Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: DDuoo3oDhl1lEw/y9MnGz8SHhu4HFhdf2D2hIx9wevw=
Subject key identifier: 28:BC:6E:AE:48:48:60:A4:65:D5:FB:FD:97:85:D4:8A:C1:82:E3:FE
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 019F860D13C72B711F1C2739C8C3B55928A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 1902
Signing time: Tue 21 Jul 2026 19:00:31 +0000
Manifest this update: Tue 21 Jul 2026 19:00:31 +0000
Manifest next update: Wed 22 Jul 2026 19:00:31 +0000
Files and hashes: 1: DSNdKFy2lJZTElrkr1CT78IoHhA.roa (hash: tO7SJshvN0dMXN0HLWLnqvO3CSU22x0MTTkNed+s0+0=)
2: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: VrZEqVmKYD+u2rFe2ZWvwQ89oBPWVVwFb4Z7xfN8reI=)
3: djYcUtesGEo6eXtApCancG1zlf0.roa (hash: 44l8vn7/ig8bOerFV7hDXQ04Yd8aH+DUwqLc2CBTt4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:13:c7:2b:71:1f:1c:27:39:c8:c3:b5:59:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jul 21 19:00:31 2026 GMT
Not After : Jul 22 19:00:31 2026 GMT
Subject: CN=28bc6eae484860a465d5fbfd9785d48ac182e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:36:25:0b:c4:bd:4d:ce:84:98:40:0f:c8:
6c:bd:d9:e4:3d:3b:2b:8a:c6:de:4d:43:ea:44:c8:
8a:f1:41:95:dd:bd:b1:6a:73:be:28:f5:4d:10:81:
39:1d:64:45:92:5d:64:3f:9e:43:82:b1:31:34:4c:
61:e2:d3:79:64:7f:98:81:e3:91:0f:4a:30:a4:48:
79:af:4e:9c:d5:f6:fe:9c:6d:37:74:8b:e6:7a:52:
5d:ce:ce:56:7e:d3:eb:b3:0a:7d:c2:c9:0c:dd:33:
8b:9c:f2:b9:3d:4a:77:29:6b:34:fa:d0:13:b1:46:
3f:71:1b:84:1a:2c:fd:33:69:95:74:ae:8c:b8:96:
56:a0:42:c4:36:37:15:2b:56:e2:a9:79:d6:37:2f:
90:82:7c:25:e2:9e:ff:5c:14:8a:2d:d2:20:81:b3:
2c:1e:03:9e:0f:a4:05:89:b9:bb:aa:f3:28:89:3e:
d1:35:ad:56:50:aa:d2:61:58:ec:95:b2:3b:96:c2:
be:6f:cf:32:e4:d1:fc:25:59:b2:69:00:0e:09:84:
bf:b5:45:0d:b4:45:fc:2d:7a:5c:1a:c8:34:20:00:
98:6a:30:31:de:af:9b:06:ee:ea:75:a0:09:83:9f:
4b:84:80:b6:a4:9b:f5:99:29:6f:3e:b9:25:b7:e6:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:6E:AE:48:48:60:A4:65:D5:FB:FD:97:85:D4:8A:C1:82:E3:FE
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:c7:cc:85:41:35:e7:e0:14:7a:6d:e7:22:fe:dd:fb:0e:
d2:86:6f:c4:48:c8:0d:27:e5:d4:e9:a5:ca:3d:76:78:f7:c5:
08:ac:b4:2f:16:57:20:02:2f:66:98:a2:a3:ad:63:f8:55:c0:
be:2f:25:78:eb:d5:16:38:a5:d2:4b:c0:5e:de:f5:c5:ef:94:
1e:b3:8c:72:bd:70:01:83:b7:e0:b6:41:15:75:a3:50:a8:da:
6b:8e:c0:87:c0:0c:d1:5b:2f:48:0e:c9:13:20:e2:0d:0c:e8:
5f:25:b1:1b:ff:bb:c9:f2:9a:4d:42:27:d0:8a:d3:49:89:0e:
29:29:b1:20:f2:b7:15:18:15:7b:88:8b:0c:57:20:4e:19:61:
9a:80:b9:ef:0f:7c:c4:00:e0:58:53:b2:40:45:9d:e4:1a:2b:
9d:f4:51:66:ec:fc:61:db:ab:3a:fa:d7:e5:18:0b:6f:49:ea:
48:71:13:3b:85:41:61:54:52:9f:bf:ce:de:27:75:8b:b0:c6:
4a:b5:74:4a:f9:62:31:23:eb:63:26:21:79:16:e5:2c:0f:e3:
9c:52:a2:4c:58:86:8d:03:db:61:23:49:87:2c:d7:88:32:34:
b2:0d:24:c2:e5:67:08:ae:c0:78:97:0b:f5:b2:00:1f:92:73:
68:30:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:47:25 2026 by rpki-client