
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: 1IFTDM2g0mEn48O8KkLXXhQwFsI5n3raBT+BGgt+M2A=
Subject key identifier: 37:C2:36:0D:95:4B:26:54:43:44:0F:AF:09:0D:9E:11:54:DF:5F:45
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 01A13936AE6C339543A2B6C1ED9D144226CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 18E8
Signing time: Wed 14 Oct 2026 07:00:47 +0000
Manifest this update: Wed 14 Oct 2026 07:00:47 +0000
Manifest next update: Thu 15 Oct 2026 07:00:47 +0000
Files and hashes: 1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: /XdlSfZoG/AWHKq/Nq2EbB3+bLFlo49jN1wE9I8ueJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:ae:6c:33:95:43:a2:b6:c1:ed:9d:14:42:26:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Oct 14 07:00:47 2026 GMT
Not After : Oct 15 07:00:47 2026 GMT
Subject: CN=37c2360d954b265443440faf090d9e1154df5f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:24:ff:b8:e1:10:bd:35:6a:b1:92:60:ba:
37:39:4e:6f:81:10:43:50:4a:6e:a0:f3:a5:06:80:
b8:95:1b:73:d5:8d:1c:88:12:9c:f5:5d:d7:b6:76:
14:9b:ed:58:12:b7:58:af:3a:73:f3:be:08:a6:43:
c4:64:03:05:62:90:76:16:20:f8:8b:b3:82:63:65:
07:6b:9d:a5:17:2e:63:40:13:b1:94:16:4f:1a:8a:
92:9a:38:e6:df:19:93:dc:a4:28:a6:18:77:5b:49:
ea:5a:df:27:b0:48:00:62:72:39:e4:d4:c1:a2:b3:
13:ce:eb:58:14:60:4b:b6:d9:f6:eb:a7:81:93:0a:
33:95:27:fc:88:d9:ab:d3:72:ca:45:14:76:40:90:
9f:df:7f:e9:8a:bb:14:73:ca:13:fb:f0:09:e0:a7:
cc:dc:9a:ca:99:08:29:5e:b8:6b:c7:b5:9f:a3:02:
52:0a:f8:b3:01:ed:67:ff:85:95:d1:c6:e5:9e:7c:
35:9c:84:62:09:0c:a1:cc:34:ae:9d:77:c2:ed:8d:
02:e1:b8:d8:39:d8:d3:47:2a:81:ce:72:bb:44:99:
68:e9:5d:70:3f:d0:bd:6d:49:18:f3:40:ba:fb:ac:
a5:84:92:2d:99:cb:be:18:a9:96:59:47:72:dd:b2:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:36:0D:95:4B:26:54:43:44:0F:AF:09:0D:9E:11:54:DF:5F:45
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:31:a5:fc:60:ca:c7:bf:bb:f2:e3:82:85:59:18:b8:d1:d3:
8e:e8:e0:f4:da:5e:cc:a3:ee:14:ed:74:0e:40:58:e3:0b:03:
eb:e9:c9:e4:cd:da:c9:c1:ff:35:82:21:0c:b6:77:68:16:78:
a9:af:b5:e8:59:0f:5b:5b:35:37:5a:b4:3c:85:60:d7:08:da:
ac:b6:13:fe:2e:29:3a:05:d5:cc:fe:fe:0d:25:36:b0:44:19:
bc:b8:79:ae:bc:29:62:a1:fa:e7:b4:97:88:7e:55:1b:a1:cf:
18:6a:ab:d2:43:71:94:75:86:99:6a:53:e9:a8:88:fe:13:8f:
de:12:52:90:a1:d3:63:67:3e:f0:55:f5:fe:fe:99:7e:a3:4c:
6d:dd:fd:8f:2e:4b:a0:b8:7a:68:5d:d4:f1:ef:2e:ac:61:5e:
46:b0:be:b9:68:76:a1:1f:6b:85:5a:a7:ba:15:b5:76:05:ba:
b9:bb:e5:88:9e:d4:24:75:a5:03:c3:4d:9c:b5:b0:79:2f:81:
80:71:a9:0d:8f:a4:62:25:d5:65:ec:3b:73:eb:fd:00:1d:17:
d6:f1:94:60:1f:0f:19:cd:1c:1b:19:0f:a2:76:55:f6:01:16:
a2:ec:c0:26:97:36:1e:9b:f2:56:02:31:e2:52:d5:18:95:e6:
a9:80:d2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:09:44 2026 by rpki-client