Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: odp18VKrtnJNdYWLauXD+7fuUt+LzV4JGvpNGbGWL3E=
Subject key identifier: B9:38:BF:09:7C:EC:7E:1F:C0:A0:D9:A2:89:E3:FF:3B:BB:08:61:2B
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 019D3909A4FC7E4BFDB956ED823FC852FBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0F2A
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: NouNULJL-7ncK7hFZABxn3dgX70.roa (hash: FNAw0p0hzFMLdRcqIw/EWrSDQ2SejuoSDS9nnFY1OZw=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: qstoImfAKz+2T+7FknXUD/dvqILRkQkXBIv6/PBPB/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a4:fc:7e:4b:fd:b9:56:ed:82:3f:c8:52:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=b938bf097cec7e1fc0a0d9a289e3ff3bbb08612b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:41:da:b5:2b:b3:2f:f7:c4:10:33:c0:e1:
7f:d0:f9:84:ef:b3:8c:04:2b:91:65:e2:fb:6a:02:
ac:b4:b0:40:6c:84:93:eb:74:16:11:4b:00:c4:86:
3f:13:e5:8b:0d:80:03:7a:02:ba:60:86:b2:b7:5d:
49:bd:49:65:f0:70:b8:ba:26:99:47:6f:8c:92:22:
03:f2:6d:0f:d8:c7:a2:b1:16:39:9c:16:99:84:1f:
8a:49:e8:00:f2:65:72:95:6b:f4:de:a4:b2:3a:7a:
1f:e8:df:61:81:18:69:f3:b7:f5:d7:80:f0:fd:68:
74:a8:9c:46:0b:fd:3d:a1:b8:88:9b:36:8a:32:ad:
ae:05:db:5a:30:58:a8:f9:ea:67:fc:60:1a:29:ab:
e8:bb:c7:89:c3:8c:20:36:24:70:90:6c:6e:0b:f3:
23:09:ab:15:d5:c4:eb:2d:a0:e7:02:fa:ae:08:cd:
37:0b:04:a8:83:fb:d3:c7:a8:60:f8:da:0e:b4:1a:
4c:d9:d0:37:41:be:94:15:54:91:cc:24:cb:34:2c:
d5:85:ca:58:cb:ef:8a:72:3d:f8:80:dd:26:a8:39:
12:2e:c2:ce:2c:89:96:d8:08:41:99:6c:1d:4e:51:
7f:15:5b:87:8c:7d:30:fa:9a:b4:62:7e:d6:94:64:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:BF:09:7C:EC:7E:1F:C0:A0:D9:A2:89:E3:FF:3B:BB:08:61:2B
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:df:5e:24:26:01:24:ea:a1:c8:5b:e9:5d:f7:07:09:a1:92:
7a:9f:ee:a7:da:d5:88:ab:07:b0:8d:28:15:c4:60:f0:d8:94:
15:b1:83:23:d4:fa:91:0a:2c:b2:0c:c5:3b:67:a7:b6:e2:4d:
2a:66:80:8d:82:a8:9a:1c:fb:99:c5:69:45:a8:21:ab:07:62:
7b:46:d1:50:45:c0:69:d0:0a:1d:7e:40:2a:c9:c8:6b:dd:05:
c0:c3:5e:e6:82:c0:70:21:13:f9:f6:8b:b7:e5:50:ae:16:af:
99:ed:58:32:50:9f:99:00:ea:7d:9f:cf:cf:da:f6:9d:6f:57:
2f:08:85:e7:47:50:0b:48:08:42:7f:50:9d:59:e4:13:39:7c:
f6:88:a4:90:36:2b:6e:e2:17:ae:79:02:85:77:16:0f:e7:4b:
16:ed:ba:8e:45:2d:32:0b:22:26:d9:8a:17:05:36:c0:5b:eb:
f1:18:56:e1:ac:91:76:f4:a0:ec:51:f1:55:c1:e1:f3:db:3d:
97:72:4e:71:dd:ad:99:e9:e3:41:67:4a:fe:c1:43:89:25:5c:
9e:cc:51:44:7e:6f:41:b2:c2:db:22:b2:ff:e4:eb:61:bb:1a:
dc:ef:f0:b1:92:7a:66:52:50:28:77:88:ef:c7:2e:e7:5a:8f:
52:09:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:40 2026 by rpki-client