Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: XCBJKh8pFbf3E0WG8+tlUfQ1NV1Nrhc+3hFB1vAfN24=
Subject key identifier: DF:C0:C5:78:01:AB:B0:21:CD:CA:E7:4E:A4:E7:39:81:D0:D1:38:FC
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 019EC2C957EFAEDF726E2FD2DFF19DC7F6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 12FC
Signing time: Sat 13 Jun 2026 21:00:35 +0000
Manifest this update: Sat 13 Jun 2026 21:00:35 +0000
Manifest next update: Sun 14 Jun 2026 21:00:35 +0000
Files and hashes: 1: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (hash: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: RIRuToghE0dXPSl3cbAAjTpj14O5dxDd8t3wq3URECw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:57:ef:ae:df:72:6e:2f:d2:df:f1:9d:c7:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Jun 13 21:00:35 2026 GMT
Not After : Jun 14 21:00:35 2026 GMT
Subject: CN=dfc0c57801abb021cdcae74ea4e73981d0d138fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:c0:86:a1:4f:c2:f2:7e:45:dc:8a:63:cd:
1b:bd:1b:7e:5f:d4:e0:9b:0f:96:43:fe:fb:d8:5b:
5f:af:8e:5c:c5:82:ee:02:10:24:95:03:04:d9:2c:
2b:5f:6e:3a:09:57:c0:92:cf:56:7e:43:82:23:59:
0b:db:0b:eb:86:59:6f:60:b1:4c:46:c4:3c:a2:c5:
30:bb:41:4b:14:b1:78:6c:55:f9:f4:1a:ac:93:e8:
7b:1e:9d:d9:67:b4:75:d6:00:4b:4b:43:f8:88:68:
d1:a9:ee:9b:7b:b0:90:cf:f8:9a:fa:8b:4c:bd:5d:
5e:c1:b0:37:bb:ce:7a:2e:cd:65:75:07:e5:e2:f4:
4f:6f:29:c5:93:7e:21:1b:32:96:ca:16:53:30:b5:
aa:64:bb:a6:66:23:e7:dc:25:b3:6c:64:3a:92:04:
45:e4:8a:01:93:67:48:65:b5:35:f7:95:dc:e0:8a:
75:b3:05:6d:bd:5c:b6:47:6f:e9:b2:39:52:f2:c8:
e1:84:8c:a3:d9:3c:ce:84:42:10:96:b9:d1:18:ca:
ce:38:ec:7a:92:33:d5:05:d1:37:e6:8e:3c:65:67:
27:29:46:01:77:70:73:8d:3d:cc:eb:dc:fe:99:47:
33:a0:d6:69:a9:15:b7:a3:fb:b6:8b:24:65:91:8e:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C0:C5:78:01:AB:B0:21:CD:CA:E7:4E:A4:E7:39:81:D0:D1:38:FC
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:88:3d:18:3b:39:4b:aa:c6:ca:66:13:ad:d6:1d:9d:b3:bd:
40:e9:dc:9c:d2:47:63:49:0b:74:de:a7:84:79:19:3e:63:db:
aa:21:b6:db:da:7c:94:d5:87:46:e2:d4:4c:71:5b:22:7a:9e:
0a:f8:e7:82:86:7c:c7:df:7a:1c:14:6b:2f:f2:a4:c7:4f:70:
16:2c:80:22:1d:65:8e:b9:a6:6e:21:b8:8a:b6:d2:4e:3e:31:
c8:86:ef:58:e5:7e:51:7f:57:e2:54:a6:cc:07:b6:b6:23:44:
5d:6d:45:2f:e7:8d:c2:20:96:bc:c8:31:be:6b:ac:b2:4b:5a:
b7:53:71:45:e3:e4:7a:cd:a0:a9:76:ab:85:43:f0:4d:22:3e:
c8:e1:63:e1:39:00:7e:8d:a2:7a:c5:30:99:a6:2f:c8:26:0c:
bc:8e:be:0e:43:67:8f:41:13:80:0f:44:77:b2:ba:f7:b3:22:
06:a9:1a:7c:8b:6d:db:31:e0:65:48:ae:4c:43:bb:0e:4e:2a:
25:58:d4:b0:b5:51:5e:70:69:8d:43:a3:1b:ae:85:06:f3:89:
cd:dc:c4:df:08:20:38:dc:c2:70:3d:d6:e1:f2:dc:c2:fb:06:
a3:95:1a:3b:f5:21:a9:5d:ac:52:7d:d7:9f:c4:d6:32:de:8e:
b6:d2:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:21 2026 by rpki-client