Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: wvP6/r60FWAVkTTVoPhrXzQ0XLbk8I5cwyNM2/VYS6k=
Subject key identifier: 9F:4E:C3:E0:58:7D:5D:BB:75:3F:4E:38:74:5D:71:F3:98:45:AB:FC
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019CAD596848B2853A9C103F84F3DE011AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:00:43 +0000
Manifest this update: Mon 02 Mar 2026 07:00:43 +0000
Manifest next update: Tue 03 Mar 2026 07:00:43 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: cjABHWpoqI3rDWJ5gRCVHBDSYAlRGER2YrzmztyurLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:68:48:b2:85:3a:9c:10:3f:84:f3:de:01:1a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Mar 2 07:00:43 2026 GMT
Not After : Mar 3 07:00:43 2026 GMT
Subject: CN=9f4ec3e0587d5dbb753f4e38745d71f39845abfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:39:1b:e0:0f:71:67:ce:c3:69:f4:d7:3b:
a1:68:f4:87:d8:b1:cb:f6:9a:b5:9c:67:a7:8c:2e:
75:37:25:84:eb:07:0e:65:0f:1c:74:2d:91:ac:5e:
3d:a5:c9:ef:ba:d1:96:47:48:c1:bf:2a:fc:85:db:
a8:2b:46:6c:8c:d1:45:4d:1c:2c:06:23:c5:9a:0f:
35:61:1b:af:32:3c:cb:49:f6:d5:ac:24:6b:88:3a:
55:6a:79:b3:9a:7f:01:7e:87:14:db:5d:5c:0c:2f:
e5:d5:88:7f:70:38:01:5d:b5:aa:07:e8:a8:20:3b:
63:ee:db:87:86:65:3f:0e:1f:0c:3a:7e:bc:70:df:
08:ef:5d:51:86:f3:35:eb:74:65:61:ad:1b:48:4c:
04:3e:e1:61:3e:60:6a:fe:16:b7:9c:d0:cd:81:4d:
af:7a:e5:3f:31:3d:97:33:33:2c:f3:b3:e4:56:78:
62:36:38:10:66:64:94:34:03:a8:db:42:c2:40:25:
c6:97:35:fd:fd:f7:0a:bf:73:f8:d7:fa:ca:a0:39:
e2:15:c2:8a:9d:0f:f9:01:1d:02:b9:f9:ee:e2:bb:
48:76:9e:25:c8:d9:c1:7d:9c:00:00:ed:1d:a8:5e:
ee:da:c9:af:32:16:d6:0c:89:ae:03:29:d2:70:fc:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:C3:E0:58:7D:5D:BB:75:3F:4E:38:74:5D:71:F3:98:45:AB:FC
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:51:49:4a:da:1b:51:35:e3:15:41:4b:ec:76:4e:26:77:8c:
f0:6e:4a:23:d2:c1:c5:8c:f9:a9:b3:ee:4c:90:51:bd:55:7d:
16:33:b7:32:a9:99:91:a9:e2:eb:c7:7f:a0:45:5f:07:81:18:
34:c2:8c:68:e8:1b:c6:89:ab:f8:11:4a:65:f3:ec:8e:55:27:
43:48:92:dd:d7:6f:aa:6e:0a:2b:99:34:6f:55:90:76:67:50:
ad:fe:64:e2:fa:1a:a3:df:8f:f8:6f:cf:96:f3:d8:fc:0a:a1:
d8:97:b3:c6:e0:37:3c:88:e8:4d:9b:8f:70:25:2b:91:35:72:
ec:07:28:69:a6:6b:66:ed:ab:aa:6f:c6:02:ac:71:da:ca:1c:
8d:22:53:d1:3f:ef:e8:65:b7:c4:f8:fd:70:b1:c9:74:13:de:
2d:1e:ca:8f:13:8f:b3:02:59:15:35:f2:0a:a8:0b:26:07:ba:
71:36:04:30:9a:ef:1a:8b:d6:b1:f5:b9:b0:80:d2:5c:f1:10:
21:05:b4:96:ba:d8:a1:94:b0:d7:c4:c2:e1:a3:05:ad:1b:07:
23:23:43:ca:a1:c3:4d:2f:90:a6:61:a7:33:9b:9f:4e:63:da:
2a:ea:ce:ba:6e:ee:09:20:9c:4d:26:9d:ef:13:76:ca:a0:c0:
c4:64:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:59 2026 by rpki-client