Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: cW6nfpJVIqYEQ274xUdeOH9lQ5U3A5wlXn0jn8aNsGM=
Subject key identifier: E0:4E:94:CA:5E:99:4C:D5:9E:D5:5A:E7:3E:57:E9:68:A3:0A:87:74
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019D2816D142E346AF323BD1014D5BE95B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:17 +0000
Manifest this update: Thu 26 Mar 2026 03:01:17 +0000
Manifest next update: Fri 27 Mar 2026 03:01:17 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: dRCTd1bGxBSwZizZWOmV3kICSPrAyepJvX0NdYz1dsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d1:42:e3:46:af:32:3b:d1:01:4d:5b:e9:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Mar 26 03:01:17 2026 GMT
Not After : Mar 27 03:01:17 2026 GMT
Subject: CN=e04e94ca5e994cd59ed55ae73e57e968a30a8774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:d4:bf:6f:ca:06:12:c3:54:13:45:65:5a:
3c:14:60:95:c0:26:6f:40:aa:17:bb:21:4a:37:2a:
d4:76:dd:e3:10:20:c6:1c:f1:fd:f7:09:09:88:0d:
fb:db:31:8c:1c:92:eb:e4:dd:18:42:84:f4:1b:4e:
ad:1c:68:31:84:8f:82:9e:e9:f3:2e:5c:cd:b8:c2:
77:3b:2e:8c:19:18:26:e9:3b:ba:73:50:af:6b:c0:
95:00:c6:7d:c6:2d:ce:80:89:d5:2a:ac:69:ad:c5:
32:60:24:7c:33:fd:97:4f:bb:4e:c6:42:ad:2c:f1:
3c:8f:60:67:6f:ec:b1:2f:28:57:22:cf:c4:cb:04:
70:25:68:8c:c8:c3:ed:93:3e:19:37:59:c4:5e:48:
fd:7f:98:f2:2e:10:fd:8a:19:bd:78:b5:0b:f8:c0:
11:a8:03:3b:28:f9:82:66:68:44:53:14:df:f8:8d:
0f:5d:fa:ec:de:e8:39:ce:53:5f:1e:2f:70:99:7a:
2b:c8:12:83:93:52:dd:08:06:a7:85:30:67:b5:f0:
32:4f:15:8f:e5:c9:59:ab:96:0c:97:5b:a8:b7:69:
75:8a:19:a1:0d:2f:1d:9a:1a:17:42:53:9c:8c:c1:
ff:9e:58:07:83:ae:11:b2:38:25:41:15:37:1d:00:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4E:94:CA:5E:99:4C:D5:9E:D5:5A:E7:3E:57:E9:68:A3:0A:87:74
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:00:f2:5b:26:fe:44:d6:e4:db:42:58:d8:cd:77:2e:a4:
87:59:dd:eb:bd:dc:36:83:13:cf:6f:fc:99:49:aa:12:21:bf:
2a:fe:a0:20:b6:e2:98:03:32:99:fa:07:05:a8:35:9b:7a:5e:
3b:39:e1:d4:ed:57:0a:b0:39:fa:e4:ef:c2:5b:fb:9e:1e:17:
27:24:93:b6:de:72:64:7f:ee:08:88:e4:2f:87:2c:a1:cc:16:
07:93:fd:18:cb:0a:68:e5:64:84:c4:3b:01:f7:ed:4a:de:5e:
7f:41:2c:ae:f2:65:09:f8:1a:cc:92:8a:6b:6e:fb:31:17:3f:
05:6d:b7:7f:a9:06:d3:3d:e7:64:01:b8:20:aa:80:bb:6f:3c:
be:e5:53:93:87:a4:03:34:8e:f5:d0:2e:64:a4:b2:4e:bb:85:
49:7d:35:b9:ea:cc:5e:36:7b:76:6f:67:1a:09:61:ca:24:ba:
07:f4:8f:5c:a8:e9:e5:2b:a1:cf:9a:dd:a8:35:7c:57:b1:bb:
e6:66:38:4a:66:f5:ca:ce:f0:96:c0:c0:49:a2:c6:72:63:28:
d0:76:68:3b:fe:a3:bc:f0:65:1b:e1:a5:68:b8:35:48:7c:7e:
67:70:20:ab:29:a2:87:80:9d:d9:96:a4:e6:a4:26:4e:35:8b:
0d:35:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:20 2026 by rpki-client