Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: ysQJQzVx53g3A9QgKSCoPQAOtcocFj2i9h1PAD89YtU=
Subject key identifier: D0:D0:13:C5:FE:B4:B8:A4:72:BC:68:88:CD:61:3D:B9:A0:7B:FD:92
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019D3909BDC36252FA626B0191310272B8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1896
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: 0isjYHQnE212/xBTWLtH87My5GV+vRK9ei0wBzDsAMo=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bd:c3:62:52:fa:62:6b:01:91:31:02:72:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=d0d013c5feb4b8a472bc6888cd613db9a07bfd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:17:72:61:68:a1:45:bc:49:e2:1d:04:82:
b2:62:77:81:48:6c:c0:80:22:bd:4a:f0:ea:59:2f:
15:c6:c3:34:4a:10:8b:50:e9:81:24:f8:ed:73:f6:
9a:59:c3:22:d8:b6:45:4a:4f:d9:91:81:2c:6d:57:
1d:56:54:07:c8:9e:f0:45:ac:6d:92:0e:ab:ca:a8:
37:04:a8:81:24:b8:5a:02:c3:51:cd:00:ba:76:fa:
ad:a4:18:0e:c0:1b:3c:20:6b:4d:64:ad:4a:d9:53:
76:90:a3:be:3c:4c:67:8a:cb:c0:47:85:46:66:7e:
0f:f8:0f:12:85:1e:d3:34:cc:50:a8:04:48:a2:12:
3a:68:d6:a0:86:d4:79:c5:11:9d:7f:85:0a:99:40:
1c:8f:86:21:d5:b2:55:9e:d9:f0:7a:74:b6:17:1b:
b6:21:cd:69:7d:ee:57:d6:66:55:fb:2c:c4:f2:f8:
ec:b7:ee:90:ea:1f:1b:2a:ed:be:04:bb:09:e3:2b:
c8:fc:17:18:d7:03:2d:dc:0a:c0:03:51:65:dc:fa:
b8:2b:54:39:7d:2d:02:d0:f7:ac:17:60:8e:53:7c:
e5:d0:a5:63:76:29:09:ff:72:1e:27:3b:b1:bd:70:
9d:12:5d:2c:b7:63:e7:2f:43:20:56:e6:70:05:76:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:13:C5:FE:B4:B8:A4:72:BC:68:88:CD:61:3D:B9:A0:7B:FD:92
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:93:e5:59:2a:11:11:8d:4b:a9:24:6d:73:64:be:d1:0c:
69:71:6c:9f:43:ad:b5:3d:f2:95:1a:12:de:f9:96:f6:aa:c0:
52:70:9b:3d:bb:85:9c:4c:54:b0:89:c7:5a:75:9e:12:95:8f:
74:5d:e3:97:10:29:d7:0d:c2:8d:6f:3c:2d:e6:a5:79:e1:00:
70:fc:1b:de:67:1a:c6:01:63:fa:1e:c5:4d:df:93:ad:94:61:
d9:6c:eb:28:3b:75:3c:28:dc:21:0f:8c:f8:bf:53:02:8e:20:
4b:8f:01:b0:94:cc:61:0a:cf:46:6b:2e:fc:f2:61:64:88:30:
f5:25:dd:cf:8b:25:38:be:c9:13:7e:2d:c4:95:bc:94:33:3e:
27:39:09:43:f6:c5:06:13:f6:4f:d1:a5:90:44:ee:ff:c7:93:
64:58:6f:6d:ca:a3:49:cd:e2:2d:c7:87:c3:93:ac:90:62:48:
1f:22:46:c4:4a:60:17:8a:45:e4:f0:76:e6:d6:7f:aa:54:43:
92:1d:f7:21:3d:0a:ea:bb:92:ce:2f:a2:f1:02:ca:52:3c:a2:
1b:82:bc:cf:1f:40:78:7c:ec:d3:ce:3d:c3:71:5d:50:4e:1d:
6a:06:2c:7c:42:3c:70:b3:62:7b:a5:ba:8c:2d:ab:1b:4d:0b:
75:27:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:32 2026 by rpki-client