Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: XX79cOSWd+yd3x1c3qUTzlQZ7vsgc3uyEJmZfewLy3A=
Subject key identifier: 5D:4F:BD:B0:32:5B:82:B2:41:FF:64:F4:C1:DE:5D:69:98:6C:66:85
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 01A110A8F3454340A33F4488DBF4266EADE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 0920
Signing time: Tue 06 Oct 2026 10:01:10 +0000
Manifest this update: Tue 06 Oct 2026 10:01:10 +0000
Manifest next update: Wed 07 Oct 2026 10:01:10 +0000
Files and hashes: 1: 3TqJFN82Ou6cnj7WZNmB53ds8d4.roa (hash: t6g92VZ+NxfWvf9Aux0ZfBmHd6Qz4U2PHoGnC8Owa3k=)
2: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: lCtd80YqsiQwSCWqn4jv5bO1JrLAvDNuQmBfp7iVPhU=)
3: xuWwl1BgKwPOCVw1Rz6hhY_T8g0.roa (hash: NHfKK1fHeYkhRnZLWNEvRWzPkzzE4p2I2B1Y78FJZF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:f3:45:43:40:a3:3f:44:88:db:f4:26:6e:ad:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Oct 6 10:01:10 2026 GMT
Not After : Oct 7 10:01:10 2026 GMT
Subject: CN=5d4fbdb0325b82b241ff64f4c1de5d69986c6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:23:ee:d9:3a:c7:55:21:7f:eb:dd:06:6b:
a7:7f:66:7b:b7:c2:37:74:2a:ce:66:52:69:6b:97:
15:40:5f:96:bd:26:52:ab:89:07:9a:2c:37:72:63:
09:81:99:d2:0a:6a:e6:0e:1d:ce:00:4c:cd:8e:0a:
32:2c:54:e6:d1:e9:16:08:3c:74:10:2a:ee:27:a8:
4e:29:71:44:b0:c5:0c:77:13:cf:06:5e:6c:cc:6b:
be:ce:34:5f:86:83:20:97:01:79:e2:00:e0:94:28:
7a:b4:37:da:18:1e:25:46:38:42:4f:67:86:1f:b5:
f2:2a:3f:c7:90:4d:4d:a5:d6:b8:b4:9c:8b:9d:3e:
0f:93:88:3c:d6:af:db:bf:a8:e9:0d:13:d0:b4:81:
34:e8:31:40:d9:e1:8d:e0:54:cd:40:97:85:99:0d:
89:07:e2:68:e3:c4:fc:3c:fe:50:b4:c0:6b:3d:27:
25:28:e3:9d:77:6f:33:36:f9:d3:11:84:ce:7e:af:
17:36:ff:60:4e:c1:d8:60:6e:51:51:17:b3:fa:3d:
db:c2:b5:f0:78:e0:3b:e2:68:1d:2d:3f:cb:43:83:
17:f2:ed:59:69:0e:11:11:b9:5d:11:41:b8:6c:df:
d6:63:5c:15:8c:89:3b:28:67:54:d9:02:f5:3d:52:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:BD:B0:32:5B:82:B2:41:FF:64:F4:C1:DE:5D:69:98:6C:66:85
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:ea:fc:d8:7b:99:af:24:e9:61:fa:24:09:d7:6f:13:f8:
fb:fa:96:05:ce:2e:43:3e:a4:4b:b9:08:bd:ec:3b:1f:81:de:
73:a5:18:9e:71:3a:81:52:bf:e5:f8:7b:fa:d9:c4:d4:eb:ab:
76:68:68:a2:fd:41:86:4a:7b:d0:ed:d0:0e:16:d9:63:79:55:
18:f5:19:db:08:c1:0b:f8:00:2c:41:6e:37:78:50:69:e3:36:
8e:57:5f:59:0d:2f:f8:49:3b:f9:29:8e:9d:d8:b7:1c:88:5c:
90:3c:2a:1c:c7:bd:5f:17:9a:e8:bf:4c:88:38:4b:ea:57:4a:
84:8c:ec:59:34:0d:06:da:2f:4d:1b:2f:03:28:d4:07:a7:eb:
b0:2e:72:26:0e:8f:f3:99:d9:ec:03:06:e8:a8:9b:12:d4:60:
74:d6:c7:15:3a:97:39:fa:cc:8b:bb:78:f8:de:f2:59:54:d3:
20:92:72:74:48:15:2c:b8:a4:cb:23:08:dd:fb:17:a5:15:0e:
08:c3:39:72:7d:0b:94:8a:f4:a6:f5:1a:41:f9:c3:97:00:d7:
7b:04:3d:a1:ef:b6:43:29:f1:8a:ed:a2:8c:6d:8c:aa:3f:d6:
05:a7:22:e2:c5:28:f0:ca:d9:94:4b:e7:13:6d:80:10:c6:9e:
b2:c5:02:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:43:31 2026 by rpki-client