Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: I6viWuTWNsm8OAJkw/AlhOhdE0N6tcxwoMrYp/s400c=
Subject key identifier: 44:26:99:78:B3:C3:93:9D:3F:40:05:5D:0A:1D:67:E3:36:DE:EB:85
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019D2A04990EA21FF0637A35D8117BF0D36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:37 +0000
Manifest this update: Thu 26 Mar 2026 12:00:37 +0000
Manifest next update: Fri 27 Mar 2026 12:00:37 +0000
Files and hashes: 1: 5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa (hash: 3BzgmGQESa9eTcM0ODtiMc7GJiSKtttHkfqVjBBtvdQ=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: gNflGBgMKw9qL2v80viWVcvNUz8JhdZKvtrDK3AAcpI=)
3: wJ7_Xvzpdt1CtacBkZyFEU6Rq8w.roa (hash: mYKkkRY5nHeUPjxezloUDprRN7Wi7BEuCqiUJh2cLUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:99:0e:a2:1f:f0:63:7a:35:d8:11:7b:f0:d3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Mar 26 12:00:37 2026 GMT
Not After : Mar 27 12:00:37 2026 GMT
Subject: CN=44269978b3c3939d3f40055d0a1d67e336deeb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:3e:33:8e:2d:ca:f9:92:b5:93:76:76:19:
49:49:b1:25:19:41:59:a1:76:97:66:3c:06:8c:16:
17:f7:5b:04:81:06:00:30:69:1f:5a:86:51:d0:7b:
77:56:bb:a0:42:22:10:ed:39:f5:d0:ca:d9:a9:25:
ad:15:30:c3:e1:db:89:67:86:76:ae:c6:2e:c2:51:
79:a6:0e:0b:d2:05:99:80:e7:e8:e8:48:bb:25:3d:
8a:35:9a:4f:0f:35:02:f1:89:ca:d4:f9:3c:59:c0:
21:ea:b9:3c:5e:b0:38:fc:10:e5:e7:bf:68:75:04:
46:49:ba:8d:72:42:70:38:aa:e0:1b:9b:af:ff:ec:
ce:db:e8:cd:e9:47:99:98:8a:87:bc:c0:03:3b:fc:
97:e3:eb:20:35:2e:a4:73:b2:8b:09:f0:7e:92:a9:
76:06:48:41:01:7f:46:c9:55:71:4b:6b:9e:6b:59:
12:b8:97:e3:80:08:64:d6:89:0f:3b:5d:0f:a3:ab:
4a:96:d7:0e:93:2c:40:b3:2c:3f:54:12:d6:ac:c2:
7e:bc:13:4e:05:97:60:5a:74:f7:63:ea:a3:24:41:
80:08:0a:8b:14:10:88:19:74:c6:71:c0:9f:01:69:
47:a1:44:41:e5:31:bd:eb:72:68:34:c8:b0:a4:28:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:99:78:B3:C3:93:9D:3F:40:05:5D:0A:1D:67:E3:36:DE:EB:85
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:86:de:67:0b:5b:58:6c:be:33:05:19:19:cb:f3:fb:b6:
cc:a9:b5:22:cf:40:fc:ef:06:59:f1:de:b0:4a:3e:ff:71:5d:
ad:68:fb:6e:70:76:7c:55:53:20:6e:20:5e:69:ab:c8:2b:1a:
e9:6d:35:a7:36:0b:75:e9:0f:e0:a8:e4:c9:95:22:d3:36:60:
d3:8e:5e:c7:1f:0b:88:cc:aa:2f:0e:33:74:f4:37:f1:79:17:
56:05:2a:2c:42:89:d7:12:ab:d3:05:30:fe:09:79:13:1b:10:
ac:7c:e9:54:a0:0a:3e:18:32:cf:5b:f2:81:8c:4f:fb:7e:c9:
e1:53:be:dd:7e:f3:95:26:01:58:63:e1:ef:2e:55:ed:7b:80:
72:62:08:3c:1d:27:e2:ff:85:3e:1f:89:80:15:0e:a7:a9:aa:
70:9b:dc:37:65:5e:74:80:38:79:c8:81:b7:98:ab:06:f0:08:
62:a4:d1:9c:cc:6b:2d:c1:20:95:e6:56:9c:bb:58:e8:18:81:
3d:0d:e4:95:1f:25:4c:94:e7:f8:b2:f4:7a:3e:24:b0:4b:9b:
3c:1d:32:02:b5:ab:55:b4:e9:f7:df:99:65:d8:70:f4:77:09:
b5:0a:9a:47:92:7c:f5:63:72:3d:82:34:1d:8b:95:4e:7d:9d:
b2:99:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:08 2026 by rpki-client