Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: 6GLAD1K0qCsjiOlJFhPZlEABz6JUNces1mC71iFUtNY=
Subject key identifier: 8E:6D:E7:37:4F:98:AA:C8:73:74:0A:B6:6B:DD:B1:47:35:B2:A1:20
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019E1D59417371508E20619D7DC8036F36F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: uZcJ+nDs02fJzx7YnZWKOy5ItsYF3/ZQ7jSjgdYVFNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:41:73:71:50:8e:20:61:9d:7d:c8:03:6f:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=8e6de7374f98aac873740ab66bddb14735b2a120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:f1:07:8f:cb:81:e0:7c:cd:a7:b4:7c:ca:
03:a7:fa:3c:c2:86:41:5a:82:ad:0c:3d:17:ee:25:
d7:6f:8e:11:94:56:7a:15:a6:5d:5a:7b:3c:37:f3:
5f:7b:f4:09:30:b0:7f:5b:cd:6b:f7:0e:88:00:67:
ce:e0:69:da:91:55:5b:83:e8:8b:53:54:6f:8d:00:
34:61:9c:6b:f0:13:42:d3:d2:8d:1b:b6:de:6f:63:
17:6a:3d:4c:2c:4a:9f:af:ac:a5:6f:82:53:f6:22:
c1:d2:89:2b:6c:d1:e5:fb:0f:de:20:f1:c2:e2:2d:
a3:14:e4:af:ba:67:3e:47:4d:f3:ad:4a:e1:04:07:
32:15:f7:df:dc:ed:bb:90:17:9a:ee:cf:30:1b:72:
70:fe:e8:c3:0c:12:ef:58:12:80:38:7b:a0:eb:66:
48:e3:f8:f7:49:00:18:14:c1:44:48:91:7c:1f:fd:
c7:66:cb:17:3d:5d:0f:25:f4:fc:4a:7a:18:0b:26:
89:85:32:32:4a:d7:c9:83:e6:8e:56:ff:9f:99:cf:
c5:f5:d7:e3:93:68:31:d9:9b:68:e4:b0:51:bc:92:
a2:8b:68:14:09:31:91:98:62:e1:90:e8:d9:4c:5a:
cf:e9:5b:7c:b9:79:38:b0:95:25:d3:3f:e7:15:e7:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6D:E7:37:4F:98:AA:C8:73:74:0A:B6:6B:DD:B1:47:35:B2:A1:20
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:a0:57:7c:57:dc:ec:65:12:3d:5a:ac:2d:ad:08:d4:5a:
8a:23:d9:df:ce:c4:10:a5:b8:32:99:ee:1c:bc:30:f3:e4:26:
b5:bc:91:f7:4a:7a:72:9f:12:4a:e7:fc:14:bb:50:10:5b:a4:
4d:0d:9f:1b:8a:16:cf:22:30:f5:5c:5f:c2:46:89:ec:32:0c:
f5:58:9d:69:48:ef:b5:a0:65:f8:34:61:73:bc:a7:89:8d:b1:
4e:e4:cd:03:29:18:2b:26:b2:0d:c2:5d:01:f5:aa:66:6f:d0:
f2:ed:e7:08:38:5c:de:a4:26:d4:b3:aa:73:af:de:8e:7d:fc:
42:fd:69:64:f4:3e:a3:01:fd:27:a6:52:1e:73:9b:e2:cd:55:
fe:9e:7a:b2:dc:f1:07:eb:27:69:ff:3a:6b:5e:c1:c1:e7:8c:
ca:02:59:5f:c4:ed:d8:dd:ac:ab:5c:e2:3b:30:64:4f:7a:bc:
9d:5e:bd:c0:13:a1:2d:3a:76:b1:b5:de:c6:e6:5f:de:30:ca:
89:96:3c:b5:4a:f6:73:79:92:a8:d9:77:c8:54:eb:fc:ca:2b:
58:1b:e1:67:f8:14:61:92:bb:c6:4c:29:4b:82:40:04:1a:56:
4e:e3:23:3e:63:f8:dd:07:34:7c:9b:b7:c6:02:bd:c7:91:44:
d8:e6:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:57 2026 by rpki-client