Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
File: UgX1htgmO7BtZAUPj0hMFOgDxLI.mft (raw, json)
Hash identifier: PwSl7QMJ9OszujPmRbrEXJpNE+yBfX9/OxA9GEzcZEs=
Subject key identifier: 62:B0:D0:BC:85:35:84:61:C5:47:FF:B5:29:CC:68:44:38:60:86:3D
Authority key identifier: 52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
Certificate issuer: /CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Certificate serial: 019D98F44457D2A6D8473F175324437BD8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
Manifest number: 0EFF
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: UgX1htgmO7BtZAUPj0hMFOgDxLI.crl (hash: 8cwO31Yl26tRq3O3FlKLl4cyCLOy8l6kX7GUwDBdeiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:44:57:d2:a6:d8:47:3f:17:53:24:43:7b:d8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5205f586d8263bb06d64050f8f484c14e803c4b2
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=62b0d0bc85358461c547ffb529cc68443860863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:69:18:d5:64:d8:10:10:1f:62:74:12:ea:
f5:3b:59:7d:1b:93:66:48:68:e3:f6:85:44:a1:88:
17:ec:c9:37:14:9a:13:71:99:45:0f:b3:a7:91:73:
35:cc:20:45:fb:94:16:d1:40:57:02:e4:75:79:2a:
45:b5:75:01:e7:b4:05:cb:6d:2f:30:79:b7:54:37:
83:27:28:c9:00:e1:90:0e:01:f4:3c:f8:a4:b6:48:
86:fc:1c:34:db:9a:2f:09:7e:2b:77:da:6e:af:16:
9f:74:bc:db:31:9f:ce:d2:0e:72:21:cf:be:90:34:
49:71:e1:07:4d:86:5d:0f:e0:12:70:ae:1d:c6:67:
67:72:2e:6e:d5:e0:19:11:8f:3a:16:22:41:03:7f:
b9:1e:6f:84:44:c8:84:dd:f0:60:70:4c:5e:27:33:
31:8b:01:1b:a9:0d:f0:7e:b6:de:f6:e8:a7:68:ef:
78:28:73:05:88:a2:4a:49:ca:21:de:9a:57:6b:85:
80:c2:0d:a3:40:79:07:10:7d:28:28:3a:eb:68:66:
9d:08:0a:35:4e:b9:bb:2d:2d:d7:1e:47:49:09:d7:
b0:e6:d8:aa:ff:4a:bb:92:93:2e:61:3e:00:f2:11:
ab:26:fd:c6:e0:d4:26:5d:95:d9:14:5f:29:49:47:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B0:D0:BC:85:35:84:61:C5:47:FF:B5:29:CC:68:44:38:60:86:3D
X509v3 Authority Key Identifier:
keyid:52:05:F5:86:D8:26:3B:B0:6D:64:05:0F:8F:48:4C:14:E8:03:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgX1htgmO7BtZAUPj0hMFOgDxLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/98ed86-fe7d-4011-afd3-0f2573eca2e4/1/UgX1htgmO7BtZAUPj0hMFOgDxLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c7:69:f4:56:1e:80:92:80:19:de:54:8c:d0:67:75:76:64:
68:03:63:23:89:9e:0d:db:11:88:81:4d:5b:dc:7a:0d:b8:f6:
56:f0:6c:68:56:83:7c:8f:c5:f5:e6:5c:56:72:96:25:f3:fb:
1f:bc:5c:84:e4:19:56:25:3c:3d:5b:55:f3:2c:2f:62:c1:75:
32:59:17:31:ee:c3:42:71:7a:29:dc:fa:46:19:89:5b:50:38:
04:2a:e1:c0:e2:f4:8a:f1:99:85:2d:59:7a:47:2c:a9:13:5d:
81:bf:9d:d7:d6:e7:d8:94:43:52:89:22:8f:80:54:67:9a:ea:
7e:7e:45:ff:d5:9a:5a:92:d3:e8:49:dd:44:ac:34:ce:de:11:
fa:0e:8d:5b:1b:e2:11:fd:b2:5e:28:fe:2b:5e:a7:94:c2:6e:
88:b4:47:f3:30:e6:2c:50:08:4e:99:6a:c3:bf:de:d3:60:cc:
12:63:44:c8:b1:6f:45:52:15:ca:a8:62:e2:dc:ca:14:5c:eb:
57:81:3b:fc:e5:3c:6f:d2:47:eb:21:7c:66:ae:cc:e6:4b:6b:
bb:d5:09:88:17:24:b7:2e:43:24:48:22:15:f6:de:f1:88:50:
75:ca:f6:6a:4c:3a:df:38:2f:1d:a8:f2:d9:6f:fa:b0:04:56:
90:1d:ad:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9ERX0qbYRz8XUyRDe9jxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDVmNTg2ZDgyNjNiYjA2ZDY0MDUwZjhmNDg0YzE0ZTgw
M2M0YjIwHhcNMjYwNDE3MDEwMDM4WhcNMjYwNDE4MDEwMDM4WjAzMTEwLwYDVQQD
Eyg2MmIwZDBiYzg1MzU4NDYxYzU0N2ZmYjUyOWNjNjg0NDM4NjA4NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNRpGNVk2BAQH2J0Eur1O1l9G5Nm
SGjj9oVEoYgX7Mk3FJoTcZlFD7OnkXM1zCBF+5QW0UBXAuR1eSpFtXUB57QFy20v
MHm3VDeDJyjJAOGQDgH0PPiktkiG/Bw025ovCX4rd9purxafdLzbMZ/O0g5yIc++
kDRJceEHTYZdD+AScK4dxmdnci5u1eAZEY86FiJBA3+5Hm+ERMiE3fBgcExeJzMx
iwEbqQ3wfrbe9uinaO94KHMFiKJKScoh3ppXa4WAwg2jQHkHEH0oKDrraGadCAo1
Trm7LS3XHkdJCdew5tiq/0q7kpMuYT4A8hGrJv3G4NQmXZXZFF8pSUeifwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKw0LyFNYRhxUf/tSnMaEQ4YIY9MB8GA1UdIwQY
MBaAFFIF9YbYJjuwbWQFD49ITBToA8SyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMt
MGYyNTczZWNhMmU0LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85OGVkODYtZmU3ZC00MDExLWFmZDMtMGYyNTczZWNhMmU0
LzEvVWdYMWh0Z21PN0J0WkFVUGowaE1GT2dEeExJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8dp9FYe
gJKAGd5UjNBndXZkaANjI4meDdsRiIFNW9x6Dbj2VvBsaFaDfI/F9eZcVnKWJfP7
H7xchOQZViU8PVtV8ywvYsF1MlkXMe7DQnF6Kdz6RhmJW1A4BCrhwOL0ivGZhS1Z
ekcsqRNdgb+d19bn2JRDUokij4BUZ5rqfn5F/9WaWpLT6EndRKw0zt4R+g6NWxvi
Ef2yXij+K16nlMJuiLRH8zDmLFAITplqw7/e02DMEmNEyLFvRVIVyqhi4tzKFFzr
V4E7/OU8b9JH6yF8Zq7M5ktru9UJiBckty5DJEgiFfbe8YhQdcr2akw63zgvHajy
2W/6sARWkB2tLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:52 2026 by rpki-client