Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: pY6xiLIpSGFaiSeJ7/D9pedug4qUdzm4dypa2tIZaBo=
Subject key identifier: 77:5F:A6:EB:38:A1:78:F9:25:83:95:7C:14:58:1E:79:B5:9F:DE:1C
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019D9A3E9C563658FD0F04D408751A57B675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1614
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: kLQrbNmWZojYwjyp37dqr+MFyhAwfHvAUvTQ/nE7wgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9c:56:36:58:fd:0f:04:d4:08:75:1a:57:b6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=775fa6eb38a178f92583957c14581e79b59fde1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:e3:8d:ef:42:88:1a:6b:47:01:a3:7f:e3:
b4:bc:2d:8a:e3:6a:5d:58:05:4d:69:73:a5:15:fd:
fc:b6:c8:c9:7c:54:fd:e9:1a:16:54:22:e0:3c:47:
a6:63:9a:3b:8e:8d:e5:9b:a7:3b:88:e6:68:29:bf:
43:be:72:2c:61:de:be:fb:e4:86:56:df:e7:b7:d3:
23:cc:6b:18:33:83:51:a9:54:dd:a1:02:6c:d8:47:
26:6d:c0:e3:55:c0:75:00:ef:77:ac:e8:10:de:1c:
81:f2:ba:af:98:12:4a:db:97:2f:99:6c:f8:2c:43:
d1:94:7a:3f:e4:85:fd:43:5e:4e:3e:02:c5:30:cf:
d9:2b:03:d9:e3:2c:d3:3a:21:f8:a4:9a:ea:0e:c7:
0c:85:7f:c6:30:d2:68:59:01:16:ce:3f:a7:32:74:
55:14:e0:9f:bc:b2:46:1a:c0:58:aa:3d:e9:fe:17:
d2:72:e2:7f:32:ea:5d:49:e4:be:c0:7e:ee:1b:c5:
de:39:0d:67:0b:48:dc:f5:0f:fa:4e:8d:6c:87:b0:
5d:0c:60:74:03:b5:a0:61:8d:ee:f9:3a:1a:98:78:
09:8c:aa:1e:8f:88:c1:14:e5:2b:81:35:1e:d3:8e:
15:94:a9:42:28:39:85:7a:e7:a3:b7:2d:bc:1b:6b:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:A6:EB:38:A1:78:F9:25:83:95:7C:14:58:1E:79:B5:9F:DE:1C
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:2a:3e:6a:a2:2c:50:e1:e1:aa:3f:75:39:4e:75:81:31:
2a:cf:bd:ac:33:98:f0:79:c3:80:1b:9d:85:4a:08:80:d7:f4:
bd:75:26:17:82:9b:2e:e5:67:d1:c6:94:7d:b6:58:45:6a:4b:
18:d0:05:e7:c9:12:2a:ff:a5:12:d8:ac:cd:60:02:8a:0c:27:
db:a1:63:42:b8:ef:e6:6c:dd:b2:88:f5:c2:a9:5c:19:31:89:
20:a3:0e:97:6b:81:a5:5c:dc:88:c0:dd:4d:21:95:0d:f4:54:
c7:49:d0:21:a5:a8:97:a6:4c:fa:5d:d2:ce:b3:01:8a:da:87:
a8:0d:eb:86:04:7e:92:63:a7:80:f2:06:91:a7:1d:f7:50:fe:
9b:c6:f4:05:a9:d6:f4:69:35:7e:b1:a2:6a:43:9a:2c:19:73:
c7:d4:ec:21:92:3e:49:1f:76:46:37:63:bb:09:f4:0c:9b:ce:
4a:aa:d0:f6:40:cc:fb:58:12:7e:d2:d5:9b:a1:a4:9e:c6:14:
bf:a8:28:ef:79:29:b0:82:35:8b:0c:ae:6d:be:aa:d1:48:03:
00:51:dc:8c:36:5f:51:4d:84:7b:bb:eb:03:c3:a4:ae:3d:54:
d6:e5:23:78:0f:82:5c:69:f2:6a:98:50:33:94:c5:79:d8:03:
dd:28:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:18 2026 by rpki-client