Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: jdq+G2/ni0UR+S/mV5iW3NyBFffqciHb+eeIefrh9to=
Subject key identifier: 38:3E:77:B1:ED:36:57:28:E2:EC:5F:D7:F6:F6:D5:04:12:E9:02:81
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019CAC47401B3D6966347C1A952236F07D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 02:01:16 +0000
Manifest this update: Mon 02 Mar 2026 02:01:16 +0000
Manifest next update: Tue 03 Mar 2026 02:01:16 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: Nex61Q7hk7aW4Xz1tCu1UNzx4aj/4Swx3PMjzxjIn5M=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:40:1b:3d:69:66:34:7c:1a:95:22:36:f0:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Mar 2 02:01:16 2026 GMT
Not After : Mar 3 02:01:16 2026 GMT
Subject: CN=383e77b1ed365728e2ec5fd7f6f6d50412e90281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:bb:d1:bd:6e:90:1c:45:b8:cc:fb:32:9c:
10:c7:9c:b2:43:61:4f:40:1b:04:a1:d2:cd:f0:82:
1e:9f:a0:b9:f2:5f:6f:bb:53:26:02:e5:fc:5d:bb:
03:0d:50:38:bc:2f:d3:9e:4c:46:f8:0f:c6:fd:a1:
79:bd:8e:d2:ef:d6:ff:58:9f:c2:47:94:e2:c8:97:
78:38:05:39:a0:9c:52:4d:3f:35:36:d2:04:07:0d:
19:f3:bb:5b:0f:78:0a:0b:ef:c5:54:5f:2f:fb:07:
be:2b:bc:b5:84:86:69:41:f1:db:41:38:72:d9:4f:
66:e0:05:b6:35:70:22:b9:62:e9:bc:d7:60:1b:af:
ea:ad:8a:2b:b9:9a:ae:2a:e7:94:04:97:c9:96:dd:
59:f7:c6:7d:9c:33:4a:00:91:30:4f:a2:a3:28:66:
ae:93:87:d4:96:05:cb:22:0b:38:a1:dc:15:fd:5d:
02:80:ef:cb:fa:87:62:bf:1a:41:87:32:21:b0:bb:
de:93:60:1a:42:b5:08:7d:c2:58:90:3a:9b:50:65:
04:9f:43:b5:a6:af:8a:c6:f1:95:79:31:9f:c9:c3:
e8:27:90:44:42:16:0b:1b:37:ec:25:3e:3d:f6:cb:
e1:41:46:06:d7:18:7a:6f:ed:01:93:42:b2:9d:ac:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3E:77:B1:ED:36:57:28:E2:EC:5F:D7:F6:F6:D5:04:12:E9:02:81
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ec:65:16:fd:56:8e:92:9c:ab:95:43:91:da:c9:5a:fc:a5:
6e:a2:15:52:bf:fc:3a:53:5c:a6:fe:28:17:1c:1e:c7:ae:85:
8f:74:52:d3:60:32:89:26:9a:62:22:7a:e4:33:04:ef:02:98:
f8:bc:11:2e:a0:d7:90:6a:60:52:17:cb:5c:c4:72:20:a3:69:
aa:d2:d0:7e:89:ba:86:6e:aa:82:18:c7:ff:39:07:51:ad:35:
67:95:4a:8e:13:48:b3:cb:35:ec:83:cc:5f:0d:b2:2b:cb:ac:
2d:da:2f:41:94:4e:36:a8:cb:60:4d:01:77:c6:19:5d:bf:71:
3c:5a:f3:20:d8:81:46:c9:15:69:55:ed:57:11:ed:a0:42:2b:
dc:af:7a:23:ec:ff:ff:6b:9f:f4:e6:d8:3d:49:d1:7c:48:6f:
fe:89:50:6e:a6:fa:32:14:ba:a4:d3:e2:be:1a:af:14:ec:ce:
cc:39:df:c2:30:eb:d0:a2:06:61:41:84:29:42:95:23:49:be:
cc:fd:1f:d0:b3:ac:db:22:81:94:b4:d4:2f:b7:e9:1f:f2:4c:
76:95:b9:2b:52:be:20:51:b5:84:45:8b:a8:45:69:79:eb:03:
48:84:45:02:ca:b8:5a:c1:ff:94:a9:f7:6e:d4:a1:ac:3d:a6:
b7:54:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:03 2026 by rpki-client