Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
File: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft (raw, json)
Hash identifier: 3kEQMWx/Dn1JDnjApVoD675MI80u0ExS4D5+NECFrwI=
Subject key identifier: 1C:D4:3E:42:7F:AE:46:94:87:8B:F9:B0:72:E1:0D:6B:CD:CD:A2:A1
Authority key identifier: B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
Certificate issuer: /CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Certificate serial: 019CADC75D4BE6B874DA4267A18662489CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
Manifest number: 11E8
Signing time: Mon 02 Mar 2026 09:00:49 +0000
Manifest this update: Mon 02 Mar 2026 09:00:49 +0000
Manifest next update: Tue 03 Mar 2026 09:00:49 +0000
Files and hashes: 1: HeIDI7yWmckcG1zV0KhzrSK8Vmc.roa (hash: GFNEMZ7WA1uMS1R9uNab5giImHYRdz7pCsvuE9ixotI=)
2: uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl (hash: STLpkAjPi269auSVVjUhuYlJp9gu9tuz1p7xPm2bpVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:5d:4b:e6:b8:74:da:42:67:a1:86:62:48:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b862b85a1d2c51d99069ca3a5aff52ecc6a9aab4
Validity
Not Before: Mar 2 09:00:49 2026 GMT
Not After : Mar 3 09:00:49 2026 GMT
Subject: CN=1cd43e427fae4694878bf9b072e10d6bcdcda2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:70:68:60:1f:36:28:4e:e3:88:70:01:1b:
d9:34:f2:15:c6:12:c3:f8:fa:84:16:58:1f:77:83:
de:27:c5:a8:8b:23:9f:73:cd:c4:3e:04:a3:3c:d8:
79:23:1d:a5:69:e4:a8:fb:df:61:8e:2b:27:4c:1d:
7f:63:61:3b:c0:b0:a3:5d:22:0b:da:2b:13:44:11:
54:47:87:f0:1f:78:a1:57:0a:eb:08:67:cf:56:1c:
e3:e5:b7:81:ad:72:b1:3d:b1:2f:c8:55:15:62:9f:
94:48:22:a2:1a:b0:9d:9e:e5:98:f7:ae:e3:ba:b5:
cc:d1:51:00:71:52:5b:c7:f3:b9:1b:0f:72:41:e3:
fb:9e:1c:ba:29:fc:20:b9:40:71:53:e1:f7:3d:0d:
eb:20:8b:3d:20:55:bc:e0:47:8e:54:69:44:d3:d8:
d5:51:b9:ec:3f:a7:15:ab:f2:63:14:4a:e4:ba:3b:
92:a4:be:33:d4:e0:c1:70:a5:6f:17:8d:b2:e0:1f:
03:0a:10:93:0d:2e:54:bd:9c:69:26:7f:1a:a8:8b:
d6:f0:4a:05:c1:20:23:9a:e8:02:09:67:47:d5:77:
17:01:52:74:ad:56:3f:4b:b2:25:5a:29:e3:a0:aa:
1a:b0:cc:dc:a1:77:51:a1:18:89:cd:8a:30:2e:8c:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D4:3E:42:7F:AE:46:94:87:8B:F9:B0:72:E1:0D:6B:CD:CD:A2:A1
X509v3 Authority Key Identifier:
keyid:B8:62:B8:5A:1D:2C:51:D9:90:69:CA:3A:5A:FF:52:EC:C6:A9:AA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb220f-1a3a-4cba-82cf-278fd475f3fb/1/uGK4Wh0sUdmQaco6Wv9S7MapqrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fc:e1:8a:da:85:32:e2:18:9a:ec:bb:72:ec:f4:79:08:53:
44:68:3c:b3:ba:49:9c:df:12:f3:56:8b:e6:72:33:ae:2d:7f:
ad:ef:47:59:8f:3b:58:30:36:9f:f7:da:32:0c:1d:91:a8:df:
b0:c4:c4:68:8f:af:cf:1a:a3:89:ce:e0:2e:cb:ab:c8:dd:a8:
74:dd:5a:93:bd:e7:34:28:af:b5:4e:b9:0d:e8:bd:d3:bc:66:
3a:b7:cc:9a:8e:91:19:1e:e1:b2:6d:61:ea:9f:a8:e3:21:8f:
2e:d5:29:42:5c:84:5a:c3:ac:e9:32:4d:d8:22:33:f6:d5:02:
d9:29:c4:42:a6:db:69:78:ba:08:5a:57:d5:77:13:b9:1c:66:
ea:b9:33:81:78:b1:34:e1:b8:8a:ca:4c:66:5e:57:b4:09:13:
7e:d8:3f:f6:9a:36:53:9a:bd:ce:0f:79:e9:b0:f0:8e:13:f7:
53:7c:3c:a5:33:77:d1:28:02:bc:fa:2e:90:fa:5e:69:a1:86:
39:b6:a8:52:8f:37:8a:84:d8:69:a4:50:b9:6d:cc:15:dc:49:
52:66:63:97:5f:8c:30:0c:7f:4a:b3:9b:88:a9:9f:07:d8:84:
83:ab:55:01:00:99:1a:31:90:78:ef:b4:d6:81:1e:4f:ae:3d:
e1:06:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:30 2026 by rpki-client