Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: YTCXWkoUaKZOzJ6F+FMISDbmHGNQHetlRxXkpzIMWwU=
Subject key identifier: AA:D4:3D:5C:9F:29:8B:66:36:F3:CB:31:34:39:CA:4B:A9:9D:51:36
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019D99D0E5844F1C9884A9276D6C470AFFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0D2E
Signing time: Fri 17 Apr 2026 05:01:37 +0000
Manifest this update: Fri 17 Apr 2026 05:01:37 +0000
Manifest next update: Sat 18 Apr 2026 05:01:37 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: xlnGKK1TdYY7EcjB+NpyYrMrDU+TyHa+ZldG3C21+EI=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e5:84:4f:1c:98:84:a9:27:6d:6c:47:0a:ff:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Apr 17 05:01:37 2026 GMT
Not After : Apr 18 05:01:37 2026 GMT
Subject: CN=aad43d5c9f298b6636f3cb313439ca4ba99d5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:27:8d:50:38:1a:4f:35:91:9f:75:1b:ce:
a1:a8:34:a9:db:9a:b6:fd:9b:8f:3d:8a:df:d3:e3:
78:94:d0:b0:94:2b:05:f8:18:c3:0a:aa:a3:98:bd:
69:73:7e:04:e4:96:f2:4d:96:85:40:3f:a2:df:dc:
e0:d0:6a:fe:8c:3f:62:de:92:16:76:55:0a:a2:9b:
2f:38:52:48:16:08:e9:19:7f:92:8d:3d:e6:65:cd:
df:b7:26:2c:40:a4:2f:7b:20:f1:57:5f:5b:c3:36:
c7:66:dc:6c:2b:0e:a7:00:ea:89:fa:0e:9f:95:96:
ac:71:79:a5:39:f0:6f:64:8d:0b:ab:cb:66:00:98:
40:e3:10:e1:8f:f2:66:34:1f:03:a0:09:42:3a:99:
58:82:11:17:cc:2d:60:37:97:4e:f8:60:66:0c:1e:
6a:4b:09:86:64:cc:a4:89:48:71:d7:d9:7e:75:da:
bd:5c:2d:ee:4b:45:18:f3:e2:a4:3e:9b:a9:80:a8:
da:f8:cb:62:b8:cf:a1:02:48:ce:d3:03:e0:96:43:
43:b2:11:48:f0:01:f1:ec:17:86:06:3b:e7:2d:db:
ea:20:a5:85:39:2a:60:05:48:05:ed:5f:61:03:11:
ad:75:ac:c7:7c:fd:15:3d:48:3f:8a:64:f3:7b:7b:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:3D:5C:9F:29:8B:66:36:F3:CB:31:34:39:CA:4B:A9:9D:51:36
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:c0:72:24:8d:4c:8e:07:2f:36:f5:e2:16:bb:52:bb:61:
6e:26:3f:42:08:74:a5:44:a3:22:5d:c7:2e:46:93:79:9d:b0:
40:f8:15:33:09:8f:7a:29:4e:19:8e:63:98:3b:b3:8b:91:29:
78:70:eb:79:7e:46:7c:45:f8:11:f6:d0:2a:4c:19:b2:da:52:
a4:70:a5:9a:2f:86:02:ec:41:6f:14:5c:0d:8e:4b:22:f4:01:
ed:0e:cf:e0:fd:0a:4d:6c:7b:9d:9c:85:b4:56:43:1b:68:ee:
c0:1c:86:ec:6a:a6:53:1a:46:59:5e:ce:fd:3e:f9:78:f6:b9:
ad:91:36:93:f6:0d:1a:a1:4e:c6:4b:f3:4c:b2:b7:97:e3:0e:
90:01:f6:9d:7f:9b:f6:f4:d1:17:00:3c:c2:30:50:62:73:83:
4c:73:9b:30:80:67:dc:9a:82:5a:00:88:91:0e:3a:4e:58:d9:
25:98:c3:41:68:03:96:4b:3b:bb:61:21:a0:c8:50:3d:66:35:
69:f6:c9:d1:b0:c5:e9:ab:f0:0a:f0:79:15:d3:24:36:ae:40:
87:3a:36:c7:91:f0:2e:29:f8:29:7b:f9:8d:16:76:4c:d4:68:
a6:57:0a:e2:6e:9d:0c:c4:3d:eb:d5:87:52:56:7b:d5:7b:3f:
4b:ad:42:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OWETxyYhKknbWxHCv/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjYwNDE3MDUwMTM3WhcNMjYwNDE4MDUwMTM3WjAzMTEwLwYDVQQD
EyhhYWQ0M2Q1YzlmMjk4YjY2MzZmM2NiMzEzNDM5Y2E0YmE5OWQ1MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JYnjVA4Gk81kZ91G86hqDSp25q2
/ZuPPYrf0+N4lNCwlCsF+BjDCqqjmL1pc34E5JbyTZaFQD+i39zg0Gr+jD9i3pIW
dlUKopsvOFJIFgjpGX+SjT3mZc3ftyYsQKQveyDxV19bwzbHZtxsKw6nAOqJ+g6f
lZascXmlOfBvZI0Lq8tmAJhA4xDhj/JmNB8DoAlCOplYghEXzC1gN5dO+GBmDB5q
SwmGZMykiUhx19l+ddq9XC3uS0UY8+KkPpupgKja+MtiuM+hAkjO0wPglkNDshFI
8AHx7BeGBjvnLdvqIKWFOSpgBUgF7V9hAxGtdazHfP0VPUg/imTze3sYTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrUPVyfKYtmNvPLMTQ5ykupnVE2MB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIazAciSN
TI4HLzb14ha7UrthbiY/Qgh0pUSjIl3HLkaTeZ2wQPgVMwmPeilOGY5jmDuzi5Ep
eHDreX5GfEX4EfbQKkwZstpSpHClmi+GAuxBbxRcDY5LIvQB7Q7P4P0KTWx7nZyF
tFZDG2juwByG7GqmUxpGWV7O/T75ePa5rZE2k/YNGqFOxkvzTLK3l+MOkAH2nX+b
9vTRFwA8wjBQYnODTHObMIBn3JqCWgCIkQ46TljZJZjDQWgDlks7u2EhoMhQPWY1
afbJ0bDF6avwCvB5FdMkNq5Ahzo2x5HwLin4KXv5jRZ2TNRoplcK4m6dDMQ969WH
UlZ71Xs/S61CGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:54 2026 by rpki-client