Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: yYtzyJYHoA1wcSR2J7O6y3a0eYt4O5lJxuRzLad+vbg=
Subject key identifier: 38:80:FB:CF:F4:14:F4:66:97:D7:E2:78:FE:84:7F:F2:A1:26:0C:A6
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 01A020562B60047DC8E83BCCA0E1ABF3D44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 18C1
Signing time: Thu 20 Aug 2026 18:01:53 +0000
Manifest this update: Thu 20 Aug 2026 18:01:53 +0000
Manifest next update: Fri 21 Aug 2026 18:01:53 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: XawYQLMqSkzuhw3KDp3BqthBBVWiaGxkKFiIXvLcMPA=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:2b:60:04:7d:c8:e8:3b:cc:a0:e1:ab:f3:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Aug 20 18:01:53 2026 GMT
Not After : Aug 21 18:01:53 2026 GMT
Subject: CN=3880fbcff414f46697d7e278fe847ff2a1260ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:8f:0d:ca:6c:1c:7f:97:56:83:c1:fe:55:
61:d9:57:06:dd:6a:e6:f9:ba:c4:cf:6d:ef:d9:96:
dc:a9:29:87:b3:c2:41:f6:b7:b6:5d:de:03:99:4a:
ed:08:b3:ce:68:e0:a8:bf:f6:ce:3d:db:0f:71:2b:
d5:29:9b:6b:85:8c:ac:da:a9:da:c1:b1:5e:ab:21:
13:7a:cf:a0:8e:b1:8f:15:c2:52:d0:ae:f8:90:e7:
49:74:d1:50:93:fe:17:60:5d:15:81:13:ff:65:4e:
45:01:ac:6d:4f:5b:19:a8:4b:9d:1c:bf:81:d6:31:
5d:b3:f3:96:0f:fc:47:07:22:b9:a9:60:f8:6f:5c:
04:8c:de:e0:97:74:3a:d1:73:4e:5a:7e:64:0f:eb:
9b:28:fb:f5:32:c9:fa:cc:18:20:86:a4:ba:0a:e3:
e0:98:3b:a2:2a:ee:af:3e:72:22:28:0d:63:92:c7:
01:2f:1b:e6:2b:06:b9:80:ef:ef:db:24:2d:ba:2b:
33:57:87:a5:8f:c7:f9:c3:b8:2f:d7:9d:20:ae:98:
0c:ca:8c:54:a5:bd:dc:fd:54:d2:20:b3:6c:ec:86:
00:2c:e6:18:53:90:9a:fb:50:17:f7:07:a3:f2:89:
d2:d4:a4:28:52:7f:d5:8b:6d:13:47:61:50:c8:db:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:FB:CF:F4:14:F4:66:97:D7:E2:78:FE:84:7F:F2:A1:26:0C:A6
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:70:33:f9:f2:37:66:70:32:33:f1:02:b0:be:68:9d:bb:
54:90:8f:dc:b0:d7:50:50:a9:2a:d4:e0:5f:c3:ba:8b:5d:5a:
23:b2:df:0f:09:2c:26:2b:c7:c0:ec:4b:20:f6:28:87:5b:c5:
23:2d:6f:19:0b:e3:6b:81:33:9b:fd:b7:de:9b:be:69:7a:e2:
25:5e:84:73:be:e6:a7:04:b7:a1:7c:0e:66:d5:1e:e8:b8:20:
87:d1:34:eb:8f:74:df:f9:a3:3d:f3:0a:e3:75:39:66:b3:05:
0e:34:eb:3f:fe:8d:4e:92:3d:2d:d6:d3:62:61:cd:2f:89:68:
ef:72:3a:bb:ac:61:b8:b8:b3:d8:04:c5:c7:6d:ce:fa:6a:63:
fd:05:d9:97:6e:d0:52:e2:fe:8d:3a:01:50:c6:cf:8e:3f:7b:
b5:2a:05:78:90:2e:fb:51:d1:80:35:4c:09:0d:66:ad:30:b9:
f7:63:45:8a:9f:ad:ff:45:41:1a:a5:88:93:35:7e:e8:48:b5:
58:d9:c9:47:10:89:a8:5a:f7:00:c8:3e:9e:b1:cb:09:f4:15:
d1:0c:5e:ef:43:d2:51:a0:ee:f9:51:3d:b8:b2:b6:71:ba:e6:
b1:36:b8:f8:a2:7a:bf:11:6b:69:22:0c:4c:d4:24:a5:ba:f7:
ea:34:75:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:28 2026 by rpki-client