Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: tMl2xT5ofx15XZOFw+QS9WICp0WG/pPgS3auQLiY+9Y=
Subject key identifier: CE:2A:9C:1F:E3:CE:E1:CF:58:1C:55:BF:11:A3:E7:15:93:56:ED:06
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019CAC46E60D2726082EEE751863448B0D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0CB3
Signing time: Mon 02 Mar 2026 02:00:53 +0000
Manifest this update: Mon 02 Mar 2026 02:00:53 +0000
Manifest next update: Tue 03 Mar 2026 02:00:53 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: VP0b+y7QwJHzDN/WEyXCNJooAzG6dn+NcgSX3i/BKCI=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:e6:0d:27:26:08:2e:ee:75:18:63:44:8b:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Mar 2 02:00:53 2026 GMT
Not After : Mar 3 02:00:53 2026 GMT
Subject: CN=ce2a9c1fe3cee1cf581c55bf11a3e7159356ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:e7:ff:60:25:bf:3f:8c:83:64:74:65:18:
4d:77:e3:a0:ca:5b:a6:5b:eb:3c:c5:7c:e7:2f:9b:
bd:76:67:4b:5f:ca:da:b4:c4:60:ef:61:c0:c4:a4:
4e:1d:bd:25:3d:eb:34:bf:ca:08:05:0b:0e:93:b0:
fe:ac:ca:d4:3a:e4:09:67:48:46:02:ff:a1:3f:ff:
f6:d9:86:22:fa:22:19:43:2c:4d:be:22:70:fa:5a:
b9:57:48:57:8e:48:47:bf:e2:0f:87:aa:13:1c:c7:
17:64:2f:f0:74:7e:98:a0:4f:91:a0:61:c5:2b:e8:
1f:e4:5f:6a:ff:0d:b6:4f:82:ea:de:b9:01:d3:9f:
9a:b4:c8:67:e2:2e:49:7f:6e:da:76:7e:a9:ae:12:
0a:1b:a3:4a:c6:97:90:d8:88:11:56:95:0b:50:11:
25:e1:6d:82:c3:b3:47:47:4e:fe:a2:40:bb:98:a5:
2a:ce:2f:bf:85:80:b4:33:31:f0:ce:49:c3:a8:56:
25:95:73:65:dd:e1:ee:48:b0:07:6d:89:82:e0:19:
15:4a:29:45:fd:f7:3a:97:e9:24:a3:5e:9c:e5:e5:
6d:4e:5b:cd:0b:d6:7a:e9:7c:db:40:b7:c5:70:c5:
1c:fa:9e:ee:03:32:93:f3:da:c0:85:37:29:b4:67:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:9C:1F:E3:CE:E1:CF:58:1C:55:BF:11:A3:E7:15:93:56:ED:06
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3b:4e:39:0d:3d:1f:ff:d9:da:03:63:b9:d3:3a:0d:8b:08:
2f:b7:c5:69:e0:8d:ad:e2:03:3a:9f:69:50:8a:6b:64:d1:fc:
08:50:7f:c5:bb:98:53:37:75:5c:90:86:2d:80:23:84:3c:99:
fd:43:7c:16:49:84:d0:d9:45:32:c3:c1:a7:d8:1d:e1:a3:38:
6d:60:26:1d:32:b8:5a:4b:fa:cf:87:63:e6:aa:40:5d:e2:d9:
ce:12:a5:7d:ed:9b:38:9a:78:96:c1:6d:45:d3:8c:89:b2:24:
f0:65:48:38:8e:06:bd:19:b2:a5:5c:e9:b8:c9:34:4a:97:74:
32:08:ae:ed:45:f0:81:38:3f:17:11:26:da:c9:e1:dd:a1:1e:
4b:0c:0f:91:36:e0:b4:e9:c5:f0:8a:87:98:f4:e7:9b:e0:94:
e5:c7:d4:0b:cb:95:49:4a:de:68:c5:1b:2e:0a:47:19:78:09:
1c:e7:06:c3:62:e9:5f:d0:3c:38:63:44:00:29:8c:74:e5:85:
fd:07:f3:af:0b:00:35:91:bd:df:a5:d9:1d:37:a1:80:3e:05:
28:02:52:3e:40:fc:62:2a:d3:7a:11:f6:c2:e2:38:ea:c0:b3:
c7:50:35:94:2a:4a:11:5c:81:6d:31:88:37:fb:26:9d:95:0d:
50:e4:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:50 2026 by rpki-client