Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: PZ7x1jV0GEaOx42JuLyba6ynX4VO9LxI6OaJkMto/Tk=
Subject key identifier: 9F:B6:DF:84:C0:63:03:8C:04:B4:A5:0E:D6:CA:49:C0:F6:7E:46:8A
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019E1F114C1EABAFAC935D630CB2ECF5B8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 02:01:27 +0000
Manifest this update: Wed 13 May 2026 02:01:27 +0000
Manifest next update: Thu 14 May 2026 02:01:27 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: G8fjnaq2wvvar4/NxuDHLe0CX4t8bnDCl5IhFmU0zJg=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:4c:1e:ab:af:ac:93:5d:63:0c:b2:ec:f5:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: May 13 02:01:27 2026 GMT
Not After : May 14 02:01:27 2026 GMT
Subject: CN=9fb6df84c063038c04b4a50ed6ca49c0f67e468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:3a:10:64:aa:ce:57:23:44:de:e8:b4:7b:
f9:46:e6:50:5e:70:0c:1e:ba:cf:2c:ae:1d:83:b4:
26:99:e7:68:a3:f3:55:e4:b5:76:f0:e7:c0:25:80:
65:5a:91:ac:0f:d1:7c:17:73:48:c3:65:be:34:cd:
12:09:40:b2:5e:27:11:c7:81:ab:7f:49:db:bc:83:
e5:ce:27:5e:cc:55:5f:a2:34:d1:c5:cd:5e:38:7b:
22:8b:61:22:ec:a1:36:3a:46:b4:85:67:18:4b:27:
4f:12:16:7e:98:70:5b:8f:e1:b3:81:88:f6:c2:ab:
ad:70:83:99:54:a0:ea:10:a9:8c:9e:a3:09:9a:48:
64:5a:46:20:fe:42:2a:7a:aa:3b:34:25:be:5b:dd:
6e:fb:ae:f0:58:5b:6c:15:0f:f9:8e:bf:36:9f:b1:
f1:16:3e:6a:72:f6:99:13:b2:22:3a:17:d4:ff:f9:
9c:11:87:33:36:01:63:5f:06:fa:40:74:b5:33:d3:
23:94:e8:1a:7a:32:a6:b7:59:2b:58:98:f2:78:2c:
7e:a6:82:fb:95:75:9d:15:29:b4:71:5b:a3:e3:5b:
f9:8a:de:6e:20:05:06:ea:28:43:25:d0:54:82:07:
c4:48:5f:af:fa:de:60:ac:29:fb:19:9e:bb:5f:cd:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:DF:84:C0:63:03:8C:04:B4:A5:0E:D6:CA:49:C0:F6:7E:46:8A
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b4:1f:b9:3b:4f:53:5a:f8:e7:a7:62:36:67:91:f0:e1:17:
db:eb:75:e3:36:80:2c:c7:a1:dd:39:06:f0:b2:84:e3:90:3f:
0b:b9:5b:37:8e:86:a2:96:1c:2e:bc:1a:0f:7a:b2:8e:18:28:
9a:6e:e7:15:a1:8f:a9:35:28:4f:d1:6e:e2:d8:dd:76:eb:2c:
3b:a0:b6:0f:57:1d:00:7b:f6:b2:e3:14:60:6a:7c:38:4f:88:
1c:f3:f9:b0:a6:a5:03:60:92:ac:7f:26:62:0e:57:3a:0c:6a:
75:f8:6e:53:83:47:ff:ba:65:af:93:82:2e:51:70:44:46:af:
e1:e3:49:3d:31:0b:b8:24:e4:38:fd:43:0e:83:d9:e6:44:6d:
5e:e0:27:07:db:5c:f7:ec:09:70:f2:d2:26:09:d9:f3:e2:7a:
e4:e0:aa:f8:93:fd:d9:27:38:84:9a:01:09:fc:61:d9:09:0f:
fe:1e:2a:f8:53:17:bf:99:45:70:b5:27:a9:d5:b0:7f:52:d2:
26:e5:f2:f4:1e:e6:7b:fa:2e:99:6c:b4:96:b4:07:bd:0e:5d:
cc:da:ce:a1:5f:27:f7:58:42:24:52:c1:73:b1:55:58:83:2a:
ef:61:16:8b:1e:f6:c9:01:9c:be:55:98:a4:17:27:4f:58:00:
01:c3:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:25 2026 by rpki-client