Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: tfirIO4fRWVeKH0fYEQex+dR+f9kgIueV2PuCqpxnNg=
Subject key identifier: 54:B6:F0:F5:5A:14:95:0D:A1:17:A4:62:AE:5A:98:98:F7:9B:AD:9A
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019E1ED9FA48BEEA8DEBBA3EAADAB1CFE027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 01:01:02 +0000
Manifest this update: Wed 13 May 2026 01:01:02 +0000
Manifest next update: Thu 14 May 2026 01:01:02 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: PE1NCZhUZae8cxT5k9CHvIouLOgRb1ejqJgwPZiiFZk=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:fa:48:be:ea:8d:eb:ba:3e:aa:da:b1:cf:e0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: May 13 01:01:02 2026 GMT
Not After : May 14 01:01:02 2026 GMT
Subject: CN=54b6f0f55a14950da117a462ae5a9898f79bad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:6e:ff:b3:b3:9c:9d:23:eb:d7:cd:47:15:
c2:d6:6e:d0:f3:dd:7c:86:4f:04:96:0d:12:52:29:
58:55:c8:06:29:e5:ef:76:48:06:39:44:db:5a:d8:
6c:02:28:fe:21:2a:a9:30:b6:84:97:16:77:81:d3:
17:ca:57:38:c3:7d:24:68:6a:38:20:84:10:cc:85:
69:dd:4e:14:77:dc:74:81:6a:fa:f3:bb:01:cb:3e:
c5:48:f1:1b:0c:90:13:ea:2c:eb:59:db:c7:79:be:
53:9b:dc:11:96:ae:ec:ed:31:64:b7:72:d2:94:73:
58:b3:7c:52:6a:54:95:85:f3:cb:e0:c3:2f:54:40:
28:12:77:5d:99:43:a5:53:28:83:45:c6:d2:a4:05:
2a:ae:ac:28:9a:38:b4:4b:fe:24:88:1a:cd:6b:d9:
9b:39:e4:42:71:0d:97:b2:50:01:27:b4:53:08:57:
06:31:0a:53:d5:db:e8:a9:69:7e:34:2f:d9:71:af:
e8:ec:90:78:1b:36:27:19:c6:4e:7b:fc:a4:84:01:
53:1c:03:54:2a:c4:dc:4f:71:4a:d8:16:e7:e7:b7:
f0:5b:6a:50:38:47:25:47:85:45:76:50:5f:95:36:
ef:d2:e6:3d:7a:ae:5c:e5:91:f3:79:a2:df:14:a7:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:F0:F5:5A:14:95:0D:A1:17:A4:62:AE:5A:98:98:F7:9B:AD:9A
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2d:9a:4d:b9:05:c6:43:77:04:b1:c3:ce:60:c4:6a:76:3e:
3c:ea:fc:22:a9:1d:93:fe:a9:8b:8a:2b:ab:b7:d0:ab:57:90:
99:53:4d:08:4b:fd:fc:8d:ad:4d:2c:2e:95:55:39:3a:4f:df:
ef:39:de:a0:20:e4:70:74:2d:04:99:ed:70:4b:49:ac:cb:3d:
d8:2d:09:78:f5:42:1a:fa:c0:ed:eb:42:43:4e:8c:5b:9e:90:
be:ab:0d:52:d9:4e:b7:a7:1e:b1:cc:52:a6:69:f9:40:7b:fc:
5f:88:95:b2:cd:27:c4:29:9f:0d:03:21:53:6b:59:b6:1a:02:
39:80:45:f3:c0:e0:90:eb:b6:40:09:36:ea:5b:e5:81:98:d2:
34:ca:a4:52:73:db:e4:ff:74:e1:6a:a4:52:37:5b:73:31:04:
4b:56:7a:eb:c2:1c:ff:de:8b:6f:1b:d1:55:f0:41:33:ca:cc:
f5:b0:5c:d9:9c:a6:e7:82:71:43:7a:5e:a1:e0:c0:48:b4:23:
c8:e8:9f:84:5e:2c:0e:b1:d9:8e:ce:79:09:86:cb:f4:0e:7c:
76:b2:bc:d6:0d:08:e6:be:31:9b:0d:ef:3d:63:ee:35:1c:43:
00:db:75:88:c6:71:51:85:b8:7a:a9:59:e9:cd:53:25:e7:95:
18:f7:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:49 2026 by rpki-client