Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: bHveIKSDnRILJTWOO60oLlEJf1es/l8bG2XVa4z5Oy0=
Subject key identifier: 4B:B1:DA:EF:42:14:C5:F5:EE:BA:6B:C1:B0:BA:C5:86:50:AF:DE:0B
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019D27DF85D025CFB4AB0B91FC9A10C04DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 1351
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: /C1viNcoWu4Yw+89MVDLmbYTXgj8reaQbdCCgdd9bRw=)
2: ldVLo-eNAW-W-3vclMcqBGxufHM.roa (hash: 3oSvQLb4YGLMfy8gAiD/iZGExJiz2TXf3tCjeUQNbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:d0:25:cf:b4:ab:0b:91:fc:9a:10:c0:4d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=4bb1daef4214c5f5eeba6bc1b0bac58650afde0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:e5:01:fe:9d:32:aa:71:b0:74:8d:4a:f6:
f6:c1:ee:51:2c:6e:aa:3f:79:6c:77:ec:9f:43:7e:
79:5d:3b:1d:5d:6f:dd:81:69:d8:05:20:18:04:f7:
74:f3:77:b8:1e:38:ba:9b:19:02:0f:ca:6b:bf:2d:
38:0d:d3:cc:27:67:91:06:86:a7:8a:65:a4:20:a9:
54:32:93:5d:ed:5d:59:68:58:3c:c8:0c:c2:e4:06:
62:d1:ff:b2:f8:02:30:9b:7e:17:fd:ff:8e:58:a3:
8b:47:8b:ad:1d:d0:42:2b:3a:68:5c:c1:e4:bc:8d:
d5:7f:94:3b:5c:23:20:aa:54:bf:93:ec:e4:81:d2:
cf:50:d0:77:3c:f5:07:f4:19:6c:f1:c1:d0:7f:5b:
1e:fe:b7:a7:8a:54:3d:f8:9e:6f:c4:b8:b7:20:b1:
d7:bc:29:38:0d:45:c7:cf:64:95:f3:9e:59:b8:45:
fb:20:12:ae:cd:bb:c0:39:f3:ed:17:38:3a:1a:41:
18:fc:2e:aa:7f:0d:d4:50:d7:a2:1f:8c:88:02:2b:
cf:4d:15:ce:01:c8:6a:11:a9:2b:ab:a6:1d:d4:1a:
c8:5b:90:9b:80:1d:df:87:2d:65:4e:65:77:f3:2d:
f7:3f:9b:01:61:74:ca:7a:76:5d:af:2c:72:ac:c1:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:DA:EF:42:14:C5:F5:EE:BA:6B:C1:B0:BA:C5:86:50:AF:DE:0B
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d9:aa:8b:05:41:70:a6:d9:bd:73:d0:92:21:5b:29:c6:2f:
d6:ac:4d:65:43:86:54:f7:b3:93:89:e5:eb:d6:07:c8:56:eb:
b1:25:f6:f0:18:7f:78:4c:2e:c7:a2:6d:35:d9:48:fb:54:f1:
35:28:e8:22:61:cc:b0:c8:b3:30:b6:73:c1:d4:bf:04:a2:77:
44:f9:b3:94:36:7f:c9:49:9b:cb:30:b2:27:01:53:de:1f:2d:
87:f1:45:7f:30:41:d0:11:b6:eb:61:d3:ed:1b:72:97:1f:30:
b0:bb:90:d2:85:93:92:7c:ea:23:62:b8:68:86:9c:37:f2:ef:
ae:fb:a5:e4:f8:5b:9e:20:f6:55:74:ea:3a:cc:b8:b3:86:a5:
68:e0:be:76:15:19:02:31:72:a0:ab:7f:0b:61:f8:aa:09:47:
ec:4c:33:4d:3d:4f:fd:71:75:5c:25:a3:27:31:92:5a:bb:f1:
8f:14:6a:35:59:d1:db:04:1f:6d:68:01:87:64:de:9a:43:26:
49:44:54:53:00:7a:4e:14:15:88:bf:d5:9d:0a:b5:d7:8e:7a:
6c:e1:67:ff:f5:43:f5:08:53:06:ad:00:52:44:ca:3f:33:7c:
2f:97:85:7e:97:f4:13:94:b4:e5:32:8e:4b:ba:58:a5:8e:6b:
a8:08:aa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:06 2026 by rpki-client