Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: mxSD1zlp4WC9L0cE0XPBz463uydnLVfP5G0cdENjY2U=
Subject key identifier: 18:F2:E2:D5:DA:FC:D2:2D:00:56:53:D9:50:4B:1F:6D:28:A2:B2:0A
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019CAAFCF3BAF0C3C61D765677F7B446A6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:29 +0000
Manifest this update: Sun 01 Mar 2026 20:00:29 +0000
Manifest next update: Mon 02 Mar 2026 20:00:29 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: smi5G1UWrSx4FN/gzTNlgO1GL/9tVxAXpS2Kn681KqQ=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f3:ba:f0:c3:c6:1d:76:56:77:f7:b4:46:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Mar 1 20:00:29 2026 GMT
Not After : Mar 2 20:00:29 2026 GMT
Subject: CN=18f2e2d5dafcd22d005653d9504b1f6d28a2b20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:aa:3e:f8:1c:6e:7d:ef:53:19:9f:35:f9:
c5:51:f4:db:d7:55:c1:c8:d1:bf:73:1d:0a:37:0b:
b5:08:65:e3:fa:88:dc:d6:07:3f:5d:db:35:99:00:
a7:7e:a7:db:12:cf:fe:d7:94:de:f0:0d:6e:df:03:
55:5c:25:9f:10:13:fc:09:4e:80:fe:98:50:c7:f1:
68:ae:ad:42:6d:7b:85:fc:d5:16:5e:fa:fb:63:66:
02:95:d8:35:b6:b0:e4:1a:d4:72:d3:ef:8f:e8:78:
04:4b:0e:8f:95:90:3b:5e:3d:93:04:0e:ef:bc:34:
05:9e:e0:8b:a1:b9:dc:3b:c3:52:98:c6:c5:f5:e9:
84:11:45:8a:42:24:e8:b4:ee:49:cf:c1:d6:62:13:
bb:2f:37:ae:bf:b1:7c:40:76:a1:5e:3d:af:21:43:
82:87:32:08:d4:b7:70:c1:c0:0d:c9:d2:82:83:43:
8d:70:54:a9:17:e6:11:33:62:49:46:37:c3:11:65:
05:bd:30:ef:65:fc:76:59:a0:52:f1:d4:15:2d:86:
3a:29:99:8e:d1:36:1d:ee:f9:e9:7d:81:e8:ed:4a:
80:86:12:b8:63:23:fc:0f:62:bc:aa:2d:07:9d:32:
66:ae:29:de:d9:b1:3f:ac:70:f4:9d:ad:02:7c:95:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F2:E2:D5:DA:FC:D2:2D:00:56:53:D9:50:4B:1F:6D:28:A2:B2:0A
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2e:65:cc:57:6d:a4:19:3a:15:a0:1c:12:88:96:e4:71:7b:
8e:00:98:54:04:74:5e:b8:ed:d0:50:95:8b:07:9b:0f:f5:71:
e5:37:9b:ff:08:97:c4:b7:3a:d7:5f:32:0c:f6:49:16:7e:4a:
53:a6:c3:23:b6:4d:da:6d:50:10:24:4f:d8:7c:36:5e:8c:bd:
72:7d:17:b8:6d:e1:f7:04:9c:27:a3:85:6e:0d:9e:7f:ef:34:
fa:1e:5a:ae:a5:2e:22:3c:fe:24:33:dd:3c:07:34:48:d5:b9:
11:03:67:0c:e2:82:fb:e5:91:4e:86:61:38:d2:a0:e5:c2:b1:
79:68:bc:75:f3:9b:2f:46:64:55:7f:c7:a2:37:2d:3c:c7:90:
45:b8:c8:41:c4:25:05:e3:ea:d9:8f:7c:cf:ed:98:d5:74:37:
9a:fd:81:2f:57:01:8c:ab:d4:9a:b5:58:8b:a9:c1:1b:6b:df:
84:5e:21:eb:c8:4f:cf:5e:f6:f1:0b:52:89:5e:aa:c0:01:fc:
18:0f:e7:3d:79:e8:17:d1:3a:c6:00:51:44:2e:c3:6b:40:1c:
3d:8d:44:bd:be:53:88:b1:4c:a0:c3:ed:5e:b1:42:8e:6d:c4:
39:2c:ca:55:92:04:42:48:ff:ef:a2:61:97:1a:cf:1a:0c:e6:
01:36:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:32 2026 by rpki-client