Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: mN96/VOQ/X9ZUTvlpgw6pUNZqCS2Lm4SPoOHBpha/mA=
Subject key identifier: C7:4D:4E:97:E0:03:21:0A:D1:E0:F3:D5:42:A4:F9:1C:CD:8B:6F:25
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 019D36E43A1915F5074EFEC2FA33745F8539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 122F
Signing time: Sun 29 Mar 2026 00:00:19 +0000
Manifest this update: Sun 29 Mar 2026 00:00:19 +0000
Manifest next update: Mon 30 Mar 2026 00:00:19 +0000
Files and hashes: 1: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (hash: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: woTVsaO0AmmeBJsrXm6JqMuJEEqiHgJQl6gH8iRW43s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:3a:19:15:f5:07:4e:fe:c2:fa:33:74:5f:85:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Mar 29 00:00:19 2026 GMT
Not After : Mar 30 00:00:19 2026 GMT
Subject: CN=c74d4e97e003210ad1e0f3d542a4f91ccd8b6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:cc:5b:99:b6:1a:af:a1:6c:3f:33:b7:59:
cb:f1:ba:d2:09:18:a4:ba:5c:c0:40:7c:d6:6f:01:
48:58:2e:8a:f4:2c:81:50:fa:d0:06:9f:b9:42:46:
c5:4e:f3:a7:81:da:aa:62:0b:2d:de:e4:84:7c:b7:
fb:9b:e8:58:54:de:18:41:3d:aa:56:3d:9e:d4:17:
9a:42:40:77:a0:22:7a:1a:8b:4c:79:58:55:42:81:
37:20:8d:bb:14:12:aa:96:37:18:f7:cd:99:58:0d:
36:c0:fd:19:98:57:0c:55:b7:de:0d:73:13:07:82:
e9:07:30:d4:49:d8:19:dc:87:e1:6c:cb:fd:18:19:
63:59:0b:e4:23:76:78:89:9a:7d:e0:ed:a1:7d:a2:
3f:e2:f3:ac:2c:90:32:a3:db:c8:f6:f5:39:9d:99:
8c:38:9a:94:eb:1a:b7:97:ea:42:ed:85:4d:ca:f9:
53:94:dc:5b:f2:e4:0d:17:f2:24:a7:31:dc:8c:d4:
43:a1:f0:74:f3:9b:1a:e3:7e:b8:e2:c2:9d:85:4f:
5a:b0:95:d5:3e:ea:58:34:1f:72:43:78:8a:3f:9f:
79:0f:2f:52:1c:2b:78:85:e9:a0:59:3d:77:55:19:
41:88:e5:e7:e0:a9:66:9c:f7:e1:f5:33:4e:dd:95:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:4E:97:E0:03:21:0A:D1:E0:F3:D5:42:A4:F9:1C:CD:8B:6F:25
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:59:52:99:c0:eb:54:d5:9c:76:a9:90:3f:29:e9:c1:b2:fb:
31:f9:e8:dc:a4:dc:e7:2c:4f:92:79:b8:f8:d0:64:07:ed:35:
dc:2c:7f:b0:9d:f4:f0:5e:6f:af:6d:07:18:75:6e:e1:f0:de:
7c:a8:94:d1:34:0d:68:46:37:34:3b:0d:4e:c4:bd:a5:16:74:
32:12:95:df:e9:81:d1:f2:9c:1e:3b:66:ea:b9:2b:ae:fd:b0:
0a:71:7a:6e:ee:be:17:dd:df:63:79:57:23:57:c5:6d:05:b8:
21:64:16:38:31:d9:73:43:ab:cc:18:8b:97:6c:c7:09:e2:96:
1d:3a:6c:62:9a:c5:15:a1:0f:e5:3b:02:0f:c4:c7:91:a3:1a:
f6:bb:c4:aa:11:a5:96:c0:c5:25:3e:e8:44:7d:ac:83:dd:08:
51:be:df:3f:22:b1:52:be:72:a4:a0:88:6d:1a:94:4c:2a:80:
04:96:0c:da:93:e2:0f:2d:ea:a8:c2:35:88:6c:bb:78:ac:bb:
a0:bc:17:d8:56:a5:47:c2:a1:ef:7e:0d:25:15:45:9c:1a:43:
cd:73:15:ab:d4:e1:2c:4b:97:22:c8:52:0a:7d:05:b7:7c:96:
b2:e2:03:ee:db:c4:52:67:ab:f2:ff:4b:ea:7a:f1:bf:cf:e2:
ff:75:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:36 2026 by rpki-client