Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: 7Dv7Xn88D5B3K/B7fmb9zqA2QN1vLsOH/mGCOnvxUa4=
Subject key identifier: 4D:89:D5:A4:97:A7:B2:56:CA:43:3A:6A:75:67:B9:E1:43:F4:BE:6F
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019D29291916E34DEE37FA6231C92D15130B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 189B
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=)
2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: mbthRVT6UJ71xE85+wehX7vIpFZj8Aaik/+6ALsR3mE=)
4: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:19:16:e3:4d:ee:37:fa:62:31:c9:2d:15:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=4d89d5a497a7b256ca433a6a7567b9e143f4be6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:3e:85:88:76:6b:bf:98:ec:51:b6:01:3c:
64:e1:94:6b:3b:1b:08:0f:40:ff:04:24:e6:a4:6f:
3b:6d:ee:7e:09:a1:2f:fb:d0:4c:fb:19:ae:d0:e8:
c0:76:cc:b0:8b:50:70:0a:39:b6:e1:17:c6:e3:5f:
01:ab:5e:6f:d9:3f:1d:79:2e:24:fc:1b:7c:5d:9d:
d9:b3:cd:a9:1f:94:5d:00:7e:ef:6a:52:e4:fe:7f:
cd:ad:22:26:89:31:cf:17:78:73:26:8d:e7:a9:53:
d7:80:af:e4:1e:b6:54:a0:28:0b:aa:a5:fc:dc:45:
fc:12:b0:8e:a9:c4:0d:a5:ee:71:a1:c3:26:de:c7:
73:a7:33:38:ab:2e:49:2f:9f:2d:b1:7d:ca:a0:10:
2d:a6:08:5b:aa:51:20:10:21:f1:98:19:9b:fd:ce:
58:05:62:8f:84:49:99:ea:37:5e:49:73:69:80:3c:
b5:f2:c2:f6:c2:c2:19:7f:16:5b:6d:07:0f:2d:e5:
92:ef:9b:c1:57:42:7e:c9:17:65:e9:46:85:5d:8a:
0f:c4:fc:d9:18:4f:bd:79:e4:b9:46:be:68:76:c5:
b9:8f:f3:d1:e1:32:25:82:57:4b:cd:a1:e4:6f:cc:
6d:c3:b8:ac:eb:4a:1d:3e:9d:8e:7b:bb:12:78:64:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:D5:A4:97:A7:B2:56:CA:43:3A:6A:75:67:B9:E1:43:F4:BE:6F
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f8:99:12:3d:39:d7:fe:31:bf:34:19:f8:5f:51:01:8b:86:
c4:53:7b:68:85:57:36:b2:0c:c1:6a:24:43:89:29:7a:93:71:
4f:9d:46:29:6b:cc:37:0d:dc:86:17:1d:60:2f:17:5a:93:5c:
07:0a:e3:b6:74:a7:d1:1a:f1:de:cd:ad:be:d1:3c:a0:f0:09:
63:49:75:ae:5b:d6:a8:f7:66:b3:32:40:5c:62:09:ee:5d:3c:
33:b7:27:b2:a0:69:39:00:ec:31:7e:0a:b6:a8:b2:79:6f:3a:
77:32:8c:f6:b4:df:c4:0d:21:6c:35:d5:f0:50:eb:7e:ac:a3:
52:25:06:04:b6:fd:94:31:39:2b:09:8d:11:10:3d:10:18:e8:
ff:e9:28:2c:6a:b8:a0:46:4b:7c:d7:8e:3b:bc:7e:2b:42:c5:
21:f7:65:ac:5a:3b:7c:b5:a6:14:8d:d2:45:b1:e9:2a:ac:4b:
25:44:a4:03:2e:f0:2a:35:cf:d2:38:65:f8:9b:c4:a1:ca:ec:
2c:1f:06:7b:96:18:96:25:a9:1d:90:a5:cd:bf:3c:0b:25:67:
d6:8b:a5:c5:07:b0:86:00:31:24:55:ac:7d:6a:0e:26:d8:9c:
63:0f:67:5a:29:15:32:72:21:05:3b:bd:f4:2a:c2:2b:48:a0:
ec:87:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:58 2026 by rpki-client