Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: 5+7sV/KbaHh9JEXQtI7f+r2TTnmz5mJHtQBHECh0bHs=
Subject key identifier: 2A:D0:AD:C4:67:0B:63:1A:40:66:8E:76:05:94:D9:6B:B0:10:0B:46
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019D382E109A8293012AA6EF8CEB8E886DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 1196
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: p0Ya18TBQYM/pdCZUe8QT0kFR7cupPm/XniTV3KNzLQ=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:10:9a:82:93:01:2a:a6:ef:8c:eb:8e:88:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=2ad0adc4670b631a40668e760594d96bb0100b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:d9:4f:ab:cd:86:e7:ee:a8:20:22:56:08:
0d:01:8f:62:a5:99:b5:4a:a3:05:2e:90:25:c8:d0:
81:a1:50:61:63:3d:59:68:a4:71:02:85:bb:aa:ee:
88:4d:43:65:06:e8:64:e3:22:8a:21:eb:e9:61:d5:
cb:ae:14:90:9f:be:90:bf:b9:1e:2e:e5:57:0b:13:
e7:b2:1b:7f:de:ee:ce:77:2c:6e:ef:81:c9:2d:3b:
3c:83:f4:ec:b5:28:61:82:bc:0c:5c:b8:9f:64:b5:
a5:7b:fe:78:41:f6:92:ec:e3:f6:75:44:03:ab:5c:
e3:d3:dc:d7:0a:e1:54:0d:39:d7:f2:61:be:3e:27:
88:c6:f2:eb:d7:d2:4f:07:74:59:70:d3:40:5f:38:
b9:a7:21:af:c5:21:32:70:dc:20:3c:5a:42:20:08:
e6:76:f2:47:d6:5c:7a:1f:82:ce:5e:17:21:b0:29:
07:e2:bf:11:e3:db:c1:f3:9b:ee:70:4c:37:74:c5:
14:3b:65:70:2a:d1:e4:52:c2:91:c4:fd:7f:89:79:
2d:7b:f3:3d:92:c9:57:c2:03:5a:cd:bf:d6:ca:13:
cb:71:e3:b0:66:cf:a6:a7:e9:12:ed:9b:d7:fc:6b:
34:96:ac:49:e7:1e:df:d5:a4:27:f5:e8:8c:7e:05:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:AD:C4:67:0B:63:1A:40:66:8E:76:05:94:D9:6B:B0:10:0B:46
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fd:fa:f5:f9:81:ad:af:bb:e5:a6:5b:16:92:85:8d:7e:fa:
06:8f:29:ad:e8:08:91:25:af:c9:0c:e6:c0:f1:e4:42:27:bd:
4b:59:7b:ce:f6:ec:56:da:47:77:11:87:0d:34:28:55:bf:5e:
4b:fe:38:2b:7f:2a:03:0c:6f:47:96:62:fb:cf:6e:42:ba:b2:
74:7a:60:7e:28:cb:88:74:72:17:43:8f:d8:d8:34:07:4e:34:
84:d4:03:f5:85:8c:a3:e8:8d:2f:71:3f:87:27:8b:47:f0:70:
33:93:e6:6b:f6:9d:7a:c4:67:ea:5a:b8:9b:8e:12:38:4a:c4:
b8:a8:0f:70:2c:e0:c0:73:02:8b:f2:72:bb:aa:a9:31:1b:97:
bc:b0:89:11:f7:7d:d2:69:c3:4c:36:a1:68:a6:6f:60:b6:6f:
aa:76:34:2d:48:77:d3:04:05:f7:41:de:be:09:51:89:9b:e6:
ad:1b:d7:39:a5:ec:62:a6:3f:ab:f8:94:25:2a:67:ab:25:0c:
86:c9:a9:c1:91:35:78:21:dc:48:f6:87:d6:48:2b:74:10:e2:
ea:d8:70:b9:ea:87:84:82:d8:16:ee:08:6f:88:3a:ce:1b:d0:
fb:aa:c9:70:7d:35:4c:d2:fb:59:2c:1a:1b:ce:cc:e8:23:8a:
b0:15:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:00 2026 by rpki-client