Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: LG/AD1eTqjKuqc9dt6fr0KpvpRtsNSsI19Q/p6Byn08=
Subject key identifier: B8:58:33:98:13:3C:26:72:22:5C:E0:92:2A:C8:60:0C:A5:93:87:B2
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 019E1F109EE4A9D9335CC7488C53502755B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 02:00:43 +0000
Manifest this update: Wed 13 May 2026 02:00:43 +0000
Manifest next update: Thu 14 May 2026 02:00:43 +0000
Files and hashes: 1: 1_5h2ktiO2Us-d9_9EOFV58PYPA.roa (hash: sd6598E1QU/JTbPf14WQIor/gpE3yNeo7WtwXbLKg9Y=)
2: czO6xgkAci50_TFJzcGjRe13r4g.roa (hash: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: vlCiOQV0tk3y73SRhAYvG2OaAv6tBFKcN+zKwWsZI5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:9e:e4:a9:d9:33:5c:c7:48:8c:53:50:27:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: May 13 02:00:43 2026 GMT
Not After : May 14 02:00:43 2026 GMT
Subject: CN=b8583398133c2672225ce0922ac8600ca59387b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:dc:6a:af:43:05:02:8c:f2:15:5e:8f:a1:
11:b2:24:cb:0f:98:e0:07:f3:2f:35:ef:c9:a7:71:
a2:25:bd:98:f3:6d:19:87:df:25:af:90:d3:68:25:
a7:fc:62:7f:15:5d:7a:a3:75:04:15:8b:6a:e5:d5:
65:4a:92:88:9c:46:cb:0b:87:e0:2e:ff:e3:38:98:
9f:c3:90:7c:16:7d:a4:b4:a9:61:10:6a:eb:bb:19:
26:27:09:41:88:39:9a:5c:50:73:fc:57:d8:09:3c:
19:4a:2f:58:0c:ff:38:5f:7e:02:1b:d5:13:37:bd:
fc:02:cb:b3:ba:f5:73:09:b4:40:59:92:a9:95:f8:
57:f2:c8:c7:57:c5:53:9b:08:55:3f:93:0a:98:b8:
34:50:6c:42:a2:07:f1:ba:90:99:a0:6c:a9:61:ce:
d9:40:86:8e:01:03:ae:5e:03:d7:f9:8c:0f:10:c4:
2c:52:2e:99:fc:7a:a2:1d:64:4d:6f:83:71:4c:55:
1c:10:80:3e:1f:78:54:9d:6d:eb:ef:ca:36:fa:e3:
c4:1d:c8:fb:5d:d9:e5:f4:80:07:2f:8e:9b:af:e5:
02:5a:4a:8c:04:96:8a:c0:86:03:2c:cf:ef:a7:48:
7a:7d:63:7d:1b:0f:d1:09:46:36:f6:80:24:41:a8:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:33:98:13:3C:26:72:22:5C:E0:92:2A:C8:60:0C:A5:93:87:B2
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:10:e2:90:aa:1a:4d:54:ce:8f:e2:0b:b9:05:6d:b5:3e:6d:
43:69:91:54:2f:78:48:03:bc:c9:87:09:38:ac:85:b1:6e:ce:
99:af:28:23:05:04:28:b4:2b:f4:cc:f8:e6:ae:ca:12:ca:67:
99:dd:bc:80:92:1d:64:51:0c:82:cb:2f:01:56:fc:3a:04:02:
2e:ff:94:62:09:2b:96:57:db:f8:65:b0:3d:11:42:39:30:25:
96:4e:1c:6c:7d:29:f6:1d:e8:a0:7e:6b:e4:7d:48:8c:86:ba:
6f:d2:50:25:ac:ea:21:b9:12:08:8e:40:bd:94:2f:32:2b:6e:
06:2a:80:7a:d7:f4:ee:37:ea:02:e4:1d:e9:eb:91:4f:5c:1f:
74:cb:6e:92:c4:32:4b:5e:75:ef:0a:5c:76:79:0d:7f:4a:88:
51:f8:60:7a:61:e6:dc:ab:f4:c4:2c:8b:58:e5:eb:8c:f8:26:
ac:d3:03:8e:51:a3:66:2d:71:81:40:f6:33:ce:da:46:f4:ed:
33:c2:b9:83:ef:3c:5f:b5:d3:35:48:3d:e4:b6:0e:1a:c4:68:
1e:8f:7d:b2:71:43:f8:34:5e:1a:90:9c:5a:8e:c6:3b:fb:2c:
40:11:88:b3:11:55:44:1d:d8:c4:94:5b:3f:92:45:c2:35:17:
d1:62:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:49 2026 by rpki-client