Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: NIFYtpMIueCnUKekAGIKdBT/U6xAkG5UPGsKBEywHxY=
Subject key identifier: C8:34:D5:60:6A:B8:F5:42:4B:5D:5E:EB:B8:BA:13:B2:57:10:32:02
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 019D37C11995AC8DD95462B4B4B616E5F8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: xgyWsKj91ZSAvUKZUvvnaQpRYtowqk/EJAzF3POOhV4=)
2: m66pD5NNoTudVlprN23DFJpyQNo.roa (hash: Zi+SOs/s829OkjmiRlWIKt2XYMZgmPRVGnqrx7IEkng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:19:95:ac:8d:d9:54:62:b4:b4:b6:16:e5:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=c834d5606ab8f5424b5d5eebb8ba13b257103202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b5:31:45:f4:23:2c:5e:12:0d:28:4d:6c:71:
e3:e5:cf:a6:2e:b9:43:d7:75:f8:48:03:84:8f:93:
09:83:d6:c6:28:46:89:e3:c3:b1:65:93:81:1b:f6:
6c:f8:e8:3d:ba:c1:32:87:a3:28:d3:23:0e:e4:ce:
10:2d:23:6e:aa:ba:6c:e7:a6:de:7f:d5:15:bd:6d:
85:a5:13:46:81:47:b4:21:1e:7e:64:aa:62:1a:39:
19:a6:e1:e6:bf:76:64:a9:b9:9a:2d:47:95:46:63:
e8:46:6c:16:2e:84:6a:d2:f5:76:b7:ba:0a:40:b9:
a8:f6:d2:02:50:46:75:07:9d:57:d5:76:82:96:c1:
e9:6d:6e:b9:0d:ec:d4:13:cb:5a:7e:5e:ec:64:84:
27:99:d3:d7:0c:30:ce:15:c7:e8:10:bc:a3:b7:be:
03:9b:11:3e:b2:33:42:41:67:d0:42:02:61:b8:f2:
9a:1f:36:99:14:8c:69:1e:26:19:d9:e9:7a:f4:bd:
72:6c:a9:52:4c:e0:b2:28:24:96:f2:9f:1a:5a:70:
a6:79:00:78:d1:7a:09:61:25:78:a5:d7:e9:f9:a3:
72:ef:66:e8:89:8a:99:1c:03:70:c3:0a:ae:61:15:
4c:8c:aa:d1:7d:e8:ce:08:2e:20:c9:23:cb:46:8b:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:D5:60:6A:B8:F5:42:4B:5D:5E:EB:B8:BA:13:B2:57:10:32:02
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:28:31:13:17:78:1e:d0:26:37:91:f9:01:a5:ee:de:96:
06:e4:de:82:95:48:c5:f6:f7:df:0d:6a:b5:c2:49:cb:77:33:
b9:09:52:c6:75:a2:4b:e5:1e:f5:11:d8:26:99:7b:b0:e6:47:
9e:2a:78:74:46:98:01:e6:19:a4:f4:a6:46:fb:e2:b4:fa:0b:
90:dd:4e:d3:7d:0c:0c:ce:98:16:9d:03:d8:a6:93:76:ab:19:
ee:2b:54:8d:f4:fe:25:87:b2:63:2b:c9:aa:62:31:89:3c:14:
9b:84:89:91:98:4a:83:2c:91:39:e2:d5:0d:80:37:22:b1:66:
95:f3:2c:c8:40:3e:fd:ef:3e:20:df:53:05:b2:36:37:10:18:
2e:c5:a8:68:d1:41:b9:49:ec:e7:f5:e8:0c:d5:a8:82:54:1d:
bf:22:4c:2d:8f:9a:6e:e0:24:40:86:c4:87:27:7f:cf:ea:90:
eb:43:e7:ca:91:b6:09:79:00:4f:e8:08:42:18:74:28:14:29:
11:c2:ea:54:d5:4c:17:a8:88:ac:c4:d3:a5:60:da:ac:0d:2b:
7f:e9:c8:56:bb:b6:88:1b:d5:89:8d:57:26:08:c4:9b:33:b3:
51:83:dd:ae:20:57:54:ce:20:32:c3:16:ee:af:59:1b:bc:97:
fd:01:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:45 2026 by rpki-client