Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: o4bK8hgQgELkQ9drsWOtw1LRaixyVmcETqEp87Bgnus=
Subject key identifier: CE:69:5C:E8:DB:5D:08:ED:4E:11:19:E3:1E:E2:76:33:2D:CD:5E:F7
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 01A0039460298E4C3AB08C0EC3768E8D38AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 0139
Signing time: Sat 15 Aug 2026 04:00:50 +0000
Manifest this update: Sat 15 Aug 2026 04:00:50 +0000
Manifest next update: Sun 16 Aug 2026 04:00:50 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: CHVOkwth42mDq/2Q7AJ3bwwzOaS4rUVmBVyZxprcI5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:60:29:8e:4c:3a:b0:8c:0e:c3:76:8e:8d:38:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Aug 15 04:00:50 2026 GMT
Not After : Aug 16 04:00:50 2026 GMT
Subject: CN=ce695ce8db5d08ed4e1119e31ee276332dcd5ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:3a:a5:8a:cf:4b:01:c2:bf:f2:f3:db:1b:
ed:7e:c2:08:9a:40:66:3c:78:33:f0:cb:f5:fc:b1:
17:71:76:4e:6d:27:96:e9:3e:a9:3f:83:cc:fc:7e:
f4:66:a8:c3:3b:09:e2:8e:3d:d3:26:ef:bb:10:07:
70:b3:e2:10:56:3e:12:5d:12:16:93:65:7b:ec:01:
bf:18:18:04:e4:74:7d:44:f4:10:2a:af:5a:1a:42:
86:98:71:e2:2a:7b:96:92:48:dd:d4:7d:3f:e1:47:
3d:82:77:e9:f0:eb:77:6e:df:a4:76:97:6c:09:4f:
51:69:71:ca:f9:8d:b3:5f:8d:1f:aa:0c:71:1d:c9:
08:50:a0:55:27:f8:29:d2:62:6d:d6:d6:39:69:df:
a9:03:0a:e8:78:95:26:a6:7b:00:5e:82:c6:c5:57:
83:be:b4:89:f2:52:65:85:3d:1e:3b:b0:68:79:c9:
ce:fb:3a:1e:9b:78:93:c2:f4:aa:77:bf:17:85:48:
05:5f:82:ca:d1:81:a0:a9:f5:ce:cb:2a:ff:7c:f2:
8a:d2:54:18:9a:af:b7:8f:9c:61:ff:01:98:23:53:
f4:47:cd:41:59:51:6d:f6:9c:90:69:40:7b:9a:cb:
1a:b5:ad:75:e9:d7:5f:03:0c:a5:c9:1d:4a:1b:b1:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:5C:E8:DB:5D:08:ED:4E:11:19:E3:1E:E2:76:33:2D:CD:5E:F7
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:16:3d:bf:e2:96:22:5a:1a:aa:10:e9:c6:d2:12:fd:c3:c5:
f7:2e:95:b7:4b:cc:36:02:26:16:ea:6e:ca:04:91:2c:90:7c:
13:04:7d:be:0e:d4:ab:47:c7:86:c0:56:e6:16:ae:e7:8a:05:
dd:cb:89:ce:90:ac:82:08:80:d3:a9:ca:37:c7:ad:55:43:ba:
76:01:2c:9d:3a:e6:72:e8:d9:c6:df:93:94:8b:de:09:36:12:
a2:c6:3f:ff:50:d1:a0:93:72:96:07:21:e9:78:7e:16:9f:2d:
3a:fc:27:af:ee:a5:e5:5d:c0:4d:0f:e7:c0:56:ea:77:9b:3a:
b6:d6:5b:54:8c:64:35:7d:9b:75:f1:8c:7a:92:eb:5e:77:bd:
9e:d0:97:44:92:91:b7:d6:6e:2d:62:65:45:7b:f7:35:1b:bd:
5e:65:5b:f0:8b:58:29:96:fe:50:8c:5f:a8:8e:e7:35:ab:34:
ad:70:86:f6:2e:a3:df:ba:a5:1e:9c:9e:0d:a5:df:17:e3:7d:
69:70:3b:c0:76:1f:f9:02:7b:c6:cb:f8:f3:dd:97:94:f6:98:
28:f1:9c:fe:fc:6c:68:17:e5:f8:3a:3f:c6:1c:7f:b5:f6:10:
da:a9:e7:7d:e7:07:f3:4e:65:93:54:cc:29:49:7e:de:a8:e4:
dd:0f:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:03:45 2026 by rpki-client