Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: 1hUkpjizCX9wkoObRAKVpkV/ikO4N05wWmWeW2yJ744=
Subject key identifier: D1:8E:9D:D1:26:84:84:4A:47:09:0A:0F:06:41:D0:9A:E3:8F:E8:6B
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019D27A871E74BD0CC25492B9AB3F42459F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:00:43 +0000
Manifest this update: Thu 26 Mar 2026 01:00:43 +0000
Manifest next update: Fri 27 Mar 2026 01:00:43 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: t3VSVxzm6J3pWR7Vt0BWOsCRrJ0ASKFfZKIt0F0XSYk=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:71:e7:4b:d0:cc:25:49:2b:9a:b3:f4:24:59:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Mar 26 01:00:43 2026 GMT
Not After : Mar 27 01:00:43 2026 GMT
Subject: CN=d18e9dd12684844a47090a0f0641d09ae38fe86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:4c:f3:5c:b7:12:8a:e9:b8:b1:84:c6:3a:
e3:16:ac:b9:51:6e:d2:08:98:35:83:c6:12:02:e3:
a4:1f:93:a6:b2:48:97:b4:e0:5c:05:a6:84:61:46:
bd:ac:b6:0d:65:2f:20:07:1b:6f:b4:19:1b:e2:00:
6a:77:65:b3:1f:4b:6c:6d:8c:a2:0e:80:15:ae:46:
48:ac:0a:a6:d4:b1:cd:c2:b3:c6:58:17:8d:00:e3:
d4:1d:c6:31:bb:a9:73:f9:61:a3:5e:96:d1:aa:14:
4e:61:90:14:60:bb:d6:76:85:2f:fe:95:11:af:1e:
c6:20:df:f4:6c:f6:8e:55:a3:bf:d2:03:c7:90:71:
ba:82:c1:cd:15:fe:7c:1d:a6:8a:40:40:4f:70:a9:
70:6f:3b:3b:82:10:53:49:aa:c6:a5:1c:e9:40:90:
90:76:c3:f8:77:4f:e0:06:e4:f1:31:65:0e:61:25:
f7:a3:87:98:84:12:02:59:22:c9:e5:6b:8a:09:76:
42:17:97:e5:ee:02:12:3f:80:8c:89:03:f7:fa:94:
bd:e9:75:4a:e7:73:2c:10:77:7b:a2:44:32:78:48:
de:33:2f:e2:28:f3:70:62:df:24:a8:04:9f:14:fb:
81:ac:8f:c0:13:21:4d:7e:d0:68:52:b6:a7:e8:1c:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:9D:D1:26:84:84:4A:47:09:0A:0F:06:41:D0:9A:E3:8F:E8:6B
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:27:11:56:90:3f:8a:27:f3:24:26:ad:9c:a4:bd:6e:cd:68:
37:59:9a:d7:1c:2a:77:31:01:69:d1:68:1b:4b:cb:ae:70:60:
3e:68:d5:f1:bf:89:d8:57:a1:03:26:12:d9:45:36:ea:fb:40:
2f:ab:71:0f:3f:cc:39:3f:14:28:ca:c4:97:ba:e5:ea:15:4c:
88:c4:fb:37:a1:b6:86:32:e4:49:2f:6b:a1:26:cf:54:3a:46:
46:e4:25:3a:00:49:4a:eb:d1:3c:47:89:45:a5:70:45:28:07:
c5:c1:e2:67:fd:2d:16:e3:1f:2b:09:a6:5f:1b:de:39:a1:57:
f8:35:12:ac:b5:4a:3d:09:c0:60:82:da:b9:25:c6:c0:a9:d1:
6f:e5:99:a4:a3:a6:7a:c1:fa:24:85:46:a5:b9:ce:de:71:b6:
96:85:61:76:50:09:6f:0f:4a:4c:4a:94:0b:40:5b:86:18:cc:
5f:6d:c6:bb:bb:05:c3:ec:ee:5f:33:ed:5a:ae:0c:c3:2c:0d:
04:33:24:1c:28:68:87:60:59:9c:d1:93:07:35:61:cc:d9:a6:
34:0f:34:76:bb:5e:26:0a:f2:d1:77:a9:09:c4:ef:c1:c1:db:
86:40:6d:ba:2a:0f:1e:c3:1b:f6:af:02:f5:2d:8f:e6:5a:28:
12:6a:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:19 2026 by rpki-client