Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: TTrF0JJP9f724E7TYkbQpRiWOCRDQXaoej/Zdq4GfCw=
Subject key identifier: A7:F7:02:47:C4:56:93:76:CC:F4:58:02:C3:01:BE:9F:63:95:CE:C1
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 019D2703980BA9FDA2379A5C6DF2B38A158A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 04BB
Signing time: Wed 25 Mar 2026 22:00:39 +0000
Manifest this update: Wed 25 Mar 2026 22:00:39 +0000
Manifest next update: Thu 26 Mar 2026 22:00:39 +0000
Files and hashes: 1: AcOd55sVqvOO3XHczvl-zosJmzk.roa (hash: e+MSkkLADvHFn1+ehMsTrvhCUFfbRzhM94S4F/DWLXY=)
2: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: QPHeXpA4TCNIQyp03DlFmi/+z9U0il9gaqmptWPrYbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:98:0b:a9:fd:a2:37:9a:5c:6d:f2:b3:8a:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Mar 25 22:00:39 2026 GMT
Not After : Mar 26 22:00:39 2026 GMT
Subject: CN=a7f70247c4569376ccf45802c301be9f6395cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:88:24:23:41:c3:98:87:64:32:55:4f:1d:
ba:cb:b2:06:39:2e:fd:80:8d:de:14:57:42:df:ca:
54:2b:ae:f2:3d:e3:5a:e4:fe:b5:35:63:c2:1e:d8:
e1:4e:7d:80:a1:95:9f:c7:8a:47:9f:c2:00:37:b9:
ae:5f:c4:8d:9f:5d:84:4f:93:ce:60:10:84:6e:3a:
e0:fa:93:b4:54:89:93:d5:56:92:fa:ab:10:e5:a2:
3c:df:62:80:d7:00:69:2c:00:13:22:bc:6a:51:af:
c1:37:a3:85:b5:5d:69:5b:e7:d8:8e:a1:2f:68:3d:
48:29:ab:eb:78:83:8c:0b:ed:1a:5c:54:d4:f1:af:
86:0f:7e:52:38:37:da:eb:5b:30:81:e1:e1:29:25:
7e:0b:5b:50:03:7f:98:9e:3c:37:c8:dc:6f:07:c3:
bd:9c:60:44:f1:99:55:c5:52:bc:64:9a:c2:a3:7b:
38:a6:f1:c2:47:52:3d:ae:ea:81:8e:53:89:39:1f:
4a:ed:64:87:fb:b1:65:b5:6b:dd:dc:bb:ae:34:7f:
e5:49:76:96:48:68:71:d8:00:22:7d:a1:a2:c7:84:
d7:71:d4:61:a7:00:f1:9f:99:b6:52:b8:43:7e:06:
87:be:6b:99:4b:f0:c4:63:03:8d:01:e8:f3:0b:50:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:02:47:C4:56:93:76:CC:F4:58:02:C3:01:BE:9F:63:95:CE:C1
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f7:da:5d:8e:30:bf:8c:76:b5:8b:c9:9b:d6:05:a1:b3:d7:
b8:5b:1d:8d:46:a4:6e:f1:c7:5a:8d:7d:f9:fb:d2:c2:16:1c:
39:e7:93:36:f1:30:fe:62:d5:dd:76:6b:1b:3a:e7:d7:c4:2b:
84:ee:98:54:67:da:3b:49:61:ac:af:04:79:db:23:82:90:0a:
c3:42:b9:2b:b1:fc:3b:59:78:69:58:87:e9:75:00:07:e6:ff:
5a:2f:2f:8f:db:8d:cf:83:54:a0:97:d4:1a:88:b3:b7:5b:b6:
b9:e4:d1:7e:29:ce:b2:b5:b8:c9:47:f5:c1:8f:fa:2b:98:0a:
5b:1d:42:ab:c1:80:80:90:e7:63:e4:eb:88:51:30:36:db:f5:
7f:db:07:b5:77:39:78:28:f7:41:6d:1b:60:ad:d0:32:b9:74:
14:d5:29:b1:67:f2:4a:49:15:80:63:dc:a3:b8:b8:2c:ca:a2:
1b:f9:7e:02:dc:db:eb:87:35:d8:da:27:77:6c:ca:13:10:a9:
0d:10:1c:c4:a6:d0:f4:2c:4a:2e:a1:f1:89:f7:28:df:65:16:
fb:13:9b:42:17:39:c5:5b:4d:75:c4:ab:ed:88:e5:d0:51:cc:
60:1f:42:0f:19:f8:24:06:ab:9e:e2:20:b1:6c:a0:bf:a8:58:
09:46:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:12 2026 by rpki-client