Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: PHuHsrykXhspJXQqVz+i09WPqyos/6HAas5mRrBY1qY=
Subject key identifier: 59:54:F3:CD:B5:11:06:B0:AA:18:AB:36:7A:48:47:4F:67:E2:D9:55
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 019CEE5E431D3414089EE553A8FAA73EE3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 186A
Signing time: Sat 14 Mar 2026 22:01:20 +0000
Manifest this update: Sat 14 Mar 2026 22:01:20 +0000
Manifest next update: Sun 15 Mar 2026 22:01:20 +0000
Files and hashes: 1: 0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa (hash: tftG+mQIphk3FNSPZp40EyRTZOVpuoMSFbhQMapxPC0=)
2: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: Zn15hkBS119Vjjwy5gzrIskGjxAC0lDT5DZLOFN9vmg=)
3: j2_V5BwB6zWowKkrqo3IR1AI3TY.roa (hash: v2GJYRFtHtKuk3djB+9NlbqHwSDbHuYB27XPregGwCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ee:5e:43:1d:34:14:08:9e:e5:53:a8:fa:a7:3e:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Mar 14 22:01:20 2026 GMT
Not After : Mar 15 22:01:20 2026 GMT
Subject: CN=5954f3cdb51106b0aa18ab367a48474f67e2d955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:bf:07:1c:33:d5:8c:0f:6e:bd:d0:c0:d7:
9b:4b:ff:02:bd:89:fb:e0:4d:cf:78:55:96:b5:2b:
d3:7a:6a:7c:bb:b4:a9:97:71:09:a2:2f:ac:f4:da:
ac:e6:27:c7:2e:53:ed:af:f5:29:c0:b4:92:c1:c3:
bd:2e:4b:2d:bc:51:8f:80:09:5c:85:35:8f:6e:78:
70:5f:71:25:26:21:1e:0e:57:75:ad:69:28:51:23:
21:ad:aa:08:20:24:7a:74:93:1c:51:51:9c:6e:fc:
4e:5e:6f:c4:1a:f1:9b:0a:7d:10:5b:f6:b1:43:42:
b0:b8:3a:5f:14:c6:ae:a9:e9:b9:77:84:f9:75:e5:
41:2d:b4:eb:80:a5:13:de:d4:94:5f:3f:b1:34:72:
6b:3d:6d:f0:ed:fa:ec:08:3d:88:f5:c4:ad:12:8a:
d3:6b:ad:0b:b2:ea:68:fa:8e:50:d8:67:b1:f8:0a:
33:49:b3:5a:87:b2:bd:ef:70:e4:db:d4:cc:e0:96:
b9:f3:79:41:b6:de:2e:83:94:79:8c:37:1e:5a:97:
bd:37:d4:0a:e0:93:f7:66:81:df:da:40:27:ce:9e:
d1:ba:84:fc:08:72:26:51:73:a9:d3:9e:09:da:47:
4c:ba:07:c0:8b:b0:6a:b4:db:f8:01:d0:b6:5f:91:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:F3:CD:B5:11:06:B0:AA:18:AB:36:7A:48:47:4F:67:E2:D9:55
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b4:b9:2f:3f:6d:f2:ca:8f:fd:f2:bd:69:4c:5e:1e:35:ff:
ed:0f:24:47:43:01:7d:7b:c0:52:42:0e:3d:d5:3e:c4:15:90:
7a:b3:0f:7b:02:bc:36:c7:34:7d:db:b7:61:4d:c9:d5:81:25:
bc:12:0d:9e:2b:68:24:ae:50:62:eb:b4:18:63:85:c5:6c:67:
b1:2f:12:9f:d7:68:05:b8:4b:b7:aa:99:e0:1a:92:ad:ac:77:
9f:17:3e:a1:cd:c1:3e:54:bc:14:41:f5:36:ef:ef:ef:de:3a:
bc:99:27:8c:87:7a:ae:ad:98:58:42:8a:30:ea:4b:1c:a2:0d:
48:0a:f0:bc:a7:40:73:63:52:23:fb:51:08:18:30:0f:08:1b:
c4:8e:9d:42:24:c7:17:3c:91:34:e7:c0:d3:c7:36:a9:63:b9:
21:e0:05:0f:9f:07:c5:98:ab:6a:c2:ed:db:48:c5:db:b1:48:
9a:f2:a5:ae:26:61:0c:3a:2f:cf:0a:5d:a6:71:64:e6:39:91:
cc:e3:a3:a0:58:9f:79:85:65:55:93:d7:e6:63:2d:5b:83:67:
e6:2a:8a:ab:56:28:10:63:fb:ce:1b:8b:65:ae:c5:53:4d:3d:
9e:3a:57:30:0d:69:f8:70:7e:06:12:9f:6a:a6:b2:f6:eb:3b:
f0:1c:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 04:41:50 2026 by rpki-client