLWygBmQZE=
Subject key identifier: 78:DC:A6:3A:B8:FA:B9:88:6C:7A:F6:0E:A0:C8:A5:DC:E0:4F:2F:CF
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 019D273AB13CDB02DFA4269AA5EE78B4F193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: J2ePeeL-Vnk70QACx3LfiT8XrbE.roa (hash: z2t3api1uCbkFONQl/y9ACJzqCIvyFtQi+W3FXkf6vI=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: OGmjpdA8afpQUjkxDUOnEbLuO7XAeXFBWI0htJlW4GU=)
3: WK05YePVGxSCv79B0TteFVaq850.roa (hash: 7rkUo5wVVBbfcYbpJlI0gu7ML8kJLZ10lGjYdqs1Wuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b1:3c:db:02:df:a4:26:9a:a5:ee:78:b4:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=78dca63ab8fab9886c7af60ea0c8a5dce04f2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:da:5c:0a:4e:c3:f8:18:01:be:bc:9c:61:
7b:47:d5:38:65:99:b0:7f:95:7f:8b:32:24:e8:ac:
cb:b5:58:0f:b7:b0:70:a0:31:d1:c3:dc:c6:f6:6e:
49:e7:98:24:13:27:85:a8:c1:2b:5a:06:5f:2f:39:
f7:56:9e:c1:dc:8b:b8:ea:90:1a:f1:33:6f:27:24:
1b:7b:74:7f:dc:ae:02:d8:ce:a1:30:13:b1:85:a1:
50:8d:2a:a0:18:7d:67:47:e7:00:06:47:03:6b:c2:
a6:e9:5d:e6:bd:7c:c3:ae:a5:b7:36:82:a0:f0:54:
86:cc:23:42:30:53:42:82:36:cc:ad:f9:c7:29:4e:
2c:52:11:5e:ed:9f:b0:4c:00:f2:00:b2:a0:ba:3b:
f5:8d:61:a2:a5:09:b8:df:0a:b5:d4:fe:24:02:8c:
42:a9:9d:ff:c3:58:63:5a:26:4f:1f:1c:6e:25:f1:
85:ea:a3:c4:25:21:bf:0f:0a:45:52:0b:49:21:36:
2a:f4:67:bf:55:50:1c:a9:31:71:93:c7:01:db:13:
0c:4c:bd:ca:c1:3a:b1:4c:dd:00:3d:0d:a6:1b:f0:
96:cd:0d:93:ce:38:58:94:28:c1:2b:e8:2a:1b:49:
28:90:6f:91:df:ba:38:80:92:e6:0f:06:06:e6:f1:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:A6:3A:B8:FA:B9:88:6C:7A:F6:0E:A0:C8:A5:DC:E0:4F:2F:CF
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a3:f0:72:78:e8:4a:bc:21:1f:d4:36:90:85:a6:8b:c0:2b:
74:8b:84:80:9a:15:c6:2f:e1:aa:b7:fc:a7:54:6d:3a:50:29:
19:0c:60:94:36:c9:51:2e:39:54:24:0d:96:db:1d:31:62:b6:
6d:72:c6:2f:09:b6:ce:8e:52:1d:5a:1a:d7:96:b5:9e:70:36:
b3:f9:5f:9f:3c:7c:65:59:9a:30:36:ca:00:69:51:84:c0:1e:
c2:8b:af:9b:fa:c0:45:c9:8f:2a:70:13:c3:70:b0:48:26:c0:
0e:ee:a8:7f:99:a9:82:97:c7:e2:7d:e1:6f:02:86:e5:ea:7c:
72:5a:f2:f3:ba:fc:74:78:2d:19:5e:5f:48:2d:d0:7a:82:59:
91:c3:91:ee:73:da:27:fc:e7:8c:10:a1:c1:78:39:0f:34:dd:
35:db:a6:7d:b3:d9:3f:9f:66:b3:34:11:83:28:bf:93:af:b1:
7e:65:d2:5b:44:ca:25:e0:4c:d8:11:e4:10:5d:f1:70:1e:bc:
2c:44:9e:82:12:fd:5e:8b:ca:ca:e0:e0:72:5c:3b:b6:d6:92:
c3:bb:6d:8f:39:9f:0c:e5:59:8d:0e:97:39:3e:b3:95:68:3b:
55:1c:8f:4f:0e:b2:66:6d:a8:66:17:d1:33:d6:92:c0:c9:b2:
b3:8d:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:44 2026 by rpki-client