Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: mGyGgDKQIHWcavCCxziJUy5Ctn59DMGG1Y3zb2tWowo=
Subject key identifier: 38:4D:2F:EB:A5:19:4E:15:17:FC:94:7A:FA:3A:74:83:B9:B1:99:67
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 019D265F9ABEB53DC69059D431CDCE258293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: 7dEOiIA8_9zh3xckJYupQMCdciI.roa (hash: Tjdlo0qqbCRgS4I5Nkc+cC8kBHitGngl1heiUQSaGXc=)
2: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: e6fUUozvs+6WVm0X0LRLgJ4Piy707xb33UCAeUXQPrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:9a:be:b5:3d:c6:90:59:d4:31:cd:ce:25:82:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=384d2feba5194e1517fc947afa3a7483b9b19967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:99:15:29:3c:a1:70:00:61:b9:0c:c3:70:
f3:04:3a:15:1a:fc:fa:f6:8e:f4:5a:2b:87:55:f9:
20:da:d5:e2:24:b6:90:15:84:d4:d1:6e:47:b7:4b:
0f:f6:b3:6a:30:f4:af:12:b1:80:23:09:03:10:28:
cb:ab:03:f1:19:24:2d:dd:0b:6c:97:72:cb:63:f5:
4d:d7:e3:42:62:e4:69:44:9a:e0:44:55:d1:20:ad:
f8:48:8d:cb:e0:94:89:7e:39:81:7e:77:46:a6:f4:
4b:53:14:8d:b1:7b:a6:54:3b:bc:67:bf:d2:0d:be:
5c:07:ef:f6:71:c9:4e:b6:82:21:8c:27:8b:b5:6a:
13:a2:1c:88:f5:39:5c:90:6d:32:34:26:a1:58:3b:
cf:26:5a:0f:d2:bc:35:65:c7:f0:77:43:f0:08:46:
03:3e:66:ed:d9:08:28:f8:15:ec:54:a8:56:96:0f:
8f:9d:c8:18:4c:d5:e1:ff:b3:6f:c9:e1:c9:15:03:
66:fb:49:c4:a3:d2:53:9d:f7:20:20:4e:06:0e:f1:
35:25:41:2d:47:a4:6f:6e:37:a9:1f:df:c8:29:f3:
dc:5c:50:6e:9f:4d:bb:d1:93:6b:7a:a9:6c:4f:a4:
81:9b:86:b1:cb:c1:5e:30:bb:51:c6:44:31:4c:77:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:2F:EB:A5:19:4E:15:17:FC:94:7A:FA:3A:74:83:B9:B1:99:67
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:04:d9:0d:06:bf:c9:5e:d8:d1:9f:02:19:7e:be:65:c0:
88:f4:2f:57:01:c4:6f:8f:68:13:aa:16:e1:c7:fa:c2:2c:e0:
d9:ea:3d:7a:a6:36:ca:8a:a8:fa:a5:be:b8:f4:68:59:e3:65:
06:02:2f:35:17:4e:67:22:30:ae:b8:bd:c2:04:6c:ee:ec:bf:
f5:78:e3:ef:0c:9e:3c:0d:4d:79:a5:8d:3f:b8:7d:3e:da:57:
36:6b:b3:ec:5a:7a:db:18:f7:77:c1:04:6b:da:1b:0d:af:c9:
e9:6a:90:56:77:78:35:b0:d4:28:c6:c0:04:b0:b0:76:aa:81:
0a:d3:81:3a:55:69:14:42:78:ef:67:97:4d:d1:e6:7e:47:45:
71:f4:f5:8b:8e:05:ed:b5:1c:7c:89:c2:ed:78:01:33:b6:b5:
43:14:30:26:ca:18:5a:f8:49:0b:de:22:7b:84:ba:68:49:d9:
df:f4:3a:2d:97:ae:9d:a0:57:44:4e:29:a8:6d:8d:a9:76:cd:
19:05:52:e7:72:3c:92:72:8b:94:88:1f:8e:5f:79:de:15:a0:
07:bb:f6:4f:51:32:ad:c2:9c:9e:a5:9b:02:ec:f0:4a:1e:07:
1a:55:58:5c:ce:53:d2:0f:1c:36:e3:f3:10:2f:f9:df:d5:d5:
c3:0f:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:48 2026 by rpki-client