Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: 7scskFGZ4q4aPUlQZnV5EedXGyk4NjJyRMmhWjtqbNM=
Subject key identifier: 89:A9:30:86:46:82:BD:9E:56:D5:9D:50:84:04:C3:DD:54:C3:83:7E
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019D2B1755E72C6244E76E6AA5370A4453FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 17:00:42 +0000
Manifest this update: Thu 26 Mar 2026 17:00:42 +0000
Manifest next update: Fri 27 Mar 2026 17:00:42 +0000
Files and hashes: 1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=)
2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: Fc5Fsrc1tR1p+Yvy+i9Q1ueiXl9eM3NGS6FWmsEKjv4=)
4: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:55:e7:2c:62:44:e7:6e:6a:a5:37:0a:44:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Mar 26 17:00:42 2026 GMT
Not After : Mar 27 17:00:42 2026 GMT
Subject: CN=89a930864682bd9e56d59d508404c3dd54c3837e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:64:a2:c1:5b:7c:53:ab:a6:48:4c:bd:52:
ef:36:51:39:99:47:5f:ed:42:35:46:cd:2b:c9:bd:
b9:9d:be:c9:c4:c4:8e:d6:8a:9b:43:7b:7b:ac:89:
21:5b:fb:96:32:e8:e6:9c:d4:15:18:d0:13:94:d6:
c6:aa:92:3b:70:56:50:78:74:fc:bf:c0:b8:1a:f0:
c0:f8:d0:12:c8:05:ad:0d:34:d4:41:67:c8:cb:b7:
bb:ee:f6:97:ed:42:ac:b5:bb:0a:e7:13:02:47:be:
b1:82:d8:65:3b:2f:f0:26:77:a9:90:98:aa:2d:aa:
f2:15:65:ab:6b:39:bb:b6:fe:56:ff:97:80:44:5e:
24:32:b5:f9:06:4f:e6:55:66:5f:d4:e6:95:43:21:
08:69:d2:23:31:e6:44:3b:28:0a:f5:13:68:cf:c2:
dc:10:14:f2:a9:24:7c:3c:64:19:2f:c5:d5:8c:ae:
c4:91:7c:9c:20:f8:90:c1:21:3b:55:78:79:51:5a:
2f:f8:b5:4f:0f:da:f3:1a:ad:f2:7f:ca:91:cc:50:
d8:d3:e1:2b:88:f3:81:08:04:b0:57:83:35:df:77:
9e:fe:f8:96:db:f2:74:4d:ce:12:ba:9c:3b:4a:1c:
f4:ee:83:36:be:c3:5d:a0:d9:40:fd:e4:e2:b1:45:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:30:86:46:82:BD:9E:56:D5:9D:50:84:04:C3:DD:54:C3:83:7E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:95:20:1d:6d:ac:bc:7c:59:9e:2e:5e:10:a7:41:47:bb:
87:f6:42:d9:e2:b2:f0:7e:2a:2c:e7:7e:8c:66:3d:14:23:2f:
b3:a6:02:a5:3e:86:eb:eb:6b:34:9d:ce:ed:41:2e:80:b2:fc:
51:53:6f:bd:10:b3:92:2b:d3:ab:fb:90:35:ab:34:77:ca:6d:
ea:39:67:42:e3:5f:33:3f:00:c6:6a:69:e7:b1:a6:1e:f8:09:
28:48:c6:64:9e:ae:1c:b6:12:00:b6:3c:da:2d:a3:51:e1:89:
44:6b:19:0c:17:2a:c1:82:d5:64:3a:67:af:a8:d3:7e:69:43:
79:f1:81:01:4c:04:2c:68:9b:8b:01:ae:71:f9:95:84:71:b8:
e5:d4:64:04:c6:63:25:ce:90:04:0b:cf:17:6c:bf:17:c0:4f:
53:69:cd:76:91:ba:c0:e5:c3:76:1e:82:e4:94:80:cf:93:48:
8d:25:73:14:a1:e1:b1:c8:54:2d:02:a2:6e:8d:2a:2c:54:f4:
f7:37:dc:df:68:0d:71:24:5e:26:d3:4a:d5:5f:54:92:ca:9c:
88:5c:61:6a:c1:e6:16:15:40:8a:30:42:40:54:6c:40:11:63:
c4:e4:2b:7d:ba:98:74:e1:70:bc:82:31:8f:77:43:b6:fd:7c:
88:cc:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:04 2026 by rpki-client