Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: 97QDugI+66Qcaq/Olm4VPTWx6dahh/VLxdsAipN2FL0=
Subject key identifier: E8:92:4D:10:D6:B4:C0:85:4C:00:26:51:D0:50:63:09:13:D8:59:FC
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019E8FB740D1F3414126EC3D39818A69E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1941
Signing time: Wed 03 Jun 2026 23:00:11 +0000
Manifest this update: Wed 03 Jun 2026 23:00:11 +0000
Manifest next update: Thu 04 Jun 2026 23:00:11 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: UcoBi8pNiU8tey+/1Qebh2zacyjebPNAwNKtjUhFbus=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:b7:40:d1:f3:41:41:26:ec:3d:39:81:8a:69:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jun 3 23:00:11 2026 GMT
Not After : Jun 4 23:00:11 2026 GMT
Subject: CN=e8924d10d6b4c0854c002651d050630913d859fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:0a:e7:25:a5:f4:0c:24:c1:57:0a:61:19:
80:a1:5f:06:08:d7:d0:49:03:8f:35:45:96:2f:99:
6b:57:b2:09:3b:f7:85:92:ac:5c:76:51:ca:5e:3e:
dd:74:dc:17:13:3c:d0:63:72:c2:2f:81:58:71:17:
89:36:d7:b8:24:a3:bf:f7:0b:27:6f:31:84:33:26:
03:fc:8d:d2:35:bf:58:8c:89:27:d1:45:2a:b9:b6:
71:08:2d:6f:77:bf:9e:88:93:d8:01:3e:b1:85:d5:
8e:16:c8:43:bd:7d:3a:29:bd:87:3d:9f:c3:f1:72:
32:46:04:b7:14:3b:2d:fd:0e:d2:5f:ed:ce:ff:bc:
2a:a7:c8:8b:41:63:38:94:12:b7:3a:0a:cd:81:aa:
14:ce:16:9b:f1:11:79:de:03:a2:d6:5e:38:08:10:
37:d9:53:07:65:2b:3b:a6:c4:37:7e:3a:21:c2:78:
2e:bc:d0:30:e8:cf:97:e0:38:32:a1:ae:c5:ec:13:
d6:26:af:18:43:b1:44:9a:65:bd:3a:f5:8d:79:f9:
df:86:f6:6a:75:44:24:c9:91:d1:50:c0:eb:39:43:
77:11:96:92:76:32:9a:e3:b0:77:24:6f:f9:02:44:
45:14:63:dc:29:2b:b8:06:b7:0e:bd:69:68:a7:32:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:4D:10:D6:B4:C0:85:4C:00:26:51:D0:50:63:09:13:D8:59:FC
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9b:82:7b:30:ac:d0:e5:13:9f:4f:1b:d1:a2:90:bf:06:aa:
c6:8e:62:12:55:02:1d:47:d3:c3:a1:40:b0:8a:0f:79:06:63:
7a:42:e6:24:8f:5c:8d:a2:e5:5b:72:60:8d:7f:87:af:3b:36:
c7:94:68:79:16:8f:f5:ba:53:1b:e4:11:31:d7:dd:66:29:06:
07:ae:ba:fc:ee:61:38:c8:ef:22:81:c9:ac:64:87:d1:96:3c:
25:f7:3b:7d:cc:2e:a7:f1:24:9d:6b:64:79:6e:8d:0c:61:8b:
fb:f6:d3:b3:34:c7:c5:3f:fe:91:4c:d7:0a:4b:4d:78:a1:06:
e0:93:c6:95:b2:77:3a:37:a7:69:12:2d:2f:26:59:60:67:c8:
6d:32:7c:e0:ed:00:d0:c4:73:7b:a9:60:a8:a7:36:bc:c7:0f:
ab:9c:1b:5d:13:81:38:82:9c:76:cf:72:d7:77:00:18:32:8c:
43:ce:3e:2b:d6:c2:3e:34:fb:d5:f0:4a:11:43:a9:d4:9e:d4:
13:72:0c:ba:d8:cf:be:4f:b3:7a:8a:16:ee:2f:a6:3f:48:47:
cf:fb:86:0c:1b:21:1f:35:ad:35:e8:80:4e:f8:ba:da:4c:0a:
79:ea:c0:78:a3:09:af:a9:d8:be:e7:81:cc:3b:83:d1:81:e5:
e6:5f:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:16 2026 by rpki-client