Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: tC4cXl25aAL5xnI2DxsP7Ej3TSklpXgg7oO3E43R/1Y=
Subject key identifier: 57:99:B0:66:5A:C0:A0:53:13:B9:4B:44:AB:60:3C:EE:DF:ED:6E:26
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 019CAC1011DE49B14D8E18DB1BFB673AFCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 10DF
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: UCitPMhBwLPnidKtg+g9um3uqGO/ZMbRpLgbKH/Vy8w=)
2: v-ipIT8yr4AG7JC_OJEOS1gcpDo.roa (hash: GHUlrgQfUHa7TIwzSErf9EB2ikM0OJVY/nwHMqCmoVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:11:de:49:b1:4d:8e:18:db:1b:fb:67:3a:fc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=5799b0665ac0a05313b94b44ab603ceedfed6e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:e2:16:2a:48:65:3d:26:75:d5:cd:6b:4e:
dc:e4:a4:08:80:43:dd:e1:df:cb:2d:56:3b:c1:cb:
88:20:ef:53:33:c5:62:46:e1:ee:ee:84:81:f9:c1:
3a:d6:b1:30:40:5a:98:6b:5e:da:9d:d1:7f:e4:ef:
72:83:e1:b0:7d:82:5a:55:02:67:02:69:b4:55:93:
01:e1:ea:1a:ff:6f:02:f2:0e:41:36:02:62:fa:3e:
8b:2f:1d:eb:bd:f1:81:01:d0:fe:85:28:3c:37:1e:
30:8a:01:13:af:5a:94:a6:62:d3:9c:ac:48:40:69:
6a:35:ca:7e:9d:21:b3:01:b4:84:11:5e:d2:d7:c1:
26:31:39:5d:57:be:f0:72:fa:eb:c0:94:aa:24:f9:
80:4c:ba:a3:a4:e9:07:38:b2:49:dc:3b:89:c9:7e:
a4:f2:18:2f:fd:0b:83:23:36:6f:aa:ba:67:c8:dc:
93:09:5c:b8:4f:0c:96:08:88:92:ad:d0:ad:69:00:
2c:ac:32:7c:b4:91:1c:f5:72:35:82:e0:ed:66:4e:
6c:38:5e:9c:41:75:fe:5f:e0:d8:55:20:e5:19:9c:
12:77:da:d8:eb:b1:26:b7:ee:10:c6:c8:23:51:f5:
e3:34:92:b3:4f:1d:a3:fe:28:41:16:55:02:dd:99:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:B0:66:5A:C0:A0:53:13:B9:4B:44:AB:60:3C:EE:DF:ED:6E:26
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:31:77:0b:70:dd:28:51:81:02:c7:d0:14:fd:e4:b4:aa:ca:
22:a0:26:6e:cd:6f:d6:19:91:f4:fe:ae:8e:f5:d0:46:b3:d3:
01:ca:74:71:e0:c9:88:59:1d:20:d0:da:d6:92:12:99:22:92:
9a:3a:41:3b:62:cc:be:bf:cb:47:6c:90:af:b4:58:a7:e1:4e:
00:38:e8:e0:b2:65:76:f6:54:5c:4c:6b:f8:a6:3a:cc:bd:c4:
c5:a5:e2:04:49:4e:00:cc:53:ed:ea:f1:13:d3:34:20:99:5f:
4b:51:b1:ad:53:c0:2c:86:64:44:27:d9:5d:87:b8:32:7f:ad:
07:9b:a8:50:b4:80:c5:74:77:e1:15:21:82:68:79:c2:58:b6:
f9:57:9a:52:05:2b:86:d0:4d:94:93:7c:44:d5:c3:66:03:34:
a7:2e:5c:cf:f3:89:b4:52:23:7a:59:09:ed:c6:7a:71:15:c0:
74:52:3c:92:5a:11:e8:7d:2b:a7:f3:88:b6:b1:b3:f9:a6:ae:
9b:74:f6:00:76:68:54:5a:f4:2d:47:0e:ff:2e:a4:d8:c1:f1:
e1:27:d3:fa:1b:2d:79:1d:ee:31:ed:1e:6c:dd:4e:6a:4d:a4:
aa:dc:b3:b5:a5:6c:5a:69:70:72:a3:0f:16:a7:81:0e:a4:b8:
49:ae:2d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEBHeSbFNjhjbG/tnOvzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZGU3MDEyMmU0OTI4NWQwNWIwNWY5YmJmNDQ0OWJmYzgw
ODMwZTUwHhcNMjYwMzAyMDEwMTAwWhcNMjYwMzAzMDEwMTAwWjAzMTEwLwYDVQQD
Eyg1Nzk5YjA2NjVhYzBhMDUzMTNiOTRiNDRhYjYwM2NlZWRmZWQ2ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi3iFipIZT0mddXNa07c5KQIgEPd
4d/LLVY7wcuIIO9TM8ViRuHu7oSB+cE61rEwQFqYa17andF/5O9yg+GwfYJaVQJn
Amm0VZMB4eoa/28C8g5BNgJi+j6LLx3rvfGBAdD+hSg8Nx4wigETr1qUpmLTnKxI
QGlqNcp+nSGzAbSEEV7S18EmMTldV77wcvrrwJSqJPmATLqjpOkHOLJJ3DuJyX6k
8hgv/QuDIzZvqrpnyNyTCVy4TwyWCIiSrdCtaQAsrDJ8tJEc9XI1guDtZk5sOF6c
QXX+X+DYVSDlGZwSd9rY67Emt+4QxsgjUfXjNJKzTx2j/ihBFlUC3ZmYsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeZsGZawKBTE7lLRKtgPO7f7W4mMB8GA1UdIwQY
MBaAFLnecBIuSShdBbBfm79ESb/ICDDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYt
ODk1Zjg2Mjg3NTA2LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hZmFlNmMtMjk4Mi00MTE5LTkwNmYtODk1Zjg2Mjg3NTA2
LzEvdWQ1d0VpNUpLRjBGc0YtYnYwUkp2OGdJTU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDF3C3Dd
KFGBAsfQFP3ktKrKIqAmbs1v1hmR9P6ujvXQRrPTAcp0ceDJiFkdINDa1pISmSKS
mjpBO2LMvr/LR2yQr7RYp+FOADjo4LJldvZUXExr+KY6zL3ExaXiBElOAMxT7erx
E9M0IJlfS1GxrVPALIZkRCfZXYe4Mn+tB5uoULSAxXR34RUhgmh5wli2+VeaUgUr
htBNlJN8RNXDZgM0py5cz/OJtFIjelkJ7cZ6cRXAdFI8kloR6H0rp/OItrGz+aau
m3T2AHZoVFr0LUcO/y6k2MHx4SfT+hsteR3uMe0ebN1Oak2kqtyztaVsWmlwcqMP
FqeBDqS4Sa4ttg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:38 2026 by rpki-client