Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: KBWdc62/IwF3GvJvuhMRSeyaGKPEIUmA1SS4OSnTAHg=
Subject key identifier: 4E:F4:45:72:79:C2:D8:CB:DA:E0:B4:0B:3D:71:A7:68:A3:57:6D:97
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 019CAC473A60304C82E29DFCA2CE73D9FFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 0AE1
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: PqZUahy4nrKL0oGa8biXII0/Ki4PctfLXnbJqNtRUko=)
2: ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa (hash: cLPzRbnAmpDPM25/ehEAiv6PVrI6yHFxO/FTdnRAlow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:3a:60:30:4c:82:e2:9d:fc:a2:ce:73:d9:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=4ef4457279c2d8cbdae0b40b3d71a768a3576d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:a7:32:c6:30:3a:94:36:45:41:3e:1a:0b:
07:57:8b:f7:90:d2:be:ef:52:1f:01:d6:65:37:5e:
ee:b2:e1:9a:aa:4e:94:0e:b2:12:a9:c4:a1:a0:00:
83:f4:0f:d5:78:56:0d:40:fe:eb:ab:de:f6:9a:c8:
35:42:f2:e3:ee:71:a7:bf:df:77:dd:b8:b6:36:8a:
24:e1:4d:99:c4:e3:ae:5e:8f:a5:cb:14:8a:e6:1b:
ae:f6:c3:10:16:b3:4f:91:df:52:e5:34:a5:e1:72:
48:aa:a4:60:f1:c8:7c:a7:a0:d7:23:ac:05:cd:7a:
88:c5:ed:58:b1:1b:73:51:a5:7a:fd:05:07:63:c9:
1d:53:af:15:b1:1c:c9:d2:77:2a:f2:44:ef:19:a4:
cd:4d:9f:76:4e:00:62:d7:f6:c5:60:be:c9:fc:8e:
73:b5:58:24:db:d8:29:2c:5f:8f:b1:59:f1:25:47:
ac:e7:64:bd:c4:13:0f:60:46:c0:fe:ca:e6:5a:b5:
70:b5:ea:0d:84:db:a4:e4:b8:3d:36:99:54:d8:54:
c0:b9:e3:3a:05:5f:7e:8c:73:24:32:29:6c:da:a2:
18:05:7c:ed:e5:9f:b6:0f:02:a2:c8:65:12:64:e8:
75:9a:cd:c9:dc:22:1d:78:1c:1c:df:4b:c6:5b:27:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F4:45:72:79:C2:D8:CB:DA:E0:B4:0B:3D:71:A7:68:A3:57:6D:97
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a4:45:6d:c0:ce:14:c3:75:57:d2:1e:2c:5d:c2:fc:3a:a0:
1a:c3:ba:61:25:0f:a9:e8:c6:c6:43:f9:89:12:11:43:ff:eb:
4e:5f:28:cf:6e:34:96:d7:83:e7:2a:f9:57:82:21:79:51:48:
16:31:bd:f9:f4:8c:a2:fa:59:de:b8:26:e3:46:6a:01:b9:ce:
f1:4d:c1:24:cf:d9:1d:7e:81:9e:a0:f4:b3:e3:ac:07:98:2d:
b2:ab:4a:77:db:5d:42:88:2b:8c:88:97:2c:fd:f7:45:7d:f7:
2a:b4:b8:e0:62:1c:31:2e:b3:c9:e3:86:ae:b5:b1:2d:6d:17:
07:d2:1d:80:09:12:8b:87:35:b7:f0:1a:1f:07:85:91:51:a9:
63:a6:dd:6c:cb:be:6e:8f:f6:0f:c9:00:2c:5d:c8:e7:5c:19:
b5:83:92:65:1e:77:4b:2f:d3:a2:be:99:cc:5d:ef:2d:5c:b5:
2b:4c:5c:ce:95:4f:d2:a6:a5:98:12:91:91:88:6b:1c:db:cb:
4e:61:3c:65:dc:22:b1:50:04:9c:23:0f:2e:cf:74:ce:95:16:
c4:94:a0:6d:91:b6:d2:99:50:8b:81:c4:9c:d6:db:28:0e:75:
4d:a6:e6:d2:80:42:39:6e:a2:49:33:41:c3:10:b0:e6:61:87:
d6:30:cf:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzpgMEyC4p38os5z2f/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE3YzhhZTAxNTBlYjhjOTQ2ZDdiZjFlMDVjMDQyZGRm
NmEzZDQwHhcNMjYwMzAyMDIwMTE0WhcNMjYwMzAzMDIwMTE0WjAzMTEwLwYDVQQD
Eyg0ZWY0NDU3Mjc5YzJkOGNiZGFlMGI0MGIzZDcxYTc2OGEzNTc2ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zOnMsYwOpQ2RUE+GgsHV4v3kNK+
71IfAdZlN17usuGaqk6UDrISqcShoACD9A/VeFYNQP7rq972msg1QvLj7nGnv993
3bi2Nook4U2ZxOOuXo+lyxSK5huu9sMQFrNPkd9S5TSl4XJIqqRg8ch8p6DXI6wF
zXqIxe1YsRtzUaV6/QUHY8kdU68VsRzJ0ncq8kTvGaTNTZ92TgBi1/bFYL7J/I5z
tVgk29gpLF+PsVnxJUes52S9xBMPYEbA/srmWrVwteoNhNuk5Lg9NplU2FTAueM6
BV9+jHMkMils2qIYBXzt5Z+2DwKiyGUSZOh1ms3J3CIdeBwc30vGWyf2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE70RXJ5wtjL2uC0Cz1xp2ijV22XMB8GA1UdIwQY
MBaAFFDafIrgFQ64yUbXvx4FwELd9qPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5Nzgt
YjZmMWYwMzE3MjFlLzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9kYmRkYzgtNDYzMy00YWNiLWE5NzgtYjZmMWYwMzE3MjFl
LzEvVU5wOGl1QVZEcmpKUnRlX0hnWEFRdDMybzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6RFbcDO
FMN1V9IeLF3C/DqgGsO6YSUPqejGxkP5iRIRQ//rTl8oz240lteD5yr5V4IheVFI
FjG9+fSMovpZ3rgm40ZqAbnO8U3BJM/ZHX6BnqD0s+OsB5gtsqtKd9tdQogrjIiX
LP33RX33KrS44GIcMS6zyeOGrrWxLW0XB9IdgAkSi4c1t/AaHweFkVGpY6bdbMu+
bo/2D8kALF3I51wZtYOSZR53Sy/Tor6ZzF3vLVy1K0xczpVP0qalmBKRkYhrHNvL
TmE8ZdwisVAEnCMPLs90zpUWxJSgbZG20plQi4HEnNbbKA51Tabm0oBCOW6iSTNB
wxCw5mGH1jDPNQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:15 2026 by rpki-client