Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
File: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft (raw, json)
Hash identifier: LM2eZskTPtVlycJoY8iC+0T1FyVVRl30dNmTIRLB3KQ=
Subject key identifier: 01:77:E0:FD:58:FF:D1:AB:3A:14:C8:DE:C5:29:B0:33:51:6C:9C:E3
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 019CAEDA4BD8342D456E6C7A078E6FC44543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
Manifest number: 0123
Signing time: Mon 02 Mar 2026 14:01:07 +0000
Manifest this update: Mon 02 Mar 2026 14:01:07 +0000
Manifest next update: Tue 03 Mar 2026 14:01:07 +0000
Files and hashes: 1: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl (hash: qH9pNWeT4L3KynR1UrDzTquYwFbrMQ04UmGeeFjcFr0=)
2: ZdackTTtUARwMJsKBd9WE-bdrFQ.roa (hash: LuOd5plbmyjj2hh2bl4nHakgqxPpc4LSclkTktlZBGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:4b:d8:34:2d:45:6e:6c:7a:07:8e:6f:c4:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Mar 2 14:01:07 2026 GMT
Not After : Mar 3 14:01:07 2026 GMT
Subject: CN=0177e0fd58ffd1ab3a14c8dec529b033516c9ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:1f:75:39:c0:d0:47:ae:16:90:03:fc:72:
b7:45:a8:4b:da:cf:15:c9:ec:6f:68:4b:54:5f:8c:
90:8d:97:c9:af:fb:8a:c5:14:a5:46:f1:3c:fd:a1:
8b:07:4f:65:55:55:97:10:2b:14:61:28:7c:b5:e8:
01:4e:62:a6:93:ae:e2:ba:11:5a:87:e5:ac:bc:7e:
55:c0:85:c0:7a:12:ce:4f:68:75:cc:2e:a0:dd:ee:
5f:96:46:7f:fe:dc:bf:b9:9a:ce:b7:f7:34:8a:87:
20:67:22:d7:15:96:f7:09:85:81:35:45:5b:a8:e2:
e1:b9:44:cf:c0:bb:d8:d9:1c:87:83:8d:fd:20:91:
b6:b0:fe:ac:d4:6d:d6:bf:4a:66:b7:3c:8b:36:11:
b6:e1:8d:f3:df:a8:67:9f:61:30:df:eb:5d:50:68:
19:3c:42:73:5d:ca:d7:88:d6:8e:8b:a8:4f:70:8a:
ff:bd:9f:87:02:95:26:33:47:1d:78:02:e9:57:bf:
e1:0b:94:95:07:d5:5a:d1:43:b4:f0:3e:69:86:84:
be:13:d0:9f:15:5a:8b:74:d8:1d:1a:f0:55:92:3f:
71:2b:c9:52:bd:4e:14:9e:bd:9d:41:0f:22:c7:a3:
de:c1:e3:af:73:3e:40:46:dd:28:8c:fb:35:c8:66:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:E0:FD:58:FF:D1:AB:3A:14:C8:DE:C5:29:B0:33:51:6C:9C:E3
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7b:49:7c:43:4d:5e:6e:b7:09:e5:9c:49:ba:ce:40:d8:98:
26:52:da:84:98:95:1d:04:cb:e9:91:7a:6b:96:8d:5c:a6:a7:
d2:81:cf:8d:50:4f:46:0d:1c:18:b9:4c:4b:33:03:8e:9f:73:
db:aa:9b:a0:0e:b3:1c:ff:bb:24:d1:31:f1:be:d4:b4:62:1d:
9a:41:31:26:e8:55:f0:9b:c8:b0:e9:98:27:e7:cd:85:c5:22:
7e:e4:70:95:de:a7:9b:47:a2:e1:3b:a8:df:f5:b0:72:70:99:
d4:ee:2f:6e:a7:8f:4c:16:7b:aa:85:77:0b:0b:1a:ae:8b:c9:
c3:ac:3b:04:28:5f:e4:ea:3b:19:3f:e1:73:0c:7b:c1:4c:ac:
29:43:cb:1b:8f:7f:38:89:d5:94:d0:f3:95:79:14:35:8b:80:
de:70:e4:35:03:40:03:c7:61:ba:5b:6e:b8:a6:4c:88:1b:f0:
cc:18:29:28:58:b4:b3:b9:18:63:18:2d:db:cf:07:a3:22:e9:
17:2c:4a:33:eb:c0:68:51:cb:10:b8:fb:a3:86:b9:ed:48:8c:
50:0d:f5:8f:48:45:13:10:f5:34:af:59:4b:0f:38:15:9a:ef:
cf:86:1f:3f:d9:af:ac:f3:81:3a:24:ce:e5:b1:17:72:93:38:
e9:7c:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:12 2026 by rpki-client