Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: nK1DdwpFb75HLRX9lA3ZR7lWgjUWAgU+R5E0bvesrxU=
Subject key identifier: C3:7A:83:2B:91:79:A5:E2:70:93:1D:75:3C:C1:CD:DB:AC:88:59:D6
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 019D2A3B7B9A9C50BD0230E11185366BA2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:34 +0000
Manifest this update: Thu 26 Mar 2026 13:00:34 +0000
Manifest next update: Fri 27 Mar 2026 13:00:34 +0000
Files and hashes: 1: 0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa (hash: tftG+mQIphk3FNSPZp40EyRTZOVpuoMSFbhQMapxPC0=)
2: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: n/p3Yn6l+o4KGFKPNd7P8AD4k6bOeYbr25Tp1vMs4d0=)
3: j2_V5BwB6zWowKkrqo3IR1AI3TY.roa (hash: v2GJYRFtHtKuk3djB+9NlbqHwSDbHuYB27XPregGwCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:7b:9a:9c:50:bd:02:30:e1:11:85:36:6b:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Mar 26 13:00:34 2026 GMT
Not After : Mar 27 13:00:34 2026 GMT
Subject: CN=c37a832b9179a5e270931d753cc1cddbac8859d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:f5:2c:cc:ab:0c:34:85:18:36:3b:1d:e5:
fd:1c:08:5e:f8:f6:8c:6e:f5:d0:a3:3a:f1:f6:59:
91:5a:1c:44:c3:2b:a0:0e:63:a2:50:00:b4:d9:8c:
d6:6f:b6:80:d2:37:8c:db:1f:4b:38:45:d6:9d:71:
77:74:a9:de:f5:e3:7a:e3:01:31:e9:44:0a:45:61:
4d:3b:60:13:dc:e9:74:0a:21:0f:b9:ec:65:72:71:
91:24:02:d6:73:05:9c:fe:23:95:cc:3d:d0:ea:4a:
ef:e3:d9:85:66:29:48:c5:d4:4e:21:65:30:af:81:
d1:76:0c:ae:0e:54:2f:11:bf:91:29:50:78:e4:a8:
7a:c3:f2:1f:0e:7b:5c:d5:9f:e1:64:00:f3:b0:be:
15:b1:86:01:b4:71:68:1f:eb:73:f1:92:e6:e6:f8:
c3:7e:7f:ae:b0:3f:ab:91:6f:6d:4a:c9:cf:05:0c:
7e:bb:1f:ee:a9:26:0a:71:4e:9f:e9:6f:32:d8:eb:
10:83:de:8f:90:ff:82:a0:6b:28:4b:f7:45:20:c6:
af:b4:7c:1c:e2:2a:9e:5f:81:87:6d:78:11:88:81:
43:ec:97:c5:a0:f1:d4:e5:56:94:1f:01:d6:b2:f2:
60:77:3e:ef:c2:31:94:06:88:3b:8c:20:c6:4c:72:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:83:2B:91:79:A5:E2:70:93:1D:75:3C:C1:CD:DB:AC:88:59:D6
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:33:3e:ba:a5:50:0d:81:29:9e:dc:2d:d7:6d:3b:4b:7f:e1:
b2:8f:6c:f6:d6:d6:c2:fb:a5:ae:17:80:db:b6:73:31:bf:46:
74:26:d1:43:fe:ba:02:a9:f6:85:f1:89:ef:f7:f0:b8:83:74:
31:d5:25:fa:23:bd:74:e9:78:71:a7:fc:95:1c:0a:8e:27:7f:
4f:17:9f:19:83:43:13:e4:ed:ac:42:4d:b8:64:25:ec:1c:3b:
9b:87:21:cd:06:ab:36:3f:3d:7c:57:8a:9a:5c:1f:3d:2d:b8:
51:85:1f:b6:90:4a:35:7b:86:2d:55:e3:c6:92:b1:fd:92:78:
eb:a0:c7:47:e3:d2:72:45:49:6b:98:fe:e8:2d:28:07:8d:73:
0b:c8:c2:a9:06:1f:0b:ba:d9:1d:29:be:37:ff:67:79:58:a4:
d3:83:5c:0a:02:ef:f7:ef:cd:ac:e0:31:fe:df:f9:19:ff:c7:
36:9f:7c:be:81:aa:ba:0f:2f:aa:be:90:68:b5:f1:e2:d0:bc:
ed:87:90:2b:3c:27:14:0a:2f:66:39:9b:f2:61:e1:20:e5:68:
6e:6c:b4:b7:23:6e:48:96:69:d7:43:62:cb:af:5a:e0:bd:c2:
ba:4c:32:27:57:87:11:5d:46:f6:c7:03:66:67:8e:9b:31:a9:
ef:fb:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:30 2026 by rpki-client