Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: f4lMKNUNx4BBi9JCRSCUrN0r85zKTGC6dZKYB+tOIt8=
Subject key identifier: CE:F9:B1:B6:1D:A0:B6:89:CD:D9:09:31:05:B0:6F:0A:02:FC:DC:94
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 019CABD97253F17F07C019F78726F1ABBAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: icLrDMq2R963psK2QI5UpTdQl06vQAhZKc+5W9BoCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:72:53:f1:7f:07:c0:19:f7:87:26:f1:ab:ba:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=cef9b1b61da0b689cdd9093105b06f0a02fcdc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:e4:c0:3a:15:aa:57:af:e6:8a:00:df:d0:
b4:3e:b8:4c:ab:0e:f9:b3:4e:f0:44:d3:54:75:3e:
7d:21:58:ad:e0:7e:61:05:ca:99:78:be:ba:44:c0:
e6:88:75:90:32:65:14:9f:be:b4:f6:75:2e:03:6e:
63:93:43:60:22:44:5a:46:16:32:b4:2a:87:9e:cb:
e7:49:f8:f1:f5:e4:04:8f:3a:9d:ed:85:70:6d:05:
ed:3e:ec:34:d5:d7:e8:36:07:19:45:74:7c:5a:9b:
a1:19:e7:b1:9b:16:42:5e:29:2e:8c:d0:98:92:51:
37:4c:33:b0:cf:cf:c9:8b:9a:95:c2:83:8b:ba:8f:
6b:37:cc:ba:24:5b:c5:09:35:36:55:90:ec:3a:78:
0d:54:5b:fc:be:0d:5c:60:9f:78:d1:ea:19:3b:a2:
78:89:d8:33:f4:b3:74:93:72:4a:34:af:ea:75:68:
20:fa:99:f8:86:d6:d4:51:2f:ba:cd:13:13:57:30:
ca:da:11:d3:01:ce:9e:76:cd:86:33:f4:8c:02:5a:
ce:fe:39:55:48:fa:8d:dd:8e:a6:06:67:e2:5e:09:
ac:f1:5c:af:6d:ee:3b:10:b6:89:08:a9:23:8d:dd:
a3:88:8c:09:0b:99:77:54:b5:c1:16:1d:c0:0e:62:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:B1:B6:1D:A0:B6:89:CD:D9:09:31:05:B0:6F:0A:02:FC:DC:94
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c9:72:d3:de:1f:67:cc:a4:b5:64:1d:1e:18:aa:ef:f5:9c:
ee:59:1a:86:50:07:ed:6f:01:c3:c8:90:1c:ac:e1:e2:4f:45:
31:81:2e:0f:2b:da:b8:fc:5f:c6:1f:7d:27:0e:97:a2:46:6f:
e1:d0:1a:86:cd:0a:07:dd:92:c8:4a:10:14:1c:59:5a:e3:8b:
be:bc:89:e2:00:81:98:34:08:a4:92:65:47:ed:81:dc:54:5e:
91:03:df:05:df:d5:78:e0:3e:cd:5e:08:c2:04:b6:ee:b6:6f:
3c:b0:e4:6a:52:06:4d:7e:a1:d7:7a:7b:9e:ea:f9:4c:24:07:
32:8b:b3:46:89:7b:22:eb:9a:d7:8d:f5:c4:84:38:78:39:42:
72:52:1f:06:04:cf:a4:a7:21:8e:b0:3f:b7:ba:19:bd:4d:ed:
f8:b1:81:6b:31:a7:d0:b0:b4:9b:78:ba:85:41:68:c6:fe:e7:
de:a2:75:76:46:e5:22:55:38:2d:db:39:30:fe:b9:3d:88:89:
a9:68:18:23:6f:58:50:74:c4:1e:36:10:35:96:35:15:a5:fb:
6d:2c:7e:80:0a:6a:37:1e:b8:10:a5:52:eb:27:40:4f:24:71:
46:ae:8f:df:3c:4c:2f:0b:6c:8a:14:d7:93:4f:32:37:bf:8e:
23:bc:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:31 2026 by rpki-client