Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: i23+o7Hz/jKqXft8H9MVmZc506txuroQORV7aaStacM=
Subject key identifier: 26:89:17:FF:46:51:08:59:BB:5E:F2:9C:35:A5:D1:7E:67:AA:4D:CE
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019D3752C90D1AB5308E96AB05DDD270B46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: eP1CoDgUf8sPpXrO5fswISjfISp3jHZWSGNifQjijnw=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c9:0d:1a:b5:30:8e:96:ab:05:dd:d2:70:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=268917ff46510859bb5ef29c35a5d17e67aa4dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:94:7c:e6:89:61:37:30:33:e9:da:37:4a:
1a:52:b5:3b:f9:b5:94:8c:57:70:5a:c6:80:75:51:
bf:45:ac:4f:06:05:25:82:76:1f:66:5d:44:dd:c0:
8b:9e:1d:9d:ef:f4:14:b8:22:00:d1:3b:84:5b:55:
be:32:67:45:b3:cb:61:8e:d8:f8:77:1a:e5:b8:09:
98:cd:b1:5d:1a:bc:7b:ab:45:21:bb:c1:97:22:30:
f4:ce:be:42:f2:88:01:3a:a1:de:04:66:15:c1:41:
13:ba:d0:fa:d7:9a:33:eb:a4:80:54:08:80:66:a6:
c4:71:a9:3e:76:63:66:ad:4f:b0:79:53:9b:2a:68:
e3:78:b9:fd:21:aa:c6:c1:07:9c:95:2b:2b:6c:7d:
ed:62:b5:db:5c:a0:bd:dd:e9:12:1b:31:99:ee:63:
73:b8:a8:42:5c:38:ec:ac:09:a1:31:d7:88:60:b4:
09:b9:92:4f:77:6b:fa:8f:74:d6:18:1e:75:ac:22:
62:42:65:90:f6:a5:58:95:5d:98:ea:46:cc:a4:7f:
af:db:aa:67:74:2a:f0:f8:7c:be:50:15:a7:0e:8f:
8d:f0:42:9e:fd:94:3d:0f:99:d9:a0:d7:93:b6:b8:
ae:0e:d9:b7:39:f2:6f:f8:5d:95:7f:c9:32:97:da:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:17:FF:46:51:08:59:BB:5E:F2:9C:35:A5:D1:7E:67:AA:4D:CE
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:26:4c:65:ff:30:0d:fa:7f:9d:df:70:46:a2:d2:3f:c3:
33:4c:4b:a2:20:38:b2:ad:cc:57:1f:be:8a:2d:ab:cd:74:2c:
b4:11:59:1f:cd:12:14:80:8e:84:f3:4f:d4:64:d4:a9:b8:c7:
1b:7c:13:83:78:94:f1:74:3f:72:81:d9:fc:84:52:1a:87:19:
de:e1:2a:8d:12:2c:a2:82:54:b8:a7:75:e4:98:bc:3c:17:6c:
fb:4d:9b:86:64:a4:d2:de:90:5d:65:20:4c:c4:07:76:35:1e:
76:f6:c5:83:c1:87:4a:11:f7:d3:42:96:1c:db:5d:8c:08:7f:
eb:94:3b:81:02:ba:76:e7:29:90:d7:94:e5:2c:a1:a7:07:12:
cc:e2:20:07:bf:60:c2:ad:c6:f7:82:e3:45:2d:77:df:63:b9:
f4:eb:91:68:9d:2a:87:0c:68:57:7c:cc:ec:e8:e1:fd:f0:81:
03:eb:50:cc:2f:ef:52:4f:c7:d0:32:59:df:02:e2:ec:52:4e:
a6:97:8f:1d:6f:1c:63:32:cd:fb:8a:1a:f5:7e:35:82:9a:ef:
f4:43:f9:4c:41:36:f7:8a:94:6c:97:a6:32:f8:8c:5a:93:7d:
51:7c:72:b5:61:47:29:f6:10:d1:1e:53:1b:c1:83:88:a4:10:
9b:a6:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:47 2026 by rpki-client