Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: 5o8uhekrswe4O0E5QCm1BgSFai7GGjEM4Q1b4Cqpgcc=
Subject key identifier: 37:49:CA:DD:6A:55:EF:0C:BB:C7:6F:E2:6C:BB:2E:00:EA:F3:DE:58
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019D28849E5C73B1357D9FC29A2CA5273AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:12 +0000
Manifest this update: Thu 26 Mar 2026 05:01:12 +0000
Manifest next update: Fri 27 Mar 2026 05:01:12 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: i4rB1cwq4Rjh3oOpUmSgDQKsB+TwNQqDu457RJkIQhQ=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9e:5c:73:b1:35:7d:9f:c2:9a:2c:a5:27:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Mar 26 05:01:12 2026 GMT
Not After : Mar 27 05:01:12 2026 GMT
Subject: CN=3749cadd6a55ef0cbbc76fe26cbb2e00eaf3de58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:bd:a4:79:84:28:74:41:20:0e:e7:5d:2f:
5b:3c:a6:e9:f7:8a:8f:b0:c8:68:ef:4e:d9:79:95:
ac:ad:df:d9:55:83:c1:21:be:d7:3c:85:ac:49:57:
53:e1:73:a3:13:bb:cc:e2:b5:17:bf:04:d0:fb:94:
2e:d2:e5:f7:f4:58:72:de:ea:5d:a5:12:42:0e:41:
70:be:45:b0:85:b5:c5:fd:cd:95:3d:72:c8:89:c9:
e0:1f:7a:1c:8e:8f:08:cc:94:39:53:96:55:33:dc:
15:ea:e5:c2:39:54:f0:e1:89:4e:72:18:9a:0f:7e:
3c:86:cf:30:26:65:80:64:25:95:41:b1:9c:ed:0c:
67:c6:85:3e:0f:41:3a:92:de:5b:db:00:91:5c:f1:
4b:79:28:76:8c:25:10:64:e5:d6:9b:cf:98:e2:0b:
23:d5:3d:be:60:fb:60:e9:1d:31:98:32:ec:f8:b8:
7a:48:8d:83:f1:f1:dd:44:19:85:7d:ea:56:88:0d:
ec:8e:cc:2e:60:fa:54:e9:a6:64:42:50:45:36:89:
54:ec:cb:10:6f:c9:ba:cf:c9:dd:ae:2b:9f:ce:94:
9a:31:d2:56:a6:dc:a6:8d:b4:a3:12:94:a3:fb:64:
be:c9:7f:62:0a:79:48:f2:ba:82:78:ba:26:d9:5c:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:49:CA:DD:6A:55:EF:0C:BB:C7:6F:E2:6C:BB:2E:00:EA:F3:DE:58
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ad:f2:83:92:94:6a:43:e1:44:ab:27:50:76:ef:4a:e0:37:
9c:ce:d6:f7:46:a6:2b:3c:1b:47:bc:ab:e9:f0:26:b0:53:f9:
dc:1b:67:bc:d5:e8:45:83:33:55:24:7c:3e:a6:c0:ad:ce:17:
86:8c:a1:eb:fe:6d:82:f9:b9:21:8d:90:7b:e5:fb:9d:a6:3a:
60:a5:14:4d:ee:96:94:14:9a:33:79:44:2f:05:59:a9:cd:4e:
37:4b:74:39:0b:92:02:1d:36:b3:25:a6:80:90:91:05:ba:3e:
77:fd:a2:8c:ff:21:c9:51:79:e7:6c:a8:b4:74:c6:30:4e:9b:
d4:c1:2c:8a:2c:7b:88:98:3f:97:21:03:a4:e6:1a:cb:0d:0e:
4b:04:0e:16:ce:1e:5b:b8:b1:5a:25:5f:ab:e8:93:b1:fc:33:
24:73:e3:fd:20:13:33:46:62:e0:4a:16:b0:b6:47:a9:ad:77:
0c:72:6d:f7:9d:2f:b2:0b:5e:10:e8:96:bd:a9:a6:f7:3a:a4:
21:58:4b:e5:7f:d7:65:ee:5d:a8:cd:07:3e:6c:58:47:7b:03:
0c:ee:dd:b1:40:a7:7d:8e:0c:62:df:4b:b2:58:4b:40:d4:d5:
e4:15:08:02:50:be:b3:16:62:4f:87:1f:03:78:91:e4:c4:55:
45:32:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:51 2026 by rpki-client