Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
File: uglQnQRuXLar5boZqxurpUPTffg.mft (raw, json)
Hash identifier: IASEHV82ZFt7h9/8+DrgbDIr7zpXfmsl8HT+e/dbYWE=
Subject key identifier: F5:73:1B:19:54:47:66:DE:73:94:3B:8E:97:26:2F:4B:3D:73:08:82
Authority key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
Certificate issuer: /CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Certificate serial: 019CAB6BD0F6140873AE1D431F8AB1C77539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
Manifest number: 0BCB
Signing time: Sun 01 Mar 2026 22:01:35 +0000
Manifest this update: Sun 01 Mar 2026 22:01:35 +0000
Manifest next update: Mon 02 Mar 2026 22:01:35 +0000
Files and hashes: 1: uglQnQRuXLar5boZqxurpUPTffg.crl (hash: M9o1ttKZ0f+dTaAsL2qizuudM78A6G7IdJEPiRDWAL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:d0:f6:14:08:73:ae:1d:43:1f:8a:b1:c7:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8
Validity
Not Before: Mar 1 22:01:35 2026 GMT
Not After : Mar 2 22:01:35 2026 GMT
Subject: CN=f5731b19544766de73943b8e97262f4b3d730882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:65:4e:ea:40:e8:0a:c6:d3:d9:f8:9c:3d:
f3:eb:b9:c8:5e:ff:92:19:ac:8a:a4:a4:b1:58:dd:
d1:a9:df:4d:6a:70:5d:08:2d:43:ee:7f:36:ee:7f:
e7:8d:c2:41:91:84:81:a1:0a:21:48:83:fb:ec:25:
06:80:40:ed:c4:f0:5a:da:04:8f:fb:94:14:5a:5d:
48:78:61:9b:69:f2:cd:bb:ed:b4:ed:77:8d:ef:f8:
21:ce:0d:54:15:1e:3c:b2:41:51:02:16:2b:25:a7:
f1:92:4e:3d:fe:6d:f9:c8:3c:b8:ea:18:69:94:2d:
8c:fa:f4:ab:da:68:da:a8:b6:7d:4e:83:65:84:6c:
c6:b8:cb:eb:f5:20:65:19:bd:b1:a1:dd:ff:75:23:
eb:df:fc:ea:df:e9:02:b4:64:a6:0e:6a:90:9d:db:
29:58:c2:52:bc:9e:de:2b:f4:4f:39:ea:a6:89:e1:
b0:be:d6:c1:3c:8a:49:a9:d1:d8:65:06:7e:04:45:
b3:ae:c7:1c:58:12:17:ab:e4:d1:4f:a3:1e:24:7c:
29:a5:5b:30:e1:7a:5a:53:5f:21:53:02:6f:4d:3b:
5b:83:cd:0e:74:73:91:77:62:ea:88:4b:56:e5:5d:
c7:80:9c:2f:38:9d:3f:e7:27:87:35:89:da:dc:47:
d1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:1B:19:54:47:66:DE:73:94:3B:8E:97:26:2F:4B:3D:73:08:82
X509v3 Authority Key Identifier:
keyid:BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:41:ad:11:a1:78:bd:cf:c2:a0:dc:69:60:10:bb:e0:86:
57:b1:e0:ba:9b:bf:28:aa:a4:d3:11:a2:5d:eb:89:0b:0b:d7:
1b:8b:30:7a:47:af:48:e8:5a:b8:61:62:53:4a:99:e4:db:1e:
e5:e4:b0:b2:e5:11:c6:56:1f:fb:8a:7b:f6:04:af:1a:b1:2a:
f4:0b:4a:74:46:bf:f5:5a:60:ce:c2:4f:88:fb:fd:cd:fd:0d:
aa:28:6d:2b:a0:c8:8a:6e:6f:14:29:7b:a8:78:40:73:15:6f:
8e:b4:c4:f6:66:9b:a2:ad:bf:9d:85:49:e6:d4:4f:8a:62:fc:
ca:70:b8:10:6d:70:34:b3:de:91:a6:61:98:52:d8:ea:f5:01:
d6:50:ba:71:ab:7d:53:39:b0:d5:98:25:13:af:ec:23:22:1c:
7f:17:4c:99:9d:ec:2e:67:84:20:90:55:ba:58:98:f7:e7:34:
8c:e7:b5:b3:fd:1f:ea:ab:34:08:c3:22:8e:63:2e:e4:7d:5e:
68:ef:b7:24:44:0c:0a:b1:8e:8b:34:56:ff:c7:77:22:71:c2:
02:66:f5:6e:a9:fa:3c:72:81:c3:b1:a9:96:a0:69:d0:ec:00:
11:b3:c9:79:61:36:2a:08:3a:0e:94:98:85:34:10:8e:7f:92:
88:df:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:12 2026 by rpki-client