Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: rYG5lByr2KtbaogXJcVEX/6iUyR1N1//zDQvEkebSxo=
Subject key identifier: 5B:04:5E:15:13:1D:4B:37:CA:BE:5F:42:24:79:FE:D6:4E:7A:08:00
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 019CAD22C8FA58F925C0BD4E428672DD4D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:01:03 +0000
Manifest this update: Mon 02 Mar 2026 06:01:03 +0000
Manifest next update: Tue 03 Mar 2026 06:01:03 +0000
Files and hashes: 1: 8g4DJqA7EmfqO5FU27IJgYiwBPQ.roa (hash: Z7aisMaBlEpC+Box7db/aG2eyltwAxWv0Dd2ZI7sSqU=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: wGTcqSzb3ZOgf/nzEQ8KeElYDGyDYk8eyXkO9dW52uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c8:fa:58:f9:25:c0:bd:4e:42:86:72:dd:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Mar 2 06:01:03 2026 GMT
Not After : Mar 3 06:01:03 2026 GMT
Subject: CN=5b045e15131d4b37cabe5f422479fed64e7a0800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:2c:e2:c6:50:8b:ce:80:17:29:f9:d0:78:
34:ad:bf:fd:e4:52:4f:07:e3:5b:64:7b:c3:b1:46:
d4:3c:ed:ec:e3:37:30:a8:4e:37:e5:b3:c0:fd:a0:
4a:cf:bb:2c:76:6a:1a:38:1e:5c:f8:c4:e0:95:9d:
9e:d9:12:df:a7:2b:d5:b1:19:58:fd:12:c4:bd:13:
e3:41:35:f3:07:07:17:80:43:fe:d9:37:ff:ec:8c:
6f:7f:6b:68:8a:9f:7d:b7:ae:76:69:0a:8c:38:79:
fe:9d:f1:1d:8a:48:4e:f7:8b:e9:2d:96:42:6c:27:
03:f0:84:da:ad:95:64:92:fa:8e:2f:3f:4a:89:10:
cc:22:05:39:b4:f3:c1:fe:63:84:bc:e6:75:53:ed:
8e:23:4c:f3:73:6f:46:e6:db:8a:b1:af:04:e2:b6:
e0:c7:a6:78:39:8e:28:0c:fb:5b:10:4b:fb:23:98:
48:d8:3d:da:de:b1:e4:69:7a:48:59:29:47:42:82:
e1:0c:30:92:90:ea:ef:5f:36:e5:f7:58:0a:18:ae:
6c:30:55:b9:ad:6d:c2:b1:69:c4:e1:68:9c:62:4e:
3c:6a:24:0a:5f:e4:b3:93:60:60:04:0a:7c:a4:27:
90:84:fb:01:e8:d8:98:37:0e:4f:e2:fb:d6:94:37:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:5E:15:13:1D:4B:37:CA:BE:5F:42:24:79:FE:D6:4E:7A:08:00
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ea:9f:16:d4:9c:98:c4:e9:05:1e:bd:76:22:60:5e:29:fd:
93:68:fd:aa:54:80:8f:ff:cb:0f:f5:aa:f5:05:8e:4c:30:93:
c8:cb:18:34:ec:e6:fb:65:b1:fa:94:e2:c7:62:c4:2b:29:b3:
8f:49:18:56:92:e4:cb:ee:0b:7a:10:9a:dd:7b:67:bb:3f:53:
28:b5:17:09:6c:de:88:c8:9d:92:24:13:d9:c7:c5:da:10:dc:
9c:f7:67:80:dc:e3:fd:60:5f:ea:e9:a8:f9:54:30:5d:0f:ab:
1f:2d:45:25:ae:90:c5:3c:6c:7c:8c:05:11:8d:15:a2:10:e0:
a7:89:3b:31:4d:d1:53:68:66:2d:5e:95:66:98:1e:6e:b9:5f:
1d:b7:f7:8d:99:62:9a:e9:fd:bb:f4:86:a7:63:36:67:26:b6:
88:e3:04:e2:35:72:d7:12:8c:56:4f:20:0a:9c:76:b6:02:b4:
16:74:b8:df:01:e3:12:53:bf:0b:f3:3b:00:70:c6:05:74:83:
9c:d7:39:41:a7:33:b9:f6:55:0e:8b:c8:02:5b:5b:87:e1:b4:
07:db:cc:18:9e:b2:96:e4:53:6d:a3:31:51:2e:b6:f4:5b:9a:
75:12:a8:f3:50:40:fb:8c:b6:eb:9b:14:49:d2:63:51:60:c0:
f3:94:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:28 2026 by rpki-client