Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: LW+I5q5JG6mYbXzbhSBTlBNDVBTnMw21GjnLyCAyqoE=
Subject key identifier: 18:EF:74:C4:49:4F:DC:FE:54:00:39:F2:D4:FE:83:B9:7D:16:90:E3
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019D29CEB2C780AA20148C127B41C8E325A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 11:01:45 +0000
Manifest this update: Thu 26 Mar 2026 11:01:45 +0000
Manifest next update: Fri 27 Mar 2026 11:01:45 +0000
Files and hashes: 1: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (hash: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: GIRgidVCB/+pmh/9j86UbAm73f9QnU2zgf4v11gWVto=)
3: ve2xnNSznR3jgazHd-AYZFn-sds.roa (hash: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:b2:c7:80:aa:20:14:8c:12:7b:41:c8:e3:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Mar 26 11:01:45 2026 GMT
Not After : Mar 27 11:01:45 2026 GMT
Subject: CN=18ef74c4494fdcfe540039f2d4fe83b97d1690e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:23:b6:b8:e2:e9:b9:cc:b2:79:d3:4d:49:
ae:8d:8c:55:48:54:92:f8:12:57:60:b8:b5:a9:99:
a6:90:06:12:4e:7a:6a:d4:1a:dc:e6:0d:e8:c9:3c:
66:94:5b:af:59:c8:51:de:8a:47:b1:6f:8b:ed:5a:
e8:30:9e:4f:bb:e2:54:c6:7e:cf:b8:c3:62:14:28:
a0:44:e5:68:a1:95:a4:cf:67:c7:e2:c7:f4:ce:46:
7e:7c:aa:2c:d5:c3:86:4b:80:73:f6:65:2b:99:97:
47:dc:5c:e2:4e:72:60:04:37:27:96:91:79:2a:61:
c0:dc:d4:71:73:35:f8:ea:0e:b6:9c:c1:08:0a:b8:
4a:ae:41:81:fb:fd:f1:20:d8:23:c4:f2:f5:8b:2f:
66:88:a7:2c:68:f8:4e:50:79:f3:83:ed:e7:36:c2:
67:0d:7d:6d:e2:af:26:b4:f6:61:fd:0a:36:19:db:
94:1e:ac:58:e5:51:57:32:0c:94:74:30:79:90:63:
b9:cd:f8:f7:5a:63:fe:12:b1:c6:6a:ea:0f:74:2a:
0e:c9:9f:04:38:e5:d9:13:06:06:68:f3:2c:c1:cd:
55:43:02:43:53:b8:3b:21:c6:ee:f2:9d:f0:bc:00:
18:64:c3:6f:d7:e5:4e:53:28:9c:11:ac:35:15:b4:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EF:74:C4:49:4F:DC:FE:54:00:39:F2:D4:FE:83:B9:7D:16:90:E3
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3a:9f:91:e0:50:eb:e3:c0:fc:6d:55:47:71:89:a3:ee:50:
17:89:08:c8:89:37:35:44:a6:d0:a5:e4:09:c6:ec:39:1d:a1:
b3:90:91:fe:25:eb:50:60:80:66:27:ce:c9:dc:08:5e:7b:98:
d4:69:25:a5:d2:88:02:e5:9f:13:51:78:97:76:61:4b:80:a7:
18:af:ea:f9:fc:ff:10:b2:a3:39:2a:e6:f4:20:19:11:ec:2c:
9c:b5:a6:91:31:a5:d6:73:56:99:36:79:6b:6e:f3:cb:51:48:
f6:82:f9:9a:39:2c:02:b9:ae:9d:b0:c8:d2:c5:a4:33:a9:d9:
d6:4d:42:0a:a2:79:ee:71:cc:4c:d0:22:51:73:0d:4b:fd:f6:
f4:2a:a6:77:dd:5d:de:5f:aa:fd:9a:a2:2d:9d:c3:4c:63:b7:
8c:b1:b7:56:53:70:90:ef:75:ee:85:d5:be:83:7e:17:6b:5f:
b6:1f:53:fc:3f:83:6f:18:1e:95:cc:b2:73:7d:06:bb:87:cc:
07:2d:3a:2f:a8:e4:ca:0b:ed:a2:57:60:75:68:aa:82:ac:4a:
4b:e2:0c:51:4b:35:66:bb:b6:de:62:dc:69:3a:ba:73:47:4c:
97:f9:b1:a7:25:f4:7b:53:c7:eb:cb:4e:b9:2e:c2:2e:07:48:
3e:0a:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:59 2026 by rpki-client