
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: enLBASBGLfH2kgmhgfnxVnSbLU+tQTXq3Y6D06B9LGk=
Subject key identifier: 83:41:B5:1F:F5:2A:3D:D9:D0:C5:45:AA:58:CF:01:C0:40:B9:9C:47
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019F190D4EEBE153F529E8BB73B109020F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 128F
Signing time: Tue 30 Jun 2026 15:02:10 +0000
Manifest this update: Tue 30 Jun 2026 15:02:10 +0000
Manifest next update: Wed 01 Jul 2026 15:02:10 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: RanLQsoAm685djyp72XTSfpZfIihnFUu101DnD022MI=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:4e:eb:e1:53:f5:29:e8:bb:73:b1:09:02:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Jun 30 15:02:10 2026 GMT
Not After : Jul 1 15:02:10 2026 GMT
Subject: CN=8341b51ff52a3dd9d0c545aa58cf01c040b99c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:2f:65:4e:2c:6c:1e:00:64:ce:af:6e:4e:
db:85:2c:b3:15:77:0b:b4:9e:a2:86:2a:97:b7:fe:
00:57:a9:6d:a7:a8:70:53:24:75:2b:a8:d0:eb:52:
56:d0:f6:d1:5c:5a:3b:18:21:5c:50:00:27:ff:9c:
ac:ff:1c:80:5a:30:a6:83:2c:6f:19:04:9b:61:45:
a0:e7:98:e2:47:78:7c:eb:36:05:2d:1e:7b:e1:e6:
72:81:1c:2d:00:46:df:53:f8:f8:ee:36:23:fb:4c:
b5:a7:1a:55:a8:25:63:7f:66:09:b6:3a:83:dd:d5:
2f:dd:64:4f:a0:2f:1b:9d:93:8c:b0:e7:fe:9e:35:
c5:7d:8e:73:88:e7:c0:11:57:9b:dd:45:b5:eb:fb:
64:08:c8:77:ca:c6:16:36:b3:10:d5:f9:46:93:6c:
17:6e:56:85:59:42:2a:1e:89:52:54:74:18:30:4f:
d7:a8:8b:71:05:f3:26:2d:8f:90:89:5c:3d:57:15:
bb:34:63:2d:7f:af:7d:61:cb:b1:af:a7:e6:f4:a0:
d2:3d:68:62:16:16:08:54:dd:e4:00:80:99:9c:99:
ea:8c:61:89:ac:9b:f9:c2:e8:c3:a7:b7:0f:fb:8d:
ca:69:ef:41:aa:c6:aa:5b:2a:0d:b6:70:ae:b4:6f:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:B5:1F:F5:2A:3D:D9:D0:C5:45:AA:58:CF:01:C0:40:B9:9C:47
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d5:98:d9:c3:f3:42:9b:ff:87:d1:8e:d6:e9:60:71:ca:91:
65:14:82:eb:87:8e:03:d8:3d:8c:60:48:df:49:26:76:94:2b:
ff:43:d2:15:97:97:58:f5:bf:34:c8:69:99:31:5a:5d:5d:2b:
49:e7:56:c4:ad:8a:d9:0e:0a:90:ed:e0:08:80:61:c5:b9:14:
e5:d7:a0:e3:2a:c8:6e:b1:3d:20:9d:0c:ea:f9:35:af:5f:5a:
23:96:41:31:f3:09:c9:6b:c3:7f:47:a1:8e:ac:72:64:a4:3b:
85:17:13:22:c0:db:9e:34:a0:2a:79:a7:6f:29:2e:6d:5f:98:
73:a3:81:5e:90:0c:fa:3c:71:58:a4:78:f7:bd:45:5a:79:53:
e4:5e:83:59:6d:9f:a5:7a:0c:c8:71:8b:3b:91:4c:6f:47:cc:
c6:19:85:60:22:88:f5:6c:78:db:61:0b:e0:8e:8a:44:3d:3b:
e9:34:49:5c:26:a8:6a:ef:cc:dc:a2:78:cc:ab:44:58:81:e6:
76:a9:b6:66:0a:ca:a5:f0:4d:dd:c0:be:e7:1c:a7:6c:ab:0c:
b0:06:7c:4e:7e:ed:82:3d:a5:7e:c1:0a:cf:46:ce:6f:c4:1f:
91:5b:f4:4d:60:cb:20:60:76:fd:f0:de:38:ba:d7:97:e3:63:
e9:d1:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:20 2026 by rpki-client