Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: Wi4l3bIKRLDQYTXsaDSEoQjJvbRt5SuTEITsuaxuF2Y=
Subject key identifier: 7F:DD:18:90:59:6E:99:CC:C6:A0:8D:E5:65:9A:06:C3:F6:76:7D:F2
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 019D382E580FB5B5207DE72E53A452965A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: 3z59xcVVHmOYTcMl6K7dwHoQcvw.roa (hash: sZKm/hLxXKVHvVjWgAeq8rY/zQIbmF5W3TZbsODWWdY=)
2: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: 3vuXcgbOVCnnxdGjzYc+tbTnyWaUlOI7FcbkMp6XGKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:58:0f:b5:b5:20:7d:e7:2e:53:a4:52:96:5a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=7fdd1890596e99ccc6a08de5659a06c3f6767df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:9f:24:39:e6:8a:83:95:e9:0a:43:be:92:
48:8d:2d:c6:51:74:f3:d9:08:34:ba:a6:e2:a1:c2:
23:26:cc:b5:d8:4d:9f:e9:9b:dd:35:36:45:8f:08:
70:6f:08:2a:bc:a7:f9:c1:1a:65:dc:21:f0:18:d5:
db:5f:8d:36:aa:9a:ee:d8:2a:9d:1d:99:49:4b:8d:
b5:d2:0e:bb:79:2e:7e:cd:84:cc:de:13:bb:e6:cd:
88:38:c5:b7:79:03:81:3b:6e:4f:79:e0:de:fb:f3:
f2:22:45:5f:ee:af:cd:be:8f:c4:75:86:80:37:4b:
e1:5b:9c:55:0e:70:1e:98:89:31:1f:cd:24:db:16:
76:b1:47:d5:19:c8:b5:db:8f:c9:c5:3d:e7:f1:31:
33:5f:36:98:7c:2f:9e:f5:46:97:30:0b:c6:50:be:
1f:3c:f2:6b:25:71:0a:d0:de:b9:b4:d0:ab:fc:c9:
48:ec:12:8d:26:ad:16:33:5b:ab:19:e0:06:12:cb:
e4:94:25:2c:1a:ec:33:e1:c7:50:50:6d:d7:af:99:
08:f1:ec:45:ed:aa:ca:62:b6:24:ee:5d:72:35:3d:
95:aa:4f:33:90:b0:b7:c9:89:02:96:38:99:a0:2c:
d1:11:2f:b8:f0:ae:fd:cf:54:9a:38:de:28:be:69:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:18:90:59:6E:99:CC:C6:A0:8D:E5:65:9A:06:C3:F6:76:7D:F2
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:95:7e:72:2f:4a:ce:82:82:1a:4f:bb:be:d0:22:5e:16:98:
12:b6:fb:d4:ff:89:dc:bd:5a:dc:24:27:8d:c6:af:42:32:1b:
35:e0:78:99:6b:3e:09:d0:b9:d2:78:c1:46:8d:64:69:e4:82:
11:dc:40:9a:3c:cc:9f:13:16:ae:10:ed:92:67:23:1d:d0:e1:
24:d2:8e:44:21:09:04:bd:9d:f5:81:6f:88:c0:3c:a7:38:d4:
18:e5:87:43:07:55:6e:87:2e:c0:7d:23:52:7f:be:c8:93:67:
4d:a1:8b:18:41:cd:2b:fe:32:1b:b6:90:c5:c5:26:97:c9:44:
b7:d7:8d:fd:c6:c2:66:45:f2:f6:05:b6:40:10:4a:c3:9f:95:
be:23:ea:fe:d3:4b:31:60:9d:7c:fd:6c:e7:fb:53:59:68:59:
c3:c3:ca:2f:41:18:ee:14:89:10:9c:e7:ae:88:95:25:a9:d2:
7d:eb:7e:bb:4d:4c:96:99:fe:ee:53:1f:d1:5d:5d:be:80:6e:
48:b5:2b:d7:0d:77:e3:8a:41:7a:51:73:78:b5:6b:aa:96:00:
2a:23:e8:0d:02:59:f9:a1:24:bc:19:00:3b:52:0d:f3:9f:56:
5e:8a:8f:2b:83:80:fd:dc:13:0a:d0:5a:9d:cb:bc:61:0f:1e:
94:23:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client