Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: oFETC1tzV/g/dFuXiMZvjdRtfRrYok2ZXlT1gZwWurw=
Subject key identifier: DB:7B:27:BF:A0:B4:36:CA:7C:DB:1E:E9:8D:DF:A9:B4:FF:9F:51:97
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019CAD903C1C3B321D91825EF31265BA3A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 185B
Signing time: Mon 02 Mar 2026 08:00:36 +0000
Manifest this update: Mon 02 Mar 2026 08:00:36 +0000
Manifest next update: Tue 03 Mar 2026 08:00:36 +0000
Files and hashes: 1: 14cEr7aw02iRpmKpyvIitczolkE.roa (hash: tnVtFBhFwWzq6hl069GjNphOkbpm/TSjb8WTv76Dy+o=)
2: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (hash: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U=)
3: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: PDJjB/tGPL1mGRs6PCP45XLGtusNESrPDELwCedg+vI=)
4: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (hash: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:3c:1c:3b:32:1d:91:82:5e:f3:12:65:ba:3a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Mar 2 08:00:36 2026 GMT
Not After : Mar 3 08:00:36 2026 GMT
Subject: CN=db7b27bfa0b436ca7cdb1ee98ddfa9b4ff9f5197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:29:0b:ed:6c:38:11:92:7f:c5:aa:e3:62:
e5:13:75:00:67:f0:58:3d:0e:44:dd:52:16:52:e7:
fe:2a:39:12:65:e3:75:02:c1:27:dc:cb:eb:84:a4:
94:37:1d:df:77:67:6d:f7:4e:73:a5:6a:bc:d9:97:
4c:9c:03:8f:b6:c5:b6:d9:ce:e4:f6:a3:72:bc:7b:
6a:87:54:d4:62:30:3e:fd:6d:8c:0c:04:36:6c:f2:
83:43:e4:5c:80:57:2a:82:9e:96:0c:3c:55:1a:2b:
4f:12:c8:81:a5:29:89:5c:e1:c8:6f:64:e4:08:d1:
22:a1:a7:93:44:0d:e5:56:f1:35:0e:bd:ef:fb:07:
ce:a6:67:77:61:84:9c:e9:17:67:8f:c0:c8:0a:3b:
d8:61:a6:bd:0b:b5:ce:11:37:ba:79:72:4d:f3:ae:
e4:a5:00:0d:82:f3:ae:e4:39:f9:7d:73:5f:e6:9d:
1e:63:ab:2f:3a:6a:43:19:e8:11:93:0a:29:58:70:
60:c9:37:9e:5b:6f:03:c2:f0:6c:dc:74:4e:dc:47:
15:da:52:8b:4e:5a:15:b9:f8:52:d2:9d:11:ee:0b:
47:f4:e7:2c:e9:13:4b:c3:bf:4e:d8:63:c7:50:1c:
77:ab:9f:61:ce:40:ee:55:0f:53:50:d1:5f:dc:f0:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:27:BF:A0:B4:36:CA:7C:DB:1E:E9:8D:DF:A9:B4:FF:9F:51:97
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ad:41:08:16:6b:f7:76:3e:bb:50:b3:64:d5:9d:9f:ba:3c:
48:bb:03:97:42:8a:de:60:39:cd:e6:fa:c2:2b:02:ce:17:03:
a8:50:0c:27:12:d9:58:74:68:88:81:6f:b1:5f:c7:ed:bc:40:
40:b8:3f:90:f7:31:a7:15:1c:a6:0c:a7:ca:b4:1d:b9:f8:fb:
b6:e3:73:db:ee:84:a6:23:3f:78:20:b4:fe:8f:bd:a0:97:86:
af:31:d7:44:96:9c:1b:2f:55:6e:0e:9d:0b:4c:33:0e:e2:d8:
3b:41:2e:58:a7:a6:92:61:7b:07:10:b4:54:e0:70:ef:ba:01:
7a:50:a1:99:cc:1c:10:6b:93:9e:d7:19:27:87:6c:42:24:02:
db:c8:9e:f7:9e:44:8d:f8:18:cf:f0:66:90:de:cb:32:f9:76:
6c:59:c6:c0:4b:51:2c:4d:12:f8:29:fd:77:1f:a2:83:66:6c:
f8:7c:87:70:eb:ee:97:b0:eb:30:ef:49:8d:c0:a4:f2:86:3b:
11:26:38:41:3c:fe:20:92:a5:63:e8:82:46:43:04:34:ab:66:
fa:e6:40:a1:55:87:5f:a4:34:2a:73:43:1d:9f:27:df:2d:f4:
a6:e8:21:95:78:99:65:3c:84:1a:91:92:32:a5:3f:a1:68:65:
8e:c8:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:16:25 2026 by rpki-client