Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: IxyXUG0cfoGFjeGkAxb2yn4aNpa0nSlY3RCmeIfs8DE=
Subject key identifier: 3A:87:08:3B:30:91:74:34:AF:32:23:C8:9E:43:C4:5E:07:54:D8:23
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019D378989226E5CA6884CC8F7DCE5A4C17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:53 +0000
Manifest this update: Sun 29 Mar 2026 03:00:53 +0000
Manifest next update: Mon 30 Mar 2026 03:00:53 +0000
Files and hashes: 1: 5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa (hash: 3BzgmGQESa9eTcM0ODtiMc7GJiSKtttHkfqVjBBtvdQ=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: 1ocfYgZK9/LlTI4SEIkhj4GV2efj9faj54gN54coK9I=)
3: wJ7_Xvzpdt1CtacBkZyFEU6Rq8w.roa (hash: mYKkkRY5nHeUPjxezloUDprRN7Wi7BEuCqiUJh2cLUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:89:22:6e:5c:a6:88:4c:c8:f7:dc:e5:a4:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Mar 29 03:00:53 2026 GMT
Not After : Mar 30 03:00:53 2026 GMT
Subject: CN=3a87083b30917434af3223c89e43c45e0754d823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:df:bb:42:dc:e2:8f:0a:2a:08:c0:da:08:
77:d0:91:3a:01:69:7a:b2:b5:41:42:62:66:41:1f:
29:6d:9b:75:0c:94:c1:72:48:22:50:5e:14:51:b0:
5b:92:94:f4:a5:a1:76:8c:30:27:7c:e3:0c:c3:2b:
77:9b:7c:c4:ce:fa:49:1d:ea:2a:76:37:b6:a3:eb:
c1:e3:9f:2b:2c:24:be:cd:13:aa:bf:b0:ba:4d:91:
0b:b9:6a:bb:e0:71:19:8e:9b:5e:9a:42:17:16:d5:
2d:ea:5f:45:4c:50:86:16:21:94:52:c4:69:30:34:
4c:9d:c0:4a:54:26:a2:07:6a:3b:62:50:4d:94:1b:
0c:fd:40:b4:fa:cd:d1:cb:f7:5d:b8:d8:24:5f:dc:
83:e9:88:c0:ef:62:8d:f6:49:fd:c8:b5:a3:d3:a8:
23:73:f9:fd:4a:a6:70:c9:57:58:90:c9:08:51:de:
f0:5e:22:7f:46:42:15:57:60:16:27:b8:d4:df:55:
06:fa:23:40:b5:82:11:5d:24:29:c3:a2:53:dc:65:
1f:ff:5a:bb:b4:22:a7:c9:bc:7c:b7:5c:49:ed:71:
24:40:82:ea:49:80:d5:06:7d:39:bf:18:9c:34:74:
61:2c:47:56:74:1d:1c:0b:73:48:6e:28:ec:59:2a:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:08:3B:30:91:74:34:AF:32:23:C8:9E:43:C4:5E:07:54:D8:23
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:30:c5:1a:e6:4a:14:01:ff:ad:71:05:8e:e5:2b:74:5c:c6:
20:4c:ac:60:c4:70:90:f2:6a:07:f8:44:dc:42:84:d2:f0:e8:
0b:7e:0c:2f:6d:62:74:09:b0:0d:b8:68:a6:47:b3:45:26:4e:
e7:d9:36:02:f5:94:c1:fc:34:11:7d:4f:69:2d:9f:e9:f6:27:
27:23:41:16:ad:df:c2:e1:ac:0c:6f:1d:60:89:2a:1a:ba:77:
6b:f5:9e:24:1a:ee:a7:12:9c:18:dd:73:34:f3:b7:74:ed:97:
90:43:3b:22:12:89:6a:7f:56:f8:f6:0e:fb:c3:91:27:d3:d0:
f7:db:0a:1e:0d:f1:bb:5a:85:2a:f6:01:54:c5:22:20:73:86:
57:6c:d0:7c:b2:92:47:43:8a:48:c7:e8:48:6a:92:2a:a6:0d:
18:9f:11:cd:1a:f9:ed:eb:ed:2d:1e:7b:c3:27:2d:60:00:2d:
be:46:ed:4c:7d:fc:c8:b5:cf:52:55:3a:0e:07:ed:86:1d:ff:
82:bd:ff:05:41:13:36:e0:b9:ae:a7:54:c7:84:b5:dc:cc:94:
57:60:44:77:c5:86:9e:95:a6:64:7e:16:b9:55:da:70:10:50:
1a:f5:7e:18:14:f3:f2:73:9c:cf:dc:d6:39:6a:f3:7a:f6:64:
52:61:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:04 2026 by rpki-client