Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: egD9ITWNcGR3rM2/RfdUGMbhWj7jSgAhLeOIBzbVpmc=
Subject key identifier: 0C:FA:8D:23:D0:14:EA:FA:8B:8D:2E:5D:D6:6E:8D:89:4E:CD:B3:2F
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019D2C97CC6A0CD39B2ABDC140FD0DE29131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 1890
Signing time: Fri 27 Mar 2026 00:00:38 +0000
Manifest this update: Fri 27 Mar 2026 00:00:38 +0000
Manifest next update: Sat 28 Mar 2026 00:00:38 +0000
Files and hashes: 1: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (hash: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE=)
2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: /iR6RYI0UVBv/DvAHtpFnKNK0yOB3jwcWetfZlmFsiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:cc:6a:0c:d3:9b:2a:bd:c1:40:fd:0d:e2:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Mar 27 00:00:38 2026 GMT
Not After : Mar 28 00:00:38 2026 GMT
Subject: CN=0cfa8d23d014eafa8b8d2e5dd66e8d894ecdb32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:0c:76:4c:ba:bc:18:8d:11:e0:3d:0e:0a:
06:29:7e:c2:da:63:8b:e5:f9:83:16:ab:33:e6:b7:
9d:e1:ee:84:f9:90:40:d0:dc:27:67:c8:85:f6:d3:
c7:b5:c9:c9:c0:55:ee:12:f3:21:f9:6c:42:29:1e:
30:07:6c:2a:d6:dc:31:1e:53:64:c0:7d:75:c1:26:
91:c7:c1:a6:7f:ba:5e:73:26:ba:f5:06:e6:e4:17:
f3:b3:b5:71:d1:91:c6:cb:6d:d2:27:62:4c:dc:00:
65:28:f0:34:22:10:df:f8:69:e7:ca:08:3c:68:0b:
d3:4b:70:97:65:05:d4:67:d1:81:5a:e1:b8:6d:33:
24:03:83:84:32:88:f8:60:d3:5e:d1:d3:64:a5:21:
4e:f4:ab:a4:c0:b7:f7:6d:bd:b8:d8:48:94:3e:7b:
8c:a6:8e:e2:08:06:83:14:2b:51:4f:94:5a:fd:71:
4f:e7:9e:9d:74:89:da:ff:f7:b9:39:45:03:49:60:
8a:79:ea:cb:14:45:41:91:3f:50:65:96:66:b9:16:
c4:8b:7e:2a:40:04:f9:e7:00:b6:55:90:77:52:f7:
15:f4:ed:30:e3:29:8b:7a:b4:53:a3:28:bf:21:e3:
8e:f2:aa:3d:9e:ba:8e:6f:1e:a5:44:56:36:82:a0:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:8D:23:D0:14:EA:FA:8B:8D:2E:5D:D6:6E:8D:89:4E:CD:B3:2F
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:19:7f:64:58:11:04:0e:a0:45:ad:f6:7a:a3:f1:39:48:69:
40:19:57:26:7a:3b:0b:3f:97:8e:06:44:00:ba:ad:0a:a2:52:
5d:ab:ac:48:a9:77:40:e9:1c:1a:bc:40:86:74:b7:08:07:0b:
e1:85:1f:2b:0c:1c:f5:93:a6:c5:4f:6d:21:e8:b7:bf:06:95:
e4:9b:73:ba:89:b6:3b:8f:6c:37:2a:68:49:92:2a:17:c7:62:
a4:fd:3a:56:bc:53:01:ac:2f:78:4e:3e:ef:db:52:e1:49:e8:
60:93:62:3e:dc:0f:f4:c0:db:1f:d7:36:01:39:5b:c9:e9:e3:
c6:8f:c4:da:2b:db:63:17:6e:60:da:fd:1e:15:fd:e4:ee:d6:
5e:b4:7d:76:0d:80:e5:c1:b6:49:8f:a7:bb:f5:01:04:84:f5:
4c:7b:e5:fa:aa:18:93:06:a5:ed:ea:cc:5e:12:3c:db:ad:72:
e8:22:5a:cb:98:13:51:08:25:36:49:f7:81:a0:3f:74:ab:f9:
5a:69:b4:6b:e1:fb:41:c7:0c:09:5a:f9:e0:68:b7:34:9e:45:
0a:61:e4:f6:eb:a3:34:f6:24:39:f8:91:23:1c:5f:ef:1d:04:
a8:55:d4:e6:4d:74:95:59:9b:08:f8:de:26:ba:3b:59:9f:66:
f7:a0:21:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sl8xqDNObKr3BQP0N4pExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4
NjM5NTgwHhcNMjYwMzI3MDAwMDM4WhcNMjYwMzI4MDAwMDM4WjAzMTEwLwYDVQQD
EygwY2ZhOGQyM2QwMTRlYWZhOGI4ZDJlNWRkNjZlOGQ4OTRlY2RiMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/EMdky6vBiNEeA9DgoGKX7C2mOL
5fmDFqsz5red4e6E+ZBA0NwnZ8iF9tPHtcnJwFXuEvMh+WxCKR4wB2wq1twxHlNk
wH11wSaRx8Gmf7pecya69Qbm5Bfzs7Vx0ZHGy23SJ2JM3ABlKPA0IhDf+Gnnygg8
aAvTS3CXZQXUZ9GBWuG4bTMkA4OEMoj4YNNe0dNkpSFO9KukwLf3bb242EiUPnuM
po7iCAaDFCtRT5Ra/XFP556ddIna//e5OUUDSWCKeerLFEVBkT9QZZZmuRbEi34q
QAT55wC2VZB3UvcV9O0w4ymLerRToyi/IeOO8qo9nrqObx6lRFY2gqA3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz6jSPQFOr6i40uXdZujYlOzbMvMB8GA1UdIwQY
MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt
YmZlMGNjYjc5ZmNjLzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj
LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhl/ZFgR
BA6gRa32eqPxOUhpQBlXJno7Cz+XjgZEALqtCqJSXausSKl3QOkcGrxAhnS3CAcL
4YUfKwwc9ZOmxU9tIei3vwaV5Jtzuom2O49sNypoSZIqF8dipP06VrxTAawveE4+
79tS4UnoYJNiPtwP9MDbH9c2ATlbyenjxo/E2ivbYxduYNr9HhX95O7WXrR9dg2A
5cG2SY+nu/UBBIT1THvl+qoYkwal7erMXhI8261y6CJay5gTUQglNkn3gaA/dKv5
Wmm0a+H7QccMCVr54Gi3NJ5FCmHk9uujNPYkOfiRIxxf7x0EqFXU5k10lVmbCPje
Jro7WZ9m96Ahjw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:22 2026 by rpki-client