Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: 8L0YZS9os0Rc5FNaM2lUHBENa394vwHvt1qwgTvY3qY=
Subject key identifier: E6:FC:6A:03:22:9B:8C:B0:E1:55:C2:53:24:07:1F:DC:5F:15:67:37
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019CA9461B932916CC3DD7EF7FCB898F1D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 114C
Signing time: Sun 01 Mar 2026 12:01:09 +0000
Manifest this update: Sun 01 Mar 2026 12:01:09 +0000
Manifest next update: Mon 02 Mar 2026 12:01:09 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: uCZwOOKS0MBGRu4V+uvoG7TaB9vx4eSTPQNDMARiNVY=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:1b:93:29:16:cc:3d:d7:ef:7f:cb:89:8f:1d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Mar 1 12:01:09 2026 GMT
Not After : Mar 2 12:01:09 2026 GMT
Subject: CN=e6fc6a03229b8cb0e155c25324071fdc5f156737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:bd:4f:97:c1:96:df:d4:40:4d:ac:a9:f2:
a0:6b:b9:07:0a:25:e6:1a:19:1a:fc:31:82:b8:76:
e2:c5:48:3a:dc:2e:cf:e6:35:d8:38:0f:ee:01:4d:
bc:31:0a:60:93:66:84:01:31:1b:0f:5b:af:87:e8:
3d:4a:57:28:4e:bf:8f:0c:93:63:05:11:1b:b2:24:
cf:79:d7:69:4c:3c:b9:93:c9:96:a1:51:f8:1e:96:
13:62:c0:ab:4f:28:21:01:44:a6:53:b6:82:5c:c8:
37:0f:a0:23:b1:62:ee:2d:5f:49:c8:7d:ee:00:e4:
7e:16:47:1e:d3:d6:ae:a2:98:c5:ab:ca:78:c8:1f:
ca:ac:f4:57:b9:17:3e:18:1b:c1:59:7b:93:b7:aa:
65:0d:cb:db:7e:e3:92:ff:33:93:5a:40:b6:79:33:
e4:3b:e7:15:3b:3e:b1:94:20:fc:40:57:09:44:b8:
c9:7b:e1:9d:8d:44:9f:7e:2d:70:1e:f6:94:da:87:
ad:92:c6:56:48:ba:b8:35:13:4d:2e:f1:cd:3e:d6:
14:00:0d:49:ff:91:c1:d8:00:6c:85:b1:ae:0e:fb:
c8:36:2a:68:6d:6d:f6:11:a5:07:14:84:6c:5e:fa:
17:e4:fc:3c:40:d9:15:d5:eb:33:21:62:3f:99:02:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FC:6A:03:22:9B:8C:B0:E1:55:C2:53:24:07:1F:DC:5F:15:67:37
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ab:0e:35:74:a1:23:4d:99:75:f4:f1:8d:4e:d7:fb:42:df:
60:3b:66:21:f8:b7:5f:b2:34:9b:fb:f8:7d:2a:72:6e:12:82:
6a:1f:1e:9a:e6:ac:0b:dc:aa:ca:09:64:b1:e4:01:1c:95:5b:
7f:58:f7:2b:30:20:f9:34:0d:8b:96:6e:b0:fb:6f:c8:a1:63:
b3:4f:9e:4b:5d:8c:b8:72:0a:ca:2b:24:2d:d2:1b:dd:7a:6f:
0a:34:7b:0a:f3:95:fa:42:c1:fb:e7:97:11:30:7a:b8:b3:e2:
50:93:77:34:9b:60:d1:3a:5a:4f:c2:49:fa:96:55:b0:0e:5a:
d6:77:31:bc:d4:99:b9:6c:af:c1:64:b6:c7:b5:ca:29:b3:d7:
d7:6a:26:e9:d3:09:c4:5e:0c:cb:c3:0c:3e:ac:23:09:a6:b4:
36:63:1d:d9:d1:2b:4c:cd:1e:82:35:92:c1:03:1d:99:8d:c8:
86:0b:3c:81:27:ad:93:01:a5:b3:cb:3a:46:21:8c:72:9c:10:
1d:2a:8b:45:a5:1e:f0:19:07:ab:29:dd:4b:66:5b:e3:25:70:
2d:ed:9f:d3:07:48:e6:11:30:21:80:d8:3b:e2:c6:b7:84:c0:
9b:47:84:43:6d:27:c8:cf:53:49:11:8e:d4:0f:71:a6:5b:86:
5a:e4:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:22 2026 by rpki-client