Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: ker19ljKxnFObIr1kOMW47v4YAxe8GrcN9AaoyGH0qw=
Subject key identifier: 4A:F1:88:52:DE:8A:2C:3D:E7:D1:C2:4F:AA:F6:EF:46:59:89:CD:F1
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019D38D3CD89FDCAC26990DF71D30473A74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: 024A
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: Ga14DKlkNtPaU4_WDklMXTBEZd0.roa (hash: 51BV+zXQbnh+NfWZphUfXu97WrA83bdxjQhGkdY1730=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: TPGyHvOoyW3A3D+1Udri7OtCDPMIXCMYybbqmqmUAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cd:89:fd:ca:c2:69:90:df:71:d3:04:73:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=4af18852de8a2c3de7d1c24faaf6ef465989cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:93:f1:76:5a:43:5b:d0:13:dc:f3:4e:77:
39:8c:20:8f:ba:10:54:60:ae:3f:40:93:74:0f:61:
23:44:eb:47:6a:19:f4:7e:97:75:d1:6b:f1:53:56:
b0:e1:bd:2b:35:16:db:ce:25:59:ae:5a:13:91:07:
9f:8f:82:89:5d:30:20:c2:36:57:5c:2e:a3:66:b0:
ab:a7:aa:16:88:1a:39:89:44:f5:59:5f:f6:1c:47:
cb:a6:f8:09:a9:4b:2e:e4:8a:16:54:3e:90:30:aa:
86:31:91:7a:20:bd:26:d2:bd:71:d9:fe:65:d2:91:
cf:08:51:f7:5c:89:1f:ea:c2:07:7b:49:3a:42:b4:
95:d5:b1:f8:04:ad:31:da:2d:66:aa:86:cf:bb:c2:
97:48:69:e3:7c:a3:16:c9:54:54:6e:79:46:92:ae:
29:3d:fa:ce:39:f3:0f:45:59:8f:07:d7:ff:d5:c4:
8a:5d:38:df:c2:25:6c:4a:54:c1:db:2c:d1:27:db:
b3:42:45:bf:84:04:53:63:d7:90:b7:36:61:9e:8b:
4f:30:b6:a6:5b:ed:fc:f2:ad:83:b3:f9:25:84:9e:
cb:1c:47:09:3d:59:a5:1e:d6:42:10:cc:47:2d:03:
c9:a4:7d:dc:c4:0c:ee:73:fb:dd:e7:18:af:72:f0:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:88:52:DE:8A:2C:3D:E7:D1:C2:4F:AA:F6:EF:46:59:89:CD:F1
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:86:83:bc:c6:b3:0e:37:f0:7d:e6:5f:70:75:13:2a:ea:2d:
18:90:3f:1d:52:47:7c:4e:4d:67:f2:b5:dd:ff:e7:23:3e:62:
9f:24:24:76:43:f7:b4:d6:61:6d:10:fd:01:87:6f:04:7a:fe:
0f:19:a3:a3:6a:6c:06:9c:54:05:2b:d1:b3:2d:1a:d3:5d:59:
9f:eb:bd:ab:f1:2b:cf:b2:2f:55:8d:04:eb:7c:ae:d7:7f:ff:
eb:b4:d7:43:c7:be:70:8f:f3:15:20:4f:51:15:10:a8:87:49:
7f:e9:19:86:8c:fb:e0:f1:a1:9e:18:b1:ec:f4:20:2f:93:76:
ba:7d:35:f4:ff:34:f8:03:fe:49:49:bf:cf:49:2f:17:20:31:
43:63:47:d4:c1:74:99:3c:5e:d2:1f:88:a3:4d:57:9f:61:e6:
2b:c6:08:e9:a1:83:c6:2e:48:e7:6f:ec:61:1d:b7:1f:b4:d6:
81:c3:c3:aa:7f:76:dc:f7:15:59:7b:14:62:c1:a3:60:3d:fa:
33:07:26:05:ff:d8:e0:09:e1:ff:bc:9c:46:81:0a:2c:32:e7:
6c:78:f7:d4:22:de:f5:4a:57:ce:c0:f1:71:66:b1:3a:4f:17:
a8:8d:8d:5f:ae:8b:d8:0b:30:4a:f4:36:3e:14:89:60:67:65:
36:46:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:16 2026 by rpki-client