Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: Nspu2hxR1Nrm0nyNJ1JU4tbzEFjssi9+yybO2CyZsOc=
Subject key identifier: 74:6F:58:32:CD:B1:F7:BE:56:B0:21:0E:C6:26:B5:4B:83:5A:F2:3D
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 019CAA21D839C0BC3EDE7B78AA66B9C108DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0EE0
Signing time: Sun 01 Mar 2026 16:01:10 +0000
Manifest this update: Sun 01 Mar 2026 16:01:10 +0000
Manifest next update: Mon 02 Mar 2026 16:01:10 +0000
Files and hashes: 1: NouNULJL-7ncK7hFZABxn3dgX70.roa (hash: FNAw0p0hzFMLdRcqIw/EWrSDQ2SejuoSDS9nnFY1OZw=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: 9FPyPbiQn84lj1IF+7CQGqROxmxZ7qP3R0HJTikRfgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d8:39:c0:bc:3e:de:7b:78:aa:66:b9:c1:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Mar 1 16:01:10 2026 GMT
Not After : Mar 2 16:01:10 2026 GMT
Subject: CN=746f5832cdb1f7be56b0210ec626b54b835af23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:c1:71:f1:18:cd:ca:72:57:94:88:15:b2:
9d:7a:82:6b:af:ad:bd:93:63:d3:84:f9:f0:b4:7c:
c4:5e:44:4e:fe:e2:e3:59:22:d8:08:1d:b4:8c:a5:
0d:6c:b4:b0:9d:89:f7:1c:7a:69:3b:da:aa:0f:8d:
d4:36:af:06:dc:92:ba:6c:32:4a:3b:b0:2c:64:97:
82:84:a7:03:60:be:1f:88:9d:9b:65:bc:db:a1:62:
77:dd:18:cf:c7:16:ef:4d:e8:f9:b1:4c:af:26:c6:
e6:a7:a6:d0:7b:1f:06:f5:a4:83:60:23:31:cb:dc:
e6:95:51:92:d4:b3:23:be:60:7d:63:ce:f3:99:45:
26:f3:1a:b6:ff:8d:77:90:b5:88:f4:02:f4:08:50:
a5:45:3b:1e:9d:be:c6:81:03:d1:cb:96:0c:6f:45:
12:1e:e5:19:f8:da:40:82:ae:04:a0:c8:c8:2f:0b:
39:db:c4:c4:17:49:64:11:ed:99:76:8e:a5:86:56:
8f:7a:9c:20:94:0b:35:7b:ea:4b:bb:d8:1b:39:6c:
ae:c4:de:52:6e:7e:09:5b:ab:ba:35:03:fe:e3:cc:
a0:1a:0b:0d:d8:f6:0f:7a:95:04:5d:2d:40:c2:9b:
42:f6:70:11:b9:6d:b2:bc:b3:d0:11:97:51:c1:ed:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:58:32:CD:B1:F7:BE:56:B0:21:0E:C6:26:B5:4B:83:5A:F2:3D
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:17:c1:76:f3:51:e3:59:aa:dc:18:fa:82:ee:df:74:25:
94:77:2d:82:2b:ed:57:a2:92:d8:d7:35:9f:e2:ba:8f:01:55:
e0:dd:8a:87:ae:7b:b1:c7:68:00:bf:ab:f3:33:60:a0:21:59:
47:7e:ff:0d:e0:02:f6:1b:4d:e9:ef:cd:89:92:2d:ec:4a:80:
9e:64:39:7f:bb:0a:48:ad:da:fa:ad:c0:c8:97:af:c6:9b:4b:
ce:d4:ad:21:f3:36:44:47:aa:29:17:ab:5f:d3:f5:25:c4:14:
30:12:76:68:36:48:8b:5d:9e:93:78:de:44:c8:10:29:52:a0:
1b:0c:40:a2:3e:83:6c:bb:37:56:4a:c3:5e:37:15:ce:d4:ca:
88:26:96:57:cc:0d:8f:47:f9:a2:33:36:a4:4a:69:40:ed:9e:
43:ce:83:47:f7:ab:61:17:6c:5f:50:40:f0:f9:7f:27:bb:ea:
35:cb:97:41:19:d2:fb:b8:1b:f5:47:c4:65:be:92:ff:44:08:
8e:04:89:b9:c1:23:76:dc:a6:70:a1:5a:19:d3:91:2d:45:5a:
dd:de:e1:5e:0a:98:0f:c4:40:93:db:26:a2:8e:7a:7e:4f:81:
92:0d:aa:fa:14:28:4f:c9:28:5a:cf:47:ab:25:ea:ed:f2:5d:
fd:22:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:34 2026 by rpki-client