Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: Zs5DZa+7I85JJtFnzt3iqAy6c4ifozOFVmB/0EYiifo=
Subject key identifier: 6D:BC:91:9F:41:49:45:01:E7:EF:D0:E6:AD:B2:2E:B7:4A:67:C0:74
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 01A105803A19FB0A8115AC25828DA3032D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 138E
Signing time: Sun 04 Oct 2026 06:00:51 +0000
Manifest this update: Sun 04 Oct 2026 06:00:51 +0000
Manifest next update: Mon 05 Oct 2026 06:00:51 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: 1we74/brtjbSO1HOd+lD1vcK+zIJDsE7kZ8grAlmq6E=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:3a:19:fb:0a:81:15:ac:25:82:8d:a3:03:2d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Oct 4 06:00:51 2026 GMT
Not After : Oct 5 06:00:51 2026 GMT
Subject: CN=6dbc919f41494501e7efd0e6adb22eb74a67c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:24:f0:17:b9:d2:37:9f:4d:0f:9b:5b:46:
ae:0c:4a:67:9d:5a:b6:07:88:ce:b9:2c:25:e6:20:
f9:47:52:8a:81:d0:63:ed:7c:32:56:dd:2a:c1:de:
08:20:17:f0:18:db:2a:25:90:54:c2:5e:9e:e4:37:
31:3f:65:bb:97:6f:12:c6:8a:b7:a4:af:65:99:0d:
69:71:d5:9d:41:cf:ed:2a:5c:85:0d:64:cb:1d:a0:
fc:4f:40:66:ab:ed:95:b0:3b:8f:be:89:dd:6a:77:
c3:3f:88:98:92:f0:b4:ac:81:6c:a2:5f:ae:66:f6:
29:9b:23:34:24:97:f4:26:a8:01:3b:95:80:2c:d8:
01:ed:3b:4b:ce:d0:a2:a0:1e:5c:76:7e:09:13:d1:
77:b1:93:b4:a1:0c:67:17:78:9f:a9:f9:7e:ec:57:
53:c4:2f:3f:0c:bb:fa:a8:ff:15:51:c6:24:7a:a8:
cf:c7:12:5f:dc:57:7d:30:6f:06:2c:f3:53:73:92:
44:fe:3a:9e:11:90:52:b1:2c:0d:e5:92:fb:4e:ac:
94:6c:23:ff:5e:51:8a:9f:04:3f:fe:a4:25:b2:32:
99:23:4c:36:ab:ec:e4:e3:52:a7:c2:fe:46:25:4a:
1c:cd:b5:c7:54:27:5e:d9:79:87:04:8d:66:a0:c7:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:91:9F:41:49:45:01:E7:EF:D0:E6:AD:B2:2E:B7:4A:67:C0:74
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:0a:3a:5b:12:73:dc:8a:94:47:53:1c:57:ba:37:17:5f:
68:5f:4c:91:d9:c0:f0:76:ce:8c:9d:0b:27:9c:bb:ca:ba:c8:
c2:03:cd:6d:09:ab:c3:fb:c8:59:bc:1b:bb:a5:a4:fd:e7:1c:
73:4b:c6:ae:26:ea:e9:32:66:25:7d:bd:6f:54:ca:08:ae:5f:
f0:b1:f6:b5:58:4e:75:80:87:f9:4a:38:3d:27:5a:46:27:07:
51:5d:51:8e:08:0a:e7:40:82:bd:70:bc:22:e3:3b:c8:a9:2a:
70:bc:fb:34:a8:b6:d3:41:80:8c:0f:cc:64:b7:dd:b5:76:7b:
84:68:10:09:e7:e4:cc:eb:c4:72:ff:85:69:c8:ac:ce:ae:4a:
1e:88:01:9c:df:f4:ef:21:8b:74:84:53:0c:76:c7:c5:fa:3a:
1a:88:bf:1a:33:0c:cd:84:d5:7d:8f:06:c6:88:fe:71:24:62:
02:14:d1:80:e7:04:da:31:4e:1d:f6:d1:3b:67:a5:71:e8:ce:
55:b2:33:30:ae:17:2c:e0:72:82:bb:12:3c:ac:d6:1f:68:cf:
db:d9:bb:0a:cc:89:6d:51:54:94:df:bc:c0:f9:81:f8:76:b4:
ba:29:df:f6:42:d0:d3:38:d0:76:c2:5e:9a:05:7e:2a:ac:eb:
85:26:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:49 2026 by rpki-client