Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: xo+nyaypvXcDQ+WHOT+/5Odj5vqYYS3frjp6Xe1Hknw=
Subject key identifier: 33:42:A3:B9:4D:34:05:03:A0:EA:4A:64:54:FF:37:58:20:98:8F:08
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019D2AA9975F84677AE44F20244A51D1EFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 15:00:50 +0000
Manifest this update: Thu 26 Mar 2026 15:00:50 +0000
Manifest next update: Fri 27 Mar 2026 15:00:50 +0000
Files and hashes: 1: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (hash: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE=)
2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: bLPO7I+mP0ByrsCF6kOMAvxuSSYBWVXevW7KEbbFyg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:97:5f:84:67:7a:e4:4f:20:24:4a:51:d1:ef:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Mar 26 15:00:50 2026 GMT
Not After : Mar 27 15:00:50 2026 GMT
Subject: CN=3342a3b94d340503a0ea4a6454ff375820988f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:65:56:ef:6f:96:63:cc:f1:cb:42:b3:c7:
4d:79:3f:27:5e:df:ec:69:42:0b:cc:20:75:d7:de:
b7:09:b0:53:57:9f:bb:8f:fa:96:8a:90:b2:8c:1c:
26:8e:e9:61:9d:b2:01:d8:24:62:50:cf:f7:eb:7e:
92:24:e9:c2:d0:1d:ed:fb:05:c7:79:3e:ef:1d:c7:
9b:ca:c2:da:d0:31:5f:00:9a:51:46:18:04:2c:b5:
6d:84:61:fc:68:fe:41:cb:45:ca:18:49:fc:0d:d1:
6f:06:52:eb:bd:77:f0:85:54:7e:55:f6:9c:d3:e4:
db:34:19:05:58:2a:c1:4b:3e:62:36:78:df:88:e7:
d6:a3:63:ec:11:2e:61:22:79:68:81:94:12:65:ba:
da:c7:73:5a:e7:bd:90:85:83:fd:89:e1:ae:e7:d5:
df:c7:03:50:34:0a:09:3f:a5:76:37:b4:52:dd:a7:
ff:72:18:fb:69:1f:d9:ee:c3:27:df:fc:6c:e0:3f:
0f:e2:fb:be:0d:d9:9c:ac:dc:8a:7c:1a:90:59:3a:
4a:be:94:62:46:75:ac:23:31:8a:e4:d4:86:c2:3c:
27:de:f4:d7:1f:e5:37:f7:b7:56:10:8b:77:82:54:
90:90:b7:0b:bb:e3:d9:e4:56:61:ae:65:0d:31:b9:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:A3:B9:4D:34:05:03:A0:EA:4A:64:54:FF:37:58:20:98:8F:08
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e3:93:85:84:9c:8b:81:c0:e6:78:26:dd:a1:09:d7:c1:16:
71:32:34:5d:72:33:a3:e2:34:66:88:b7:2c:b0:fa:d6:6a:be:
0c:b5:6a:7a:b7:ee:e4:82:f0:ce:8a:09:be:0f:d9:9d:c2:41:
af:c7:d6:cd:28:bb:56:78:10:9a:be:66:69:c5:7b:83:f3:3d:
7e:1c:1a:e9:09:5b:bb:9f:a9:c1:c5:45:45:48:2c:87:b2:f3:
33:38:a7:94:9e:59:0f:cf:70:db:60:1e:c7:51:19:cc:cb:d0:
a7:83:66:5c:ae:57:74:86:68:5e:8d:47:48:74:45:3b:5a:b0:
dc:73:02:0d:ce:3a:0b:d4:8c:6d:6e:5b:b8:d1:e1:9c:e8:d2:
41:e7:bd:95:9a:d4:6c:70:ce:4e:78:a6:e9:0a:f9:25:0d:e9:
db:0b:af:f8:09:93:92:a5:e0:2e:32:0a:07:ae:a4:66:53:b0:
9f:7d:c4:68:a0:31:3d:c0:44:f1:5c:88:92:9d:a3:bf:6b:71:
d8:df:95:32:4e:11:ca:0e:ff:4f:ab:c9:3e:e4:38:62:43:85:
9a:0b:9a:1f:de:ab:58:f2:a8:66:64:ea:ce:60:86:f1:30:f8:
3e:be:d7:71:aa:74:d4:10:f0:4b:a5:2d:07:cf:5d:fd:a4:8c:
e2:04:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:16 2026 by rpki-client