Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: 4PrTmt8UpA3TFNfTvErwTSCBZ34z0h30z9StW30jsJQ=
Subject key identifier: F7:DD:B8:FD:50:82:77:F3:EC:AA:FD:8B:16:77:9A:9A:F4:60:56:96
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019CAB345A250C55BE25FA0C6677076424CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (hash: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE=)
2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: rhpkgGAV6yYbEsJ3nkiDDPmTz+C3g27pH976ns9quyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5a:25:0c:55:be:25:fa:0c:66:77:07:64:24:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=f7ddb8fd508277f3ecaafd8b16779a9af4605696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:d9:85:dd:cc:29:da:31:3e:0f:fc:a9:55:
14:2c:7d:49:09:95:50:0e:3e:75:02:1c:25:6d:2d:
b5:b5:fd:58:8f:33:93:4c:d1:86:1e:13:83:24:68:
c7:7c:ce:02:c5:0a:64:bd:7e:73:65:72:2d:1a:c3:
cf:2a:ae:c3:bf:8c:3d:7c:6f:dc:7e:ee:93:ca:94:
73:eb:06:25:88:84:1a:c9:b4:01:84:76:71:c7:66:
60:a5:8c:f0:d5:01:84:72:92:d1:29:5e:1b:38:bd:
02:7f:30:a3:46:36:82:9a:1f:cb:e4:26:d2:04:b6:
b1:dd:a6:85:17:36:3b:cb:b8:cf:d4:6b:b3:56:07:
db:3a:27:61:aa:34:00:bd:14:61:72:7b:8b:cf:3a:
21:8c:3c:c5:e9:bf:b4:f7:30:bf:85:87:8d:c6:1d:
c9:3d:68:5e:aa:64:61:a8:47:0d:65:f7:88:44:4f:
c8:11:05:63:7c:d8:31:2a:27:f0:88:65:da:5f:01:
2d:ca:25:24:42:a2:81:d8:53:13:cd:b7:84:d3:d2:
7d:d5:76:20:b1:f1:40:f7:70:6d:04:da:40:ba:83:
b6:cf:b1:62:f6:fc:24:29:f6:91:59:1c:40:e7:79:
a5:de:bd:5d:ff:d0:3c:af:20:8b:dc:6a:65:b2:de:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:B8:FD:50:82:77:F3:EC:AA:FD:8B:16:77:9A:9A:F4:60:56:96
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3c:b4:75:30:c1:9d:55:50:8a:88:18:90:be:ff:43:ec:fd:
b0:c2:b9:52:84:30:9d:85:26:b6:a1:9b:51:07:b4:c6:f2:21:
0a:36:cb:27:5d:5b:ed:1d:9f:11:c4:b7:e3:e0:ab:d4:52:8a:
74:58:a0:89:a7:5c:96:73:99:cb:5a:c4:f5:2f:b0:e2:6f:58:
2b:02:21:fb:ad:e9:d5:94:4f:0c:a6:5b:24:cf:96:67:af:22:
7f:06:49:43:3a:69:29:b3:82:aa:5d:0b:63:f9:7c:6f:14:71:
0b:3e:63:30:6b:fd:e9:96:ce:9f:84:ef:da:d1:d6:80:56:6b:
d5:f0:d9:d4:9d:9a:3f:47:47:01:57:96:af:bb:ad:ca:11:a5:
75:2b:33:83:9b:b9:78:c8:67:ae:5a:ae:4e:14:6e:a7:5d:30:
4b:b5:fb:7a:8c:18:69:54:45:b4:92:57:16:0d:ab:06:6f:81:
c4:73:c8:91:11:e8:fe:7a:40:e3:fb:c5:b3:f4:be:47:66:4c:
ca:78:5f:dc:f6:ed:91:b8:2d:1e:7f:e7:a4:88:31:a5:3d:12:
c5:b1:3f:31:60:5b:89:fc:ee:b8:b7:b9:2e:b5:6a:5c:0f:68:
74:ff:57:4e:b1:78:56:ba:40:4e:65:b9:2c:c3:02:37:66:0c:
de:f7:ac:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFolDFW+JfoMZncHZCTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGUxMjY0ZTA3YjM3MDhiY2I5ZGI1YTE0ZTdjYzkyNzA4
NjM5NTgwHhcNMjYwMzAxMjEwMTAwWhcNMjYwMzAyMjEwMTAwWjAzMTEwLwYDVQQD
EyhmN2RkYjhmZDUwODI3N2YzZWNhYWZkOGIxNjc3OWE5YWY0NjA1Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmDZhd3MKdoxPg/8qVUULH1JCZVQ
Dj51AhwlbS21tf1YjzOTTNGGHhODJGjHfM4CxQpkvX5zZXItGsPPKq7Dv4w9fG/c
fu6TypRz6wYliIQaybQBhHZxx2ZgpYzw1QGEcpLRKV4bOL0CfzCjRjaCmh/L5CbS
BLax3aaFFzY7y7jP1GuzVgfbOidhqjQAvRRhcnuLzzohjDzF6b+09zC/hYeNxh3J
PWheqmRhqEcNZfeIRE/IEQVjfNgxKifwiGXaXwEtyiUkQqKB2FMTzbeE09J91XYg
sfFA93BtBNpAuoO2z7Fi9vwkKfaRWRxA53ml3r1d/9A8ryCL3Gplst6svQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfduP1Qgnfz7Kr9ixZ3mpr0YFaWMB8GA1UdIwQY
MBaAFLoOEmTgezcIvLnbWhTnzJJwhjlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4Yzkt
YmZlMGNjYjc5ZmNjLzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGMyZmEtZGY1NC00N2ZmLWE4YzktYmZlMGNjYjc5ZmNj
LzEvdWc0U1pPQjdOd2k4dWR0YUZPZk1rbkNHT1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTy0dTDB
nVVQiogYkL7/Q+z9sMK5UoQwnYUmtqGbUQe0xvIhCjbLJ11b7R2fEcS34+Cr1FKK
dFigiadclnOZy1rE9S+w4m9YKwIh+63p1ZRPDKZbJM+WZ68ifwZJQzppKbOCql0L
Y/l8bxRxCz5jMGv96ZbOn4Tv2tHWgFZr1fDZ1J2aP0dHAVeWr7utyhGldSszg5u5
eMhnrlquThRup10wS7X7eowYaVRFtJJXFg2rBm+BxHPIkRHo/npA4/vFs/S+R2ZM
ynhf3PbtkbgtHn/npIgxpT0SxbE/MWBbifzuuLe5LrVqXA9odP9XTrF4VrpATmW5
LMMCN2YM3vesmg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:31 2026 by rpki-client