Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: G8/5Fgb5hMd54+B1NPQoWvpm8NATLv1zP7YKXhbfy/0=
Subject key identifier: B2:92:78:37:A1:D1:2F:85:96:D8:90:E2:19:9C:BE:43:3A:06:A7:95
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 019D3488F0165AFB75ABFEBE6568F7FF7042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 13:01:22 +0000
Manifest this update: Sat 28 Mar 2026 13:01:22 +0000
Manifest next update: Sun 29 Mar 2026 13:01:22 +0000
Files and hashes: 1: S2VsmEn5XWWuJUei_3StJEoji4c.roa (hash: l0k+krL5329LUL/NKt5yMEGbXxzmoOUQFl1xjcamtdQ=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: 1BBUGVc3UUFwK+MmZEmT2fobRonR5O2h59Gd2v47uys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:f0:16:5a:fb:75:ab:fe:be:65:68:f7:ff:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Mar 28 13:01:22 2026 GMT
Not After : Mar 29 13:01:22 2026 GMT
Subject: CN=b2927837a1d12f8596d890e2199cbe433a06a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:e3:48:71:ce:b0:f3:a4:13:d3:bb:21:06:
a1:3b:ce:68:7d:9c:bd:ac:2e:9d:6d:ab:88:7a:5e:
ac:c3:e0:d2:07:15:50:71:19:65:e0:6d:7a:68:47:
92:8c:cf:14:63:97:2d:04:ef:66:23:09:aa:5a:f6:
43:cd:c9:82:6b:87:c1:43:88:d4:05:6f:a6:22:25:
94:ba:c6:8e:a5:dd:bd:7c:d5:3e:9e:7c:d9:a8:97:
07:9e:d5:a9:c9:cb:0b:57:ba:49:18:3d:0c:6b:d6:
13:54:17:64:61:a7:17:30:6c:5e:18:f4:4a:a0:e6:
e1:62:d9:32:7b:36:1d:8a:53:83:b4:93:c3:5c:0a:
ab:3d:3b:4e:df:49:3e:14:1a:24:54:88:32:cd:0b:
b5:93:3e:f4:3e:52:25:de:ba:be:8f:6a:9e:58:05:
1e:ad:c1:77:d7:14:1b:18:6a:de:b4:89:f1:07:e9:
56:a0:a1:40:8f:52:75:c7:78:1a:e5:2e:10:3b:a3:
fa:e6:fb:e7:70:e7:ed:6b:fe:44:58:bd:15:ef:fe:
a2:74:0f:fe:d3:e7:cc:d6:34:bb:16:1b:9d:38:73:
7e:6a:a4:6f:3e:c8:69:61:e8:bd:8c:5e:6e:80:96:
93:82:63:02:e2:7c:68:01:9b:39:f4:87:4d:e5:a6:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:78:37:A1:D1:2F:85:96:D8:90:E2:19:9C:BE:43:3A:06:A7:95
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:42:c5:ab:f6:7d:ec:f3:07:70:9d:42:d9:03:47:20:e5:
03:50:fd:33:c9:03:70:eb:7c:6e:f4:13:bd:25:ae:cd:29:ce:
11:ef:5b:da:55:f5:a6:bd:3f:09:0a:16:f3:05:69:19:48:11:
6e:47:66:14:83:06:60:e8:81:34:f9:66:73:56:a8:86:54:c7:
c9:d0:74:b6:c7:99:79:24:c1:09:e7:6b:29:32:37:63:de:d0:
12:e7:7d:35:4b:05:b9:23:60:29:f8:0d:80:f7:74:44:92:ea:
d9:34:ce:40:71:8a:5d:36:2b:5d:c6:f6:ec:dc:a9:57:9b:35:
c9:c3:0a:ac:70:3f:8f:23:65:8b:ea:a9:e4:84:41:c5:2e:56:
8d:13:59:fc:2e:fd:ac:2f:5e:2b:cf:f9:0c:21:89:12:0f:29:
c8:c1:3e:3d:98:02:15:2d:52:8e:fa:6b:ec:54:ff:c5:64:62:
97:d1:03:b7:87:e0:02:47:e7:05:7d:f8:3c:b7:0c:2e:12:f3:
8d:6d:31:f8:66:61:91:9c:81:7e:75:84:4c:38:1e:b2:29:34:
ed:34:bd:22:8d:df:73:15:c5:54:ff:7d:88:04:27:99:a7:ab:
2c:5c:e1:fe:22:e1:d6:2a:b6:a6:3d:83:1b:34:3d:77:07:96:
0b:85:d0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:24 2026 by rpki-client