Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: w6ZBn50G4SmBH8mFEjqrqxbMfnayq5COYAcGslq3dJ0=
Subject key identifier: 1F:A7:B9:70:3E:33:12:C5:ED:E0:5B:FE:69:FE:96:20:B2:D6:EA:52
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019D3A53C9B163EBB13CD5C32EBAEE7D0259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 16:01:02 +0000
Manifest this update: Sun 29 Mar 2026 16:01:02 +0000
Manifest next update: Mon 30 Mar 2026 16:01:02 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: cLzmNj0Nog89Sw7QurpKd+njS0zm9MEUJ/79OUrFegY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c9:b1:63:eb:b1:3c:d5:c3:2e:ba:ee:7d:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Mar 29 16:01:02 2026 GMT
Not After : Mar 30 16:01:02 2026 GMT
Subject: CN=1fa7b9703e3312c5ede05bfe69fe9620b2d6ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:69:02:1f:bf:a2:54:d5:31:e5:b7:73:61:
55:d6:c8:cb:b9:46:c4:9c:6f:ca:cf:c4:19:96:a8:
63:3c:15:19:cb:e8:59:ef:b6:9b:1b:0b:bc:8c:d1:
30:a3:76:8c:a6:ba:64:79:75:60:1b:bc:77:36:b8:
8b:48:f8:8e:9f:00:80:e5:dd:57:d2:3a:b1:51:28:
c4:2b:19:29:41:6a:f8:3d:b0:36:6f:1f:7e:ed:f0:
4c:9d:98:7a:7d:89:3e:1d:d6:2c:5e:88:cf:8f:97:
52:41:58:28:30:57:5a:3b:42:7d:2e:7e:65:a5:4d:
37:04:43:0c:a4:0e:bc:c1:0c:98:3c:1d:63:91:3e:
c3:91:74:0c:ab:09:2f:31:b9:23:2f:9f:96:c0:95:
bc:66:a7:52:04:09:ab:66:b4:95:31:b8:35:63:d2:
92:9d:7a:02:7a:c8:9d:89:43:2b:11:c1:63:de:c9:
a6:bb:98:98:cc:03:00:83:4e:c8:e2:d0:8e:fe:16:
0e:f8:17:13:5e:bc:92:d8:79:45:04:c8:dc:eb:ea:
8f:8f:28:d4:6e:36:69:ea:1c:36:76:1f:ed:2e:a1:
c5:bd:72:fd:ca:cb:c2:38:a1:70:da:1a:a4:99:c6:
92:d7:7e:fa:bc:32:fa:78:1a:19:ae:a8:32:df:97:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:B9:70:3E:33:12:C5:ED:E0:5B:FE:69:FE:96:20:B2:D6:EA:52
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:03:1e:38:ec:4e:3f:86:49:d8:08:ca:02:0f:12:dd:2b:bf:
ef:18:1d:60:18:61:b3:3e:34:6d:cf:ea:12:5e:12:6b:3a:58:
41:53:fa:75:fc:b5:03:5a:b3:6c:89:bf:7d:ad:cc:87:ce:61:
46:13:3b:7f:90:af:44:77:de:94:81:19:58:04:4c:dd:7a:a9:
55:1b:9b:a6:e3:cf:f6:d7:ab:4f:f3:7e:77:1a:f7:ac:86:30:
e7:af:ea:7e:0a:2e:70:73:5b:18:82:a1:af:5f:bd:f9:c5:fc:
cd:13:68:47:a8:45:8c:b1:0c:e6:d2:f4:89:23:27:b6:a3:3e:
7c:aa:86:40:42:89:8b:c8:51:5f:fa:02:45:e5:a0:53:0a:bc:
b0:22:2d:49:1b:88:a9:db:6c:8f:d3:04:4a:5f:c6:2a:f3:ab:
eb:87:f4:65:44:29:44:24:1a:8a:8a:2f:ee:f2:38:86:18:68:
de:b6:16:9d:9a:19:7c:89:e6:63:36:ef:a8:c5:9c:0d:b2:ec:
0c:b1:a9:35:27:c7:7c:cc:42:39:7a:cf:f6:27:18:d9:bc:c1:
62:a4:c8:bf:c1:bc:72:20:29:8b:b3:6c:84:2a:50:c2:ac:18:
f1:e5:1b:c7:97:38:6f:74:f1:71:94:dd:b3:fd:eb:9a:93:1e:
3c:a0:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:33 2026 by rpki-client