Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: 6so9ueKlfiR9xQ1agBRJPvykJmCYZK8G7FLAHFn00UA=
Subject key identifier: FF:AB:1D:43:05:8F:40:E2:A1:CA:4E:01:25:1F:36:C0:AE:57:F0:77
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019D26CDAEBA60D980ECD87B0A3465CC46F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:46 +0000
Manifest this update: Wed 25 Mar 2026 21:01:46 +0000
Manifest next update: Thu 26 Mar 2026 21:01:46 +0000
Files and hashes: 1: 8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa (hash: Z7aisMaBlEpC+Box7db/aG2eyltwAxWv0Dd2ZI7sSqU=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: s+p9lUF4DnK9LybkVsyKSZou/EMtdL5SxynVY1J3/HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:ae:ba:60:d9:80:ec:d8:7b:0a:34:65:cc:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Mar 25 21:01:46 2026 GMT
Not After : Mar 26 21:01:46 2026 GMT
Subject: CN=ffab1d43058f40e2a1ca4e01251f36c0ae57f077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:48:a5:52:a3:33:d8:f0:35:88:4f:5d:08:
c0:45:05:66:90:b5:7c:0f:ed:c8:c9:d9:93:b3:45:
db:e1:46:39:10:16:18:c1:54:a9:e3:1e:44:e9:a4:
b9:5c:dc:8c:bd:4e:53:f9:d9:0f:e4:48:d0:80:d2:
69:5d:12:01:7a:93:f7:60:f7:4c:d9:cd:af:10:09:
fd:64:70:19:c4:82:a6:48:f2:d5:2c:73:c5:2a:f5:
0c:89:a2:2b:fb:69:64:8d:e9:08:2a:4d:95:5b:77:
e8:48:2d:9e:ba:ed:f0:46:2a:73:9e:cb:de:11:0b:
97:85:fb:fa:10:7c:6b:67:ba:95:20:47:7c:8a:30:
c0:d8:61:e6:a8:ca:9e:18:05:60:02:e9:5d:ee:a2:
39:5a:a8:62:f5:51:cc:d9:f3:a0:da:75:0e:71:52:
da:1a:ce:db:7b:95:f1:b6:ea:5a:d3:dd:65:58:0b:
21:8a:17:f3:4c:fc:e7:93:fc:c9:f5:fd:40:4d:f0:
61:a0:c9:02:78:42:cd:77:cd:06:4e:54:57:a1:d9:
f1:e2:87:eb:32:90:41:18:8a:2b:2a:bf:f1:5e:e0:
44:24:a5:74:25:f3:3e:bd:de:cf:59:50:e3:d5:6a:
97:d3:6e:70:1a:ac:d6:68:da:a8:71:d6:98:c7:3d:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:1D:43:05:8F:40:E2:A1:CA:4E:01:25:1F:36:C0:AE:57:F0:77
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:5a:0d:a8:e8:d5:53:e8:9d:0b:3e:f8:fe:14:e7:4a:0c:
79:24:e0:3b:9e:7a:5f:34:70:eb:42:40:39:6f:cc:ae:c5:9b:
e5:b5:4a:07:19:16:d2:9d:62:24:d2:ed:79:b3:51:d3:08:73:
a5:a3:9f:4c:18:1a:d0:64:89:58:d3:2d:61:a2:e4:cb:e8:5b:
29:33:fc:14:51:c2:ea:a5:4c:00:d3:4f:40:b3:39:f1:4b:0f:
44:7a:8d:26:ff:ac:81:af:c3:11:ba:37:98:66:6a:82:f7:38:
e9:00:73:ff:ec:2e:af:46:13:dd:17:df:63:29:8c:23:16:79:
21:3b:e4:33:73:37:87:be:5e:a8:7c:97:b8:47:97:b2:05:19:
ff:88:11:a4:77:f2:58:61:6e:df:92:cd:ad:36:18:34:09:4e:
de:b3:f2:56:f8:70:90:24:5d:40:dd:e3:59:bb:88:f5:fd:d7:
a3:5f:5e:a4:f1:bd:a0:2a:96:8a:3c:5e:bf:e4:ff:08:fb:19:
ef:cd:64:af:7f:a4:5c:97:9c:e6:53:3a:64:dd:93:10:ac:7b:
58:da:47:3e:46:f6:4f:b6:5f:e2:35:6c:d5:70:19:79:94:e6:
44:51:6f:8e:36:b4:6a:e8:1f:2c:ad:c8:61:46:70:08:dd:ea:
71:df:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:20 2026 by rpki-client