Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: eqzge8kYNG0crGFR/T0rtPGsq9v+/uNE9bgJDehsIA0=
Subject key identifier: 2B:97:78:96:98:64:1B:72:B2:11:9B:D5:8C:9F:C6:E2:C6:5F:9E:0C
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019D382E08999E76431179B8CB00AE6D6EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:34 +0000
Manifest this update: Sun 29 Mar 2026 06:00:34 +0000
Manifest next update: Mon 30 Mar 2026 06:00:34 +0000
Files and hashes: 1: 8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa (hash: Z7aisMaBlEpC+Box7db/aG2eyltwAxWv0Dd2ZI7sSqU=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: x8CIleXhngQ5xbYpBLrW1tkFR1cqsNVs201/sdCv9Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:08:99:9e:76:43:11:79:b8:cb:00:ae:6d:6e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Mar 29 06:00:34 2026 GMT
Not After : Mar 30 06:00:34 2026 GMT
Subject: CN=2b97789698641b72b2119bd58c9fc6e2c65f9e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:c8:f2:48:01:1b:f9:9b:08:4b:8a:13:f0:
9e:05:e3:ff:a2:52:f2:30:8f:0f:cf:72:f0:a7:58:
e2:b2:62:c5:d8:d3:78:45:e0:be:2e:45:01:68:9d:
f7:30:4b:4a:66:42:6a:c7:a4:ca:e1:b7:36:1c:8b:
ac:e7:b0:ce:54:9c:30:d8:76:81:5d:56:18:8d:fb:
4c:91:49:c6:85:30:97:0a:25:a7:6c:52:3e:80:a8:
32:ca:1c:34:9d:33:11:39:9d:74:b9:55:5e:c3:2a:
26:13:ea:cb:2a:37:d5:fa:e5:bc:2a:8b:cb:f9:b8:
1d:30:76:48:78:20:db:64:38:7e:4b:58:d1:b7:3a:
75:6c:22:29:5d:de:8b:f1:2d:c7:c4:e2:fd:33:03:
41:86:ea:b4:80:07:91:a3:ab:5b:b8:41:7d:33:68:
e9:d3:af:81:87:f0:5d:8d:bd:19:fa:d8:77:7a:b8:
0d:e4:0d:6f:e8:a2:84:fb:4b:27:d5:cf:ab:e0:5f:
f4:99:6a:a9:d0:8e:90:74:fa:31:a7:2a:1e:56:34:
41:79:69:14:2a:00:3b:ba:d9:b8:3f:6b:07:c2:8e:
65:36:75:9c:bd:a2:ad:0d:6e:c1:c4:4d:1c:ec:1d:
b4:b7:91:46:e8:fa:49:b4:66:a3:7e:8a:9b:0c:d8:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:78:96:98:64:1B:72:B2:11:9B:D5:8C:9F:C6:E2:C6:5F:9E:0C
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:20:31:c2:76:59:46:3b:e5:5e:bb:ab:8e:18:d6:41:1e:72:
34:54:5c:93:2d:df:ce:09:49:59:2c:f3:60:b9:9a:94:eb:15:
15:f7:fa:65:0c:41:86:a0:d7:a2:0a:4f:e0:1c:d5:3c:e8:95:
a0:06:fe:2e:f3:29:fe:2f:c3:e0:50:9e:c0:51:19:c7:3e:27:
be:1f:a3:5a:21:4f:35:70:e7:15:07:13:99:c0:67:f8:c6:89:
05:53:79:1a:5e:d8:b5:86:32:99:b8:02:f5:4e:c3:8d:0e:c6:
dd:16:7b:2f:89:24:41:f2:24:53:9e:09:b7:d8:1c:59:fe:c5:
f3:aa:12:15:05:04:6c:5a:31:fd:3d:c4:33:e7:e9:af:94:0e:
9c:e7:6c:66:6d:c0:27:ac:25:b2:97:aa:99:aa:a8:ca:79:48:
64:36:61:75:b8:c1:6f:ac:2b:9e:08:e8:33:17:29:d9:86:82:
4d:ac:c0:78:52:8c:83:2e:34:65:91:f2:3a:9f:e0:81:11:54:
66:39:c2:0e:80:2a:fd:24:2c:e6:08:28:ce:43:84:ac:d0:25:
91:78:4e:97:8c:97:ba:c6:ee:86:07:68:10:79:0e:c6:08:ea:
ad:38:70:88:9e:45:3a:2a:8d:f4:a5:cf:43:3d:10:9e:7e:fa:
c8:f6:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:07 2026 by rpki-client