Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: JDgpB6gO53akQiAEMRbtNp5lESVHeh28A3QOmv1FoYo=
Subject key identifier: CE:2D:3B:B6:A6:28:03:20:2E:44:8F:76:BF:59:F1:AE:EB:9F:48:3C
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019D27E00CFC7B74C8008103358882A57290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: nwstxHy1sd2bt7JlfaiHhlA6B1icIdqMUX7iBbQLsSM=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0c:fc:7b:74:c8:00:81:03:35:88:82:a5:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=ce2d3bb6a62803202e448f76bf59f1aeeb9f483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:8f:93:eb:dc:6f:31:bc:fe:03:7b:a2:c2:
c6:fd:5e:e2:54:72:f4:b0:01:73:1e:28:cf:df:15:
57:1d:f2:99:8d:f4:e1:6b:eb:96:3a:4c:38:f8:ec:
cf:5a:c4:37:5e:53:c7:ab:da:2e:4e:4a:09:1b:c7:
63:c6:35:05:23:fc:ed:4e:4c:24:64:f2:fb:47:04:
53:79:cd:25:cc:68:e8:84:27:0e:8a:b4:48:9a:db:
c6:99:ae:6b:20:ca:07:88:03:5a:66:b2:a5:6a:e8:
dc:98:c0:48:33:23:b1:c5:6a:20:da:58:d7:e4:80:
7f:af:3b:ad:dd:72:1f:83:a1:b8:be:98:a2:00:fa:
78:5e:e7:ac:a9:a9:95:f7:b8:2a:59:2d:99:5a:c6:
b8:c4:41:9f:01:6a:61:9c:dc:63:12:65:36:03:4e:
69:51:06:5d:84:7f:6b:74:0c:6d:37:0a:9f:25:c7:
9b:4a:0e:0a:2e:ae:01:c9:21:c3:03:62:5a:11:f3:
f0:96:60:17:1d:f0:17:be:e0:77:2d:39:e8:22:d3:
da:5b:d5:90:a2:58:72:1d:85:5b:c7:d1:42:0e:52:
52:ea:44:27:28:da:fb:19:d9:de:e5:1e:25:4d:61:
c7:84:3d:28:9c:fc:bc:60:07:17:3e:8f:8d:db:5e:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:3B:B6:A6:28:03:20:2E:44:8F:76:BF:59:F1:AE:EB:9F:48:3C
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:23:7e:b3:0b:12:75:39:d2:94:f7:84:2c:ec:97:00:d0:
5a:92:78:19:f3:2a:df:cc:80:eb:85:a6:f1:c6:6e:fd:e9:66:
49:12:04:cf:a5:97:d1:dd:70:c5:0f:52:76:95:0f:11:a8:99:
ba:94:42:27:3e:20:ea:b3:a3:f6:a1:c5:34:a9:dd:58:63:f4:
f6:08:4e:d7:b5:a3:1d:ff:7f:2b:4d:d2:c0:6b:40:97:f4:4b:
d9:54:28:37:fb:b4:ee:c9:83:92:87:03:30:39:c0:96:ba:e6:
c4:ef:9a:77:c8:76:a7:43:85:9e:3f:3c:8d:a5:89:6d:6f:4b:
48:bc:d4:19:f7:67:b1:1c:5a:fa:99:3a:ee:53:0e:ff:eb:71:
95:73:81:c3:33:96:e5:77:68:d4:4a:32:93:e0:4c:ee:88:d5:
54:64:db:26:0a:f7:e5:70:34:94:9a:5f:37:5d:47:16:ea:e1:
00:cf:76:58:62:69:20:52:af:97:2f:20:4f:21:af:2c:08:f6:
ec:cd:35:d6:e7:e4:83:77:7b:8e:ff:58:91:33:95:ee:e4:59:
29:5e:5e:e1:aa:13:d2:67:eb:09:a0:77:2c:53:c4:f8:dc:f0:
0b:bb:c4:6e:74:59:32:91:80:4e:ac:20:06:c0:87:93:c6:d5:
f7:e3:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:17 2026 by rpki-client