Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: X51lfKiJ6amKpYd8DBPHeAScnhiU6V6k2JwCV/ZcD+U=
Subject key identifier: 2A:3B:32:05:03:4E:F8:C7:5C:DD:B6:A8:14:9B:8C:CF:DF:3A:52:86
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 019D3A54737D4468E1F2CFF748868CF58101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 04C5
Signing time: Sun 29 Mar 2026 16:01:46 +0000
Manifest this update: Sun 29 Mar 2026 16:01:46 +0000
Manifest next update: Mon 30 Mar 2026 16:01:46 +0000
Files and hashes: 1: AcOd55sVqvOO3XHczvl-zosJmzk.roa (hash: e+MSkkLADvHFn1+ehMsTrvhCUFfbRzhM94S4F/DWLXY=)
2: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: RQDMbvWBe8CyxG0pUh/iF8hnWOSteHBX3YCBAAgiqT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:73:7d:44:68:e1:f2:cf:f7:48:86:8c:f5:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Mar 29 16:01:46 2026 GMT
Not After : Mar 30 16:01:46 2026 GMT
Subject: CN=2a3b3205034ef8c75cddb6a8149b8ccfdf3a5286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:58:a9:fe:7d:a0:a2:b0:3c:d3:ae:a5:1d:
3f:ee:9a:fd:6b:bb:2e:bc:ce:ef:cb:b3:47:2c:44:
1d:d0:13:89:02:69:7e:78:cb:f1:8c:3a:4b:5d:fd:
e3:2a:95:d5:f8:f4:c9:3a:c1:5b:7a:28:3c:a3:20:
be:51:3f:71:3c:9b:62:4a:de:a2:85:a9:ee:f0:5f:
c6:c9:ea:3d:80:1e:38:6e:76:c1:9d:f0:3e:0c:99:
29:68:e5:ed:87:4a:46:51:99:f2:f9:cb:22:3d:53:
41:0d:39:b0:1a:6b:f9:52:f4:14:84:ad:e9:e3:d6:
33:ca:d0:96:d0:49:a1:44:e6:e0:be:05:f8:59:ff:
17:1b:6f:58:be:ac:87:5a:cc:f1:f7:b9:b0:1e:4c:
ae:ca:64:8b:a6:65:0e:b5:e5:06:3e:e7:0d:95:ef:
23:03:67:45:8c:21:dd:99:1c:12:63:5b:f0:b5:9c:
84:49:66:4f:2a:ad:bc:d1:04:3f:bb:92:a8:5a:b5:
6d:b1:16:14:05:ad:e8:f0:5d:d6:d7:5c:a8:7b:99:
68:e2:ee:f3:cb:d9:9b:60:0f:a0:f2:cc:2b:25:2e:
ee:a2:53:38:de:7f:f7:c0:6a:0d:c3:c9:df:10:3f:
d6:9c:55:58:f8:f9:c9:2b:2c:1b:55:3d:18:6b:3f:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:32:05:03:4E:F8:C7:5C:DD:B6:A8:14:9B:8C:CF:DF:3A:52:86
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:63:66:f6:a7:39:2c:dc:73:2c:dc:6e:f4:8f:c9:b5:ea:
f3:8c:94:9f:19:96:0e:f1:c9:6e:52:58:66:40:fb:d6:87:bc:
47:69:b5:3f:cd:d9:d3:a3:ee:37:7e:1b:3a:d4:31:84:8e:2f:
4c:65:d9:92:cd:d3:86:52:2b:33:6c:0c:95:ea:72:ef:4e:81:
f1:6e:f2:2d:76:47:1e:87:bb:ac:69:13:40:91:a6:f8:8c:45:
6a:08:73:93:4a:bb:88:8e:52:71:45:5a:f1:11:82:8e:a5:8c:
f9:48:61:17:8e:ed:c8:24:8b:09:7f:0b:47:99:bb:2a:f0:53:
f7:6a:4b:01:c7:3b:68:18:d4:05:f6:08:0d:de:eb:f3:ad:7c:
cf:7c:c2:eb:36:35:89:0f:76:49:50:cb:93:c1:ef:0b:a2:7d:
d4:a4:aa:07:d5:42:f3:79:38:a5:a1:69:0f:cc:a1:1b:ea:e7:
b0:88:5d:c9:6b:e3:2d:e9:16:bc:13:36:b4:2f:52:58:21:70:
49:30:8b:b5:4f:54:75:06:44:7e:5c:f6:6c:97:81:e9:2b:b5:
9b:c7:5a:64:96:4a:19:1b:3f:8a:d3:0e:05:89:66:ce:aa:06:
ab:fd:b2:d0:f4:58:9a:52:29:fa:99:e6:4c:0e:ec:e9:fe:62:
ea:17:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:58 2026 by rpki-client