Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: ELuLvTqs+ki+TkXDJxvV6X2ys3j9MyD3Rai8hTPvZww=
Subject key identifier: C2:9F:E5:1F:3D:86:35:58:4D:18:50:69:7C:E1:D4:3B:C0:14:3C:3B
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 019EC11244FE7EC087E8CAB4DDA235203868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 92
Signing time: Sat 13 Jun 2026 13:01:00 +0000
Manifest this update: Sat 13 Jun 2026 13:01:00 +0000
Manifest next update: Sun 14 Jun 2026 13:01:00 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: cV7zE+ocFujwMhook3x4zVoTcOqYmjB/Vo63d3AvvOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:44:fe:7e:c0:87:e8:ca:b4:dd:a2:35:20:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Jun 13 13:01:00 2026 GMT
Not After : Jun 14 13:01:00 2026 GMT
Subject: CN=c29fe51f3d8635584d1850697ce1d43bc0143c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:2b:ff:a4:99:ee:34:c5:1a:72:73:62:57:
03:e9:9f:34:d7:83:a4:bd:c5:5c:9a:ea:2e:d9:10:
86:39:6b:df:91:a7:e0:5d:b7:0a:c3:ec:e1:55:08:
da:78:ab:8e:4a:01:21:d3:61:a2:ff:b0:fd:f7:0a:
0d:78:32:dd:d5:26:21:b1:ad:7a:e1:f0:6d:f0:85:
24:9e:23:e9:20:f1:95:78:88:cb:b8:01:c8:3f:d4:
8c:b2:bd:9b:2a:2d:70:84:96:9a:c0:2b:6f:ac:16:
7e:38:04:09:cf:e1:59:9f:72:00:f5:2a:ec:b5:69:
a5:0f:e2:d3:6a:53:19:d2:24:26:46:cd:db:e4:74:
ea:92:70:f5:1f:f9:4f:b5:78:e1:9a:13:86:05:82:
5b:a8:9b:73:84:2a:ee:5a:51:41:a6:85:f9:14:7e:
28:e9:9a:ec:73:31:8a:06:00:41:6d:11:d6:de:ce:
37:fd:48:f2:6e:69:77:46:13:5a:17:e9:f4:2a:e1:
d7:33:fa:1d:ca:99:3e:20:da:32:08:5b:18:b2:39:
c5:8b:1e:73:39:93:37:45:e4:0b:d8:ef:74:82:2e:
65:d5:87:27:ac:46:7d:cb:b1:bb:22:81:07:71:0c:
e4:52:5a:e1:38:c2:31:a7:43:58:dd:5b:4c:fe:0f:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:E5:1F:3D:86:35:58:4D:18:50:69:7C:E1:D4:3B:C0:14:3C:3B
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:de:04:83:5e:97:95:0b:d6:95:63:76:d3:b7:f9:e4:ca:7e:
b0:81:ce:57:21:a5:70:92:2b:c0:4a:bf:29:84:28:70:43:61:
21:83:3d:00:87:f4:ea:a8:ce:95:19:df:34:02:48:52:79:60:
c2:25:c0:fa:03:13:04:f1:4e:50:a5:d4:dc:f9:89:f2:8d:53:
60:7a:c2:2d:e2:de:75:7c:a3:6a:93:17:54:50:fc:48:dc:08:
7c:7a:ea:94:2e:81:5f:3c:30:8f:a4:d4:36:b4:c8:4a:3c:1d:
7a:e2:86:a9:dd:a4:2b:f4:74:a8:f9:04:08:28:07:7f:da:77:
ec:0e:ed:10:ac:5e:06:c7:a2:59:e1:e8:7f:01:c6:83:40:ba:
bb:4e:01:f5:29:d6:76:07:f9:33:04:5c:59:0e:30:de:00:bb:
15:df:57:cf:bc:79:d0:95:66:63:55:92:0a:30:8d:50:f4:75:
98:41:96:b8:78:0e:a0:8e:df:67:11:23:e3:42:f6:9b:8e:cd:
ab:60:da:8c:76:a8:43:d6:46:d0:1a:d0:c7:9f:46:a3:ce:fb:
11:9c:65:ad:c2:22:82:d1:ac:43:0c:72:84:91:5d:c5:d7:97:
cf:79:13:a2:74:df:ae:99:dc:91:a4:75:b6:01:ef:1d:8f:86:
8d:81:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:33 2026 by rpki-client