Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier: YnRek/qxLwp5azwlNG/JyUfzmBVxpoICQgb6bJ3kF+U=
Subject key identifier: 1A:88:CF:32:6A:03:42:30:2A:8D:4F:24:50:1C:B7:FA:83:76:2E:A6
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer: /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial: 019EC30007AE24837BB2B62B3BFDE6E4BE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number: 0161
Signing time: Sat 13 Jun 2026 22:00:19 +0000
Manifest this update: Sat 13 Jun 2026 22:00:19 +0000
Manifest next update: Sun 14 Jun 2026 22:00:19 +0000
Files and hashes: 1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: l1pLPZP+Qw+dqQAR78P0+gU6swI27bDkUKshXprqIBk=)
2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:07:ae:24:83:7b:b2:b6:2b:3b:fd:e6:e4:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Validity
Not Before: Jun 13 22:00:19 2026 GMT
Not After : Jun 14 22:00:19 2026 GMT
Subject: CN=1a88cf326a0342302a8d4f24501cb7fa83762ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:dc:4e:58:6a:97:93:2d:9b:fd:02:e6:ec:
3f:63:01:99:62:eb:74:fe:38:bd:b5:f2:2e:ac:b8:
12:83:61:d3:eb:5f:2a:b5:6d:00:b5:6b:bf:1b:c5:
98:89:1d:d1:ca:c6:7b:7a:5e:39:a2:c2:34:59:1b:
79:0f:c0:3d:54:5f:e9:d7:84:4b:99:5f:2b:a0:7d:
e3:6d:53:2e:e5:f1:ac:82:cc:fc:9b:f0:2a:0d:43:
d3:4f:6c:c0:04:7a:f1:30:2d:38:70:d7:c3:9e:67:
9f:09:a9:91:78:40:74:7d:a8:e7:a6:03:f8:df:d0:
09:55:c1:06:31:79:a6:49:a7:b5:a8:c3:2b:1d:7a:
3c:ac:25:28:3b:10:58:20:74:9d:fd:ba:fa:e4:64:
61:ef:c3:74:37:fd:b0:20:85:d6:6f:f2:37:b0:f1:
7d:c7:9c:4e:c2:be:fa:12:82:c0:9c:6d:c8:f5:8a:
6f:fa:0e:1c:94:bf:89:34:19:48:e3:3e:d2:93:68:
3c:53:38:2f:9d:f7:cd:3b:d4:f5:85:2e:2e:06:fc:
83:e6:08:6b:f3:01:74:3f:58:ec:ce:89:ab:9b:2a:
10:f7:43:0b:78:a9:75:21:0e:81:58:0b:61:89:53:
da:63:b2:fb:77:58:6d:0d:6d:3e:32:33:db:00:00:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:CF:32:6A:03:42:30:2A:8D:4F:24:50:1C:B7:FA:83:76:2E:A6
X509v3 Authority Key Identifier:
keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:11:01:70:4c:1f:a0:b1:b5:98:cc:67:37:a0:c6:48:f1:a5:
d3:97:5b:cc:8e:58:58:00:25:1b:fb:09:aa:97:56:e8:7b:cc:
78:da:3d:ab:4c:30:e1:3a:6a:89:62:3a:35:0f:ae:5d:d0:82:
70:cb:92:9f:4c:9c:bf:cd:5d:e3:46:5d:51:f8:73:69:89:4c:
bf:d7:12:9c:8b:e6:11:6c:12:0b:88:46:ed:ca:58:e3:ea:bc:
f9:c3:67:a8:54:fc:cd:5c:51:06:25:34:9b:f5:a3:e5:f8:e8:
15:d8:0f:0e:7e:e5:17:c7:75:60:2f:dc:dc:ab:f6:bb:4c:23:
dc:5d:21:1a:33:60:33:9f:dd:78:56:7c:26:4d:0e:a1:2f:e4:
8d:37:b3:65:9b:44:7b:f7:a5:6a:1c:03:d2:b1:fc:55:49:0f:
19:eb:09:dc:e6:e4:5d:61:cb:fc:5f:31:d7:f5:70:c3:d2:ab:
17:cb:7b:84:e3:e7:5c:29:e0:c1:95:5b:bc:99:a4:ed:08:41:
3e:fa:82:aa:bc:c4:51:b3:15:fd:77:08:c3:c2:8a:1c:7f:d3:
bc:ab:d0:61:f1:40:73:7d:fe:db:14:7a:18:f0:86:2e:fe:e3:
37:af:59:77:e5:d8:c2:f3:a8:18:fc:6e:44:85:78:91:8f:84:
bc:2e:f4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:42 2026 by rpki-client