
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: JtsO5rcbuk4ywtZKk03Ch0x2Gg+30JWN9EydIOm0HdM=
Subject key identifier: 8B:68:A1:47:F6:36:82:7F:0B:D9:80:0C:78:E2:A6:D9:74:DE:CC:4B
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019E7CD68E60D09F9C06CAF53558DB4CB322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1939
Signing time: Sun 31 May 2026 07:01:36 +0000
Manifest this update: Sun 31 May 2026 07:01:36 +0000
Manifest next update: Mon 01 Jun 2026 07:01:36 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: luSNxUX/T+Kykq7+cXi+o1NduFsnKt0y3nJ8MovM9jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:d6:8e:60:d0:9f:9c:06:ca:f5:35:58:db:4c:b3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: May 31 07:01:36 2026 GMT
Not After : Jun 1 07:01:36 2026 GMT
Subject: CN=8b68a147f636827f0bd9800c78e2a6d974decc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:01:aa:7d:5d:08:4f:b6:17:35:69:1f:98:
99:e1:55:da:68:de:d5:f5:97:83:70:80:d9:11:a6:
eb:24:5b:ea:aa:b1:d0:97:cf:1d:ff:ef:65:ff:92:
b9:13:02:64:02:0f:de:ad:d7:fc:32:61:67:17:31:
e6:36:a5:e5:9c:40:f4:92:9b:0c:4e:00:29:22:61:
8a:ee:96:7b:3b:91:4d:5a:a6:7f:f9:f0:ca:6c:f3:
eb:7b:fe:44:70:3b:a8:4d:b7:48:bc:6d:0e:c4:49:
d7:bb:fd:69:a3:48:5b:e2:a9:84:60:e3:1f:f6:bd:
92:c5:7b:e1:6b:65:55:99:d4:b6:c7:f3:2c:49:62:
6c:1f:a6:ec:d9:e0:b1:12:68:ba:8f:20:c0:ef:09:
9a:aa:54:45:96:77:e3:11:7e:20:44:52:6e:ce:b9:
ea:07:11:9a:ce:4e:b6:67:3f:63:84:e2:45:9c:b6:
1e:d5:61:d3:f8:f8:a4:5c:b3:6d:72:f6:27:44:ad:
0e:ed:72:30:bf:56:6e:f9:69:a9:a2:d8:ca:db:ad:
4e:55:42:e3:5c:4d:02:3e:70:47:9b:32:c0:e2:28:
7a:90:0a:08:a9:f0:d1:fb:8b:54:38:96:95:4d:d8:
48:9d:08:e5:be:88:1b:19:d7:2d:01:0b:7a:be:9a:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:A1:47:F6:36:82:7F:0B:D9:80:0C:78:E2:A6:D9:74:DE:CC:4B
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dc:2d:55:cc:ef:aa:b2:52:7f:76:b4:f2:74:bc:04:a2:96:
83:b0:29:cd:17:c7:cd:2d:07:f3:c0:9b:73:a5:a7:e0:cb:18:
6f:a8:09:b5:82:65:e8:fb:cb:39:b1:ac:3f:67:59:f4:91:c7:
d5:51:a6:69:9f:6f:da:23:92:f5:a3:58:6c:13:a0:32:29:36:
68:02:f4:7a:b1:ce:c7:d1:c3:54:ea:9a:5d:5c:8f:59:ae:c8:
d5:3c:9a:ff:3a:39:e8:13:91:f4:36:3b:39:9f:53:76:a3:e1:
56:80:86:c2:43:82:ff:1a:b7:16:b0:10:43:bd:be:e5:ed:29:
76:8e:02:8d:88:b7:aa:07:2d:08:ed:6e:57:1a:95:a8:0e:5e:
b3:a5:3f:91:c3:67:d6:ee:e7:fa:bc:58:24:ab:19:6d:20:d6:
d5:0d:67:11:bd:2b:97:f8:11:04:74:3b:4b:7c:56:41:99:9e:
31:48:10:7c:74:36:1e:e0:32:42:d2:41:3c:cc:2a:f1:f2:f0:
11:c7:1d:99:c7:f2:94:c8:da:8f:33:42:d5:38:de:e3:02:f7:
de:35:45:58:65:ca:b0:5f:65:dc:2a:93:77:9e:74:62:4e:07:
63:dc:64:6d:dd:e5:74:21:e1:68:12:ae:e9:77:d8:69:c1:6c:
1f:4a:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 15:30:20 2026 by rpki-client