Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.mft (raw, json)
Hash identifier: jQV5Gf0w9TLKWcyvFFM7aQKJgM4SDx5DRSlPJEOXPzw=
Subject key identifier: 99:CE:B1:A6:18:46:36:58:9B:EF:B7:95:94:6C:EC:F8:43:D6:0F:D7
Authority key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Certificate issuer: /CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Certificate serial: 019D2771FDDF1D8D09C7D8179BFDD3E0E1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: MivTOA-Q4KMcXW4nhgWlHOQxYFw.roa (hash: Xy1rAGnYMcCxQ06ADYspJII1dddHSOxsylQH095rx5c=)
2: UAKjP17GaAWRwJf9tKug4Cj0CEU.crl (hash: uj22jlb6gd6XT7mb3t830Iq06tGog0mt1wVsrgY8KS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fd:df:1d:8d:09:c7:d8:17:9b:fd:d3:e0:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=99ceb1a6184636589befb795946cecf843d60fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:da:9c:0a:d2:71:b9:56:37:6a:bc:d5:d3:
b3:2d:2b:34:54:a1:4b:e1:1e:4c:c5:63:73:69:67:
88:6e:33:31:6a:f6:f7:a1:53:29:2c:66:e5:6b:86:
4b:3a:d5:21:04:ea:c0:f7:cc:6f:b0:3a:b9:6c:08:
9e:ff:c2:e7:ca:7f:16:60:45:f2:db:19:36:2a:42:
86:08:b6:5b:f3:45:f2:94:d2:51:1a:75:8a:d9:49:
86:38:24:d6:14:dc:08:b8:a7:c0:ba:97:ad:fc:d2:
91:df:7c:f3:5b:8c:33:3a:5a:04:85:85:ae:3c:41:
67:66:3e:c9:f5:cc:0f:90:08:de:fc:b7:04:3f:8a:
2a:51:70:9c:d2:53:4b:62:f4:85:0d:6f:b7:c8:52:
08:69:7b:14:f1:9a:86:90:4f:33:c0:61:93:84:ce:
b9:d9:d9:a2:8a:ce:44:39:fd:ff:b5:12:94:bd:7a:
a2:ad:70:dd:ee:27:16:8d:21:29:b2:08:32:ce:53:
cf:de:cb:d1:5b:7c:71:59:71:35:da:af:fe:b1:8b:
9d:ef:97:17:ce:b3:8d:6f:a9:c5:4f:5f:4b:06:2c:
89:0f:b8:a3:fd:13:52:a2:c0:5a:5e:1f:32:0e:80:
6f:4e:11:7c:ad:a8:09:cf:a0:7c:4e:4f:82:2c:ff:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:B1:A6:18:46:36:58:9B:EF:B7:95:94:6C:EC:F8:43:D6:0F:D7
X509v3 Authority Key Identifier:
keyid:50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:46:2a:e8:fe:cb:f6:55:40:5e:f8:8b:02:d7:c5:46:1f:
53:f4:de:6a:0f:ba:8a:72:65:a3:19:59:a2:2e:22:5d:19:49:
51:48:81:2d:b4:3b:27:d6:e8:4d:cb:97:39:1b:5e:0a:55:71:
f0:b6:0e:3c:8f:3f:e5:cd:d9:b0:56:1c:8f:86:1c:54:f3:e3:
22:5f:c2:2a:31:f6:a3:10:07:93:1d:64:a5:56:15:7e:17:f9:
3f:3a:5f:a6:32:87:5f:a0:d4:7d:7e:9a:4f:88:33:44:3e:e7:
7e:1d:82:7e:26:10:e3:e5:65:c0:49:26:f4:c5:05:97:e1:0c:
83:1e:b4:55:2b:e8:dd:52:1d:df:cd:a0:20:92:8d:89:30:09:
de:12:d4:4b:b6:ff:08:91:c7:b5:1f:94:56:c7:a4:3f:11:34:
b3:9a:9d:1c:6e:f0:ae:16:6c:de:81:2d:fb:07:2a:bd:56:1f:
0a:48:b4:6e:bf:1f:af:72:9d:a7:6e:48:a5:75:13:8f:3b:2d:
22:71:0c:c9:a3:47:57:97:a7:5a:0f:2e:42:01:99:f4:a8:10:
d2:de:15:82:64:c2:e9:32:f7:ac:92:da:c5:c5:51:92:90:9b:
62:06:55:bd:3a:39:57:2a:e7:5b:82:e2:10:e9:a0:73:03:8d:
81:66:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:18 2026 by rpki-client