Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: V4IFOd0qDWm10RtKlE1lrxC4xduzjk8a59CQ5Ty6Bp8=
Subject key identifier: AA:F2:57:7E:4E:91:FF:0A:C9:6E:77:F5:48:45:12:F6:D6:E7:A4:85
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019CAF10A1EEB963AE1C377B380E9CED7F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 016F
Signing time: Mon 02 Mar 2026 15:00:28 +0000
Manifest this update: Mon 02 Mar 2026 15:00:28 +0000
Manifest next update: Tue 03 Mar 2026 15:00:28 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: NR2Bjx3Ch3RSEcEEpp8Qks7q7K9J5oKx1Aj1rJZRY8s=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:a1:ee:b9:63:ae:1c:37:7b:38:0e:9c:ed:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Mar 2 15:00:28 2026 GMT
Not After : Mar 3 15:00:28 2026 GMT
Subject: CN=aaf2577e4e91ff0ac96e77f5484512f6d6e7a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:ba:e2:89:62:98:35:65:98:92:9c:da:b8:
6a:bf:e9:86:5f:82:f9:ed:56:f4:06:7f:77:89:ce:
6c:3a:24:28:7a:28:67:c2:bd:6e:bf:63:78:3b:b3:
27:66:1e:8e:88:b2:a9:63:c5:bf:67:0f:4a:cc:18:
1b:45:de:c0:aa:47:87:9c:98:6a:0b:23:de:60:49:
82:d4:d8:b4:d4:7e:c2:0b:2c:ef:7c:62:4e:20:c8:
a4:48:47:e8:ef:2a:87:85:5c:e7:b6:de:28:43:7d:
6f:2a:3d:42:60:65:f3:41:bf:80:bd:5b:aa:3d:6b:
f3:20:23:e3:e5:69:d6:84:53:65:81:f7:70:61:64:
4c:59:68:2b:c5:67:89:4a:07:ea:63:1a:8c:b3:2a:
f6:c0:10:12:33:41:81:d9:71:90:0e:f3:f4:25:b7:
7f:03:a2:7a:93:21:e9:0d:91:27:3b:df:a8:64:00:
ab:05:02:6a:ac:0b:b2:cc:85:6b:be:ec:15:cf:fb:
06:24:eb:ce:59:2f:0d:43:03:c0:01:d6:aa:8f:e4:
5f:a0:06:89:16:b8:f1:5b:32:1f:64:33:b8:40:7f:
6b:4d:a2:03:e0:25:86:71:b0:18:9c:8b:d6:ce:fe:
b1:29:00:d3:64:3d:5a:e2:33:6e:35:a9:c6:85:12:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:57:7E:4E:91:FF:0A:C9:6E:77:F5:48:45:12:F6:D6:E7:A4:85
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:71:01:57:03:69:1a:cf:0a:9d:0b:ce:7d:02:25:db:55:
16:53:b4:e4:8f:bb:21:e6:4b:f6:e1:64:1b:0c:78:9c:7b:33:
ce:09:26:89:1c:c2:ad:7f:3a:bb:2b:0b:ef:7e:02:2b:8b:3e:
68:1a:b6:60:0b:91:cd:ac:4c:8a:dc:41:e2:57:00:5e:ec:79:
62:5e:90:ad:25:27:f2:68:af:45:41:b7:b6:ef:52:e1:6e:32:
e2:82:88:65:eb:bb:85:cc:06:f8:1c:88:d6:2f:97:7e:4a:c6:
1b:8f:53:71:14:5d:52:51:b5:4f:53:32:4b:12:5b:e7:04:e1:
7e:1f:ea:77:16:1b:20:43:5f:ca:fd:d4:46:80:c5:26:17:62:
6f:a8:46:b2:c0:15:d4:0c:4a:15:85:d9:53:5a:47:77:c8:88:
00:ac:7e:d0:23:52:89:da:64:6d:2f:5c:d6:fc:58:49:25:ae:
e2:e9:e6:45:c9:da:c9:c1:d4:37:d3:43:8e:3e:e4:1b:c4:01:
a9:63:a2:c2:65:bf:c4:fd:68:67:b9:37:75:d5:6d:64:a3:b8:
45:2b:90:60:f4:8f:1f:83:ce:8d:1f:d2:dd:39:01:87:d6:54:
4a:78:ba:be:47:dc:24:56:15:5a:9a:b3:91:61:87:b4:b2:10:
3b:46:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:56 2026 by rpki-client