Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: AUne/Kp5tEKhl0khUcFmrL7GzJyLvgw+w6dRiQ78418=
Subject key identifier: 86:D0:72:33:FF:86:AA:F7:5F:07:C5:FC:97:34:20:BE:22:FC:93:CB
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 019D284D97DE78B04204D9AB0C599054F8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: D4tY1lKTRBMS6n1iGQpoy1an+pKr4/ED+DC5Fez/xbE=)
2: ghAGIAHf2NUSuXtfAt8s6eabgvg.roa (hash: S/XY0H52dZPgXYBFOlUepYiuIVmvJAzUO0r3Q7zhLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:97:de:78:b0:42:04:d9:ab:0c:59:90:54:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=86d07233ff86aaf75f07c5fc973420be22fc93cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:e5:74:44:35:f7:39:e8:af:dc:0c:37:14:
1d:fc:92:91:10:0a:ab:91:f6:b0:b5:df:d5:f4:b0:
d2:23:f6:75:df:6d:8e:a8:d6:e1:01:fc:ce:de:56:
ff:29:9c:38:19:8e:49:c3:26:3d:d2:f8:b6:91:a3:
76:84:15:f7:1f:c3:66:13:49:ac:90:0f:3d:6d:05:
e6:5d:70:ef:e3:53:e4:74:eb:fc:f0:d5:50:a2:49:
87:76:37:96:19:50:b6:35:49:b4:0c:c3:20:7b:a0:
f1:fd:de:82:25:c6:c5:1e:c9:d3:19:f4:2d:22:68:
16:a1:10:92:0b:b0:b3:f4:24:7d:11:7b:0e:a9:a6:
53:af:ae:f6:17:1d:39:30:4f:27:d8:c0:5d:93:93:
6c:65:53:95:20:89:19:82:b5:3a:34:dc:f6:ad:d2:
35:c6:43:62:6d:9f:3b:61:c7:b2:87:5b:04:b4:2f:
e8:85:0d:84:b5:b9:de:e6:50:bb:7b:03:25:f6:72:
97:e6:7d:20:6f:1c:c6:f0:7f:9c:ed:25:ad:54:ac:
d5:70:7b:5e:d4:7c:1a:2f:c7:0e:bc:99:00:c6:b3:
8b:e7:6d:68:52:45:9f:69:f7:7d:76:72:fc:4b:2a:
c4:42:ce:3b:4c:bf:7a:17:a2:3e:6c:cb:79:cf:3b:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:72:33:FF:86:AA:F7:5F:07:C5:FC:97:34:20:BE:22:FC:93:CB
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:11:2d:b6:87:3f:69:7a:ca:52:c3:b2:79:ea:0a:7d:97:ce:
60:10:13:fc:60:37:8e:6f:c3:ab:87:dc:30:c8:f6:f9:8e:1b:
c4:4c:98:7a:bf:7b:0f:0d:82:6f:94:3d:66:d1:d8:ed:71:19:
8d:33:5b:b8:cd:c7:14:97:eb:9f:69:83:01:00:0c:8e:43:cd:
24:a0:ad:54:39:75:d6:3a:38:ac:42:06:e2:83:e2:ce:9c:d4:
c7:d5:16:01:9f:e7:f6:97:d5:1c:b2:38:9f:70:a1:47:5e:63:
d4:8d:c3:88:95:a6:32:68:e9:1e:ca:30:6c:df:f5:e7:24:a7:
5d:b6:8b:ed:48:b9:2c:56:bb:77:f1:bb:c2:76:11:f7:1e:ac:
da:80:8a:1b:ca:74:40:32:f5:3f:8c:20:34:cd:57:4b:bc:19:
6e:7d:7d:aa:71:44:39:f8:02:ca:43:90:e7:5f:bb:86:b7:36:
69:d0:2d:1f:bd:b7:59:bd:e3:96:61:e1:58:ff:ec:de:85:92:
06:e8:c6:35:a8:39:0d:32:1b:82:95:34:e1:dd:e4:d1:2f:32:
c9:c5:ab:11:3f:90:a1:40:64:c1:bc:bb:43:7c:a4:f3:63:dc:
37:bb:61:b1:dc:1a:25:b5:f5:b3:2e:0b:02:f0:dc:14:52:58:
6e:e9:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:35 2026 by rpki-client