Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: xndLafF2gDAGhTcpHPNhOKy1hKoIM9P6RTfk1GXHcB0=
Subject key identifier: 15:8A:73:F0:DA:46:F0:58:26:67:20:7F:96:7A:F7:C7:6F:66:E9:FB
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019E31F3B7729B599D7A170919F98D9099CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: 02CB
Signing time: Sat 16 May 2026 18:01:56 +0000
Manifest this update: Sat 16 May 2026 18:01:56 +0000
Manifest next update: Sun 17 May 2026 18:01:56 +0000
Files and hashes: 1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: Jz89VfMZJ//om7YDKGtrt0clBHgYiYfb2R9IGGj9NG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:b7:72:9b:59:9d:7a:17:09:19:f9:8d:90:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: May 16 18:01:56 2026 GMT
Not After : May 17 18:01:56 2026 GMT
Subject: CN=158a73f0da46f0582667207f967af7c76f66e9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:83:c4:e0:e6:64:34:01:cc:bd:c4:16:1e:
b9:9f:cd:cb:47:5c:cd:13:88:93:f4:c7:54:72:fc:
04:07:6f:e6:f5:ad:b9:5b:b3:73:e3:32:b3:41:81:
8b:e2:f8:d4:db:12:64:07:2c:25:19:08:eb:0a:8a:
47:36:b2:0c:fe:41:4e:c4:f7:e6:d8:39:dc:9c:ec:
51:be:51:af:bc:e8:4c:8f:11:5a:b7:f0:c9:66:00:
78:c2:42:eb:8f:d3:95:03:94:55:0d:e8:c7:81:76:
97:35:77:a4:1b:95:ce:31:db:4b:6f:a4:29:39:5e:
23:9d:de:e3:db:85:05:56:32:14:2d:32:bc:13:c5:
40:4c:e9:7e:19:3c:32:b5:ec:74:4a:6f:76:76:0b:
7d:00:07:f1:e9:34:e2:be:28:43:a9:93:bc:e5:fc:
f6:b9:c7:83:f9:c8:56:d0:37:34:8b:72:fd:60:71:
97:9c:25:85:17:cf:a8:5e:b7:65:f1:2f:d0:b2:2c:
b1:2f:df:a8:5c:8b:71:67:a0:c4:f2:22:17:ea:06:
c9:3f:2c:7a:ac:42:24:76:1f:44:ea:2c:19:cf:e6:
6b:50:04:46:c2:8b:93:ca:93:14:a0:b1:25:9e:01:
68:de:af:34:6f:50:6d:c3:a0:a6:9a:67:ac:75:01:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:73:F0:DA:46:F0:58:26:67:20:7F:96:7A:F7:C7:6F:66:E9:FB
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3d:72:a0:89:a8:d7:5f:20:d9:55:7e:ac:dd:19:1b:09:24:
c5:65:3d:4f:35:4e:e5:57:3b:04:2b:53:dd:e8:2b:a2:34:d9:
d8:2b:27:1d:85:ac:cb:75:96:07:02:9c:db:c7:bd:48:de:1a:
a0:91:f3:a8:f2:99:50:ef:e2:a0:d3:46:0f:93:97:5e:a0:2e:
70:c2:20:43:78:26:84:ad:0c:e3:cb:a1:5d:41:4e:c5:48:37:
fa:a4:b7:dc:fc:12:9e:c8:ea:cb:5b:72:ed:87:c3:d4:8f:bb:
de:34:83:c3:62:f0:78:1d:b2:33:29:8e:02:35:c0:34:25:79:
fe:70:29:c7:a6:91:19:85:06:c8:8f:02:d4:49:18:20:b9:a0:
d7:b6:f3:f9:25:b1:a9:a8:e0:0c:0e:60:e1:00:e4:13:46:86:
7f:3a:f0:cb:cd:cc:83:20:90:02:c4:f2:c4:5c:fb:88:0b:63:
e4:72:74:6e:67:f1:47:16:fd:33:a3:ea:3d:cf:09:5c:4c:87:
1b:2f:45:cc:e4:35:24:20:3e:b7:9e:c1:11:a9:a4:29:fd:1f:
c5:3a:9f:1e:92:6c:51:fa:70:bb:2c:7f:5b:ab:12:5e:f5:8a:
80:a6:ad:ce:52:9a:b5:e3:f3:c3:7d:bb:85:57:14:32:85:37:
2e:65:f0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:29:27 2026 by rpki-client