Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: tDKIZlzbtrO7BeE2KgnrpcRPAAZ4KIPgWO4zWkEleLQ=
Subject key identifier: 04:99:58:81:23:14:13:79:32:5D:3A:87:34:E8:AE:C2:CE:B3:E1:C6
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019D26CD14D02EC6BC63C8486FB7FD48C061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 118D
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: awo0TDGic1IgtF/IVpLf0ClnQArGGXUp8XI9ijDnoEg=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:14:d0:2e:c6:bc:63:c8:48:6f:b7:fd:48:c0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=0499588123141379325d3a8734e8aec2ceb3e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:d8:af:4b:0e:0f:b2:6b:a0:6b:ea:ad:aa:
31:78:f0:3f:75:61:2d:04:5c:9c:53:f2:79:4e:0e:
ec:02:95:e1:e6:0b:3a:ac:19:5f:3a:77:ed:b6:45:
ac:27:c7:e4:9e:0e:cd:89:a7:27:48:19:31:e3:22:
be:2b:81:77:44:af:d6:11:5b:35:59:af:71:d6:e3:
07:89:e6:1e:5e:f1:d7:0b:55:36:5b:cc:24:a5:e5:
7d:69:63:89:82:37:f9:f1:17:74:4b:fd:08:15:b8:
ee:41:93:be:78:e1:ca:2c:6d:7c:fa:af:4e:65:59:
17:86:b5:51:64:59:6e:6c:22:d8:cf:82:07:9e:81:
e3:a6:08:e8:bd:7c:84:29:93:5e:b2:6e:40:4e:03:
e5:0f:60:65:b1:f3:aa:b0:53:93:e6:db:4f:48:44:
7c:98:7e:b8:94:ea:41:6d:4b:f8:f6:5e:20:da:cd:
24:46:79:44:76:45:63:47:08:6e:c3:41:a6:bc:77:
47:c4:5e:7e:cc:0a:62:fa:11:00:0a:e0:56:3c:e8:
cd:17:46:74:7d:a9:c5:6f:11:71:31:0a:4e:7d:cf:
93:7c:1f:9a:cc:68:72:74:f8:c1:08:66:e3:9a:54:
e4:a0:63:41:8f:b1:6f:54:ca:44:3a:c8:e2:5f:35:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:58:81:23:14:13:79:32:5D:3A:87:34:E8:AE:C2:CE:B3:E1:C6
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:05:89:7f:df:6f:cc:b2:44:80:dd:b1:a2:be:d8:e2:5b:
d7:20:f8:41:4c:be:01:fc:52:54:42:16:b6:37:44:7e:86:70:
26:00:ba:60:0f:b1:e0:cd:d5:4a:cb:00:ee:c1:cf:65:44:5b:
5f:96:58:24:32:76:c2:78:d8:55:2f:a1:57:86:ac:6c:13:ab:
b5:f8:c0:ea:26:29:e0:08:09:19:c0:82:48:f3:3a:f8:04:5a:
20:fe:04:f1:98:a8:9e:4b:cb:fa:ae:94:cd:9d:c7:3e:79:33:
92:a1:82:8a:d1:75:cc:7a:8f:0f:25:4d:eb:e2:20:10:23:1f:
2e:b9:de:43:47:fa:04:bb:08:e1:06:c4:66:35:5d:13:e1:ae:
70:c5:fa:60:32:22:1b:c3:3e:e4:4c:2a:79:ce:6e:5c:27:e4:
14:79:e3:6c:1d:52:41:98:0c:a8:a8:96:c1:9d:23:3f:35:62:
1f:b7:f0:86:fe:5a:db:65:23:89:3e:ff:9d:93:7d:92:1e:5a:
76:70:5f:e2:a8:a4:3c:f9:08:45:ed:0a:d4:a9:02:68:d7:ca:
ee:84:0d:63:3c:f2:3b:35:b7:11:e1:9f:5c:e5:63:99:90:75:
94:0b:e1:8f:4b:13:a4:b9:ab:5c:ed:8c:28:dd:18:11:0a:e3:
3d:84:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:39 2026 by rpki-client