Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: cajg51YfGLrugmX7QAmidEDoMgIURWXX1GQkPFkifQk=
Subject key identifier: 8D:37:78:6D:FE:E2:A4:A1:63:24:20:1C:3A:0F:59:F0:CD:DD:07:FC
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 019DA3E6E53044E1A5D9047756672D7D8B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:01:51 +0000
Manifest this update: Sun 19 Apr 2026 04:01:51 +0000
Manifest next update: Mon 20 Apr 2026 04:01:51 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: BGDVAlb88uf9YeRgEEbCp3WJIKokrB6/cCzqHnKIjC0=)
2: ghAGIAHf2NUSuXtfAt8s6eabgvg.roa (hash: S/XY0H52dZPgXYBFOlUepYiuIVmvJAzUO0r3Q7zhLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e5:30:44:e1:a5:d9:04:77:56:67:2d:7d:8b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Apr 19 04:01:51 2026 GMT
Not After : Apr 20 04:01:51 2026 GMT
Subject: CN=8d37786dfee2a4a16324201c3a0f59f0cddd07fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:fe:76:55:1d:5c:2b:37:32:cc:40:25:2d:
2c:2a:95:ac:1d:b5:44:1b:26:a5:59:5a:2e:99:94:
28:1d:be:7e:63:81:93:28:8a:ee:a7:c5:7f:28:32:
cd:16:60:d4:2a:9e:58:7f:0d:01:a7:83:d6:aa:ba:
09:20:1f:54:36:cc:1e:a8:30:4c:69:66:ee:95:52:
2c:28:3c:f2:2d:e0:4a:21:0f:98:72:bf:04:f6:ea:
44:79:70:26:a4:9b:f4:b7:66:17:d7:f8:5c:72:55:
db:8a:2f:59:e7:4a:6a:d9:cd:b4:9d:38:1c:a3:7c:
07:51:ad:32:5a:a5:7f:1f:e7:da:75:ec:01:89:54:
12:93:84:77:e1:a7:10:07:53:83:69:68:8b:74:09:
52:7f:47:ef:b0:79:1c:00:b9:d8:ba:b9:4c:51:53:
a5:73:87:a0:c0:75:2b:68:cb:02:54:4c:77:4a:c4:
5f:83:a9:65:00:e6:a3:0d:99:ef:25:2e:23:b2:51:
ce:52:fa:28:c6:ba:e6:b7:41:23:d4:c8:b8:6d:fd:
51:10:94:55:d4:bb:89:0c:59:f7:8e:5e:77:5b:e6:
77:5d:5d:c5:bb:5e:c8:9b:ea:f4:4e:ce:ad:5e:23:
80:f5:18:7f:a7:13:c9:1e:46:5d:bb:bf:2a:08:c3:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:78:6D:FE:E2:A4:A1:63:24:20:1C:3A:0F:59:F0:CD:DD:07:FC
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:77:82:2d:68:43:7f:dc:fe:b3:e8:52:76:a6:a8:83:49:cc:
c1:97:80:e1:d2:63:08:ed:47:d8:9d:27:72:68:b5:d5:26:f3:
59:fa:56:e3:56:ef:2c:34:1f:49:7b:dc:59:ac:d6:59:90:67:
0b:d3:a7:f6:58:e9:77:c7:46:84:da:27:0b:ad:bb:4b:b0:f6:
e7:c6:6f:b7:9a:df:03:84:aa:cb:e5:68:04:32:4f:d5:e3:8a:
5d:80:df:48:f6:a0:84:50:ee:7b:75:db:4f:80:cb:56:55:95:
2e:1d:f7:a1:04:c7:f9:78:fb:33:09:f5:59:90:6b:a9:0a:de:
71:ad:26:c1:94:f3:bd:24:f4:b1:e9:be:ea:6e:01:c6:cd:80:
3b:b7:de:60:38:71:68:1b:24:8a:ac:a8:c0:ee:e2:8e:bb:26:
84:5d:73:86:fb:51:f7:0d:46:e3:2f:27:db:f3:78:eb:56:b4:
f8:1a:2f:4e:17:0d:52:43:be:6b:4c:d3:b3:6d:06:44:75:2b:
05:4c:67:f8:e8:8f:64:35:2d:90:60:cd:76:1c:97:cb:93:dd:
31:20:23:07:34:53:b3:3f:b3:45:ac:55:a4:ea:3a:b2:cf:37:
45:a6:d8:fa:b5:dc:85:80:f6:32:a0:af:7b:48:b6:7f:78:3f:
de:48:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:25 2026 by rpki-client