
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: wZve5mnsio70nLPhEgbAdVlJ1/xAd+YSZBVf3YVXvJ8=
Subject key identifier: 6E:BA:09:D3:09:F2:80:14:A8:13:00:00:EB:3C:31:59:86:0B:58:19
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019D996319B9A88EC0D56963C45BF501E71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 1140
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: eTtxbBSKwDVGBpCGG0xb9UOEWWP4Bds5/oO6ja216sE=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:19:b9:a8:8e:c0:d5:69:63:c4:5b:f5:01:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=6eba09d309f28014a8130000eb3c3159860b5819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:5d:62:fa:c9:89:ca:12:ab:f9:21:81:bb:
a1:e7:2d:d3:6c:7c:bb:8d:51:b2:10:a1:b6:c1:5e:
14:2c:eb:46:99:8a:9b:91:5a:1c:71:3c:e9:7a:cf:
6e:53:ec:87:cf:10:0f:23:e9:94:30:09:5e:7a:83:
7e:44:78:01:53:11:98:ca:fd:0a:02:e6:5c:5b:b1:
c5:9c:d1:ce:f3:93:74:e2:ee:55:df:00:b1:64:7f:
fa:f5:69:05:0a:ef:08:84:cb:a6:28:d6:69:5f:47:
be:f0:90:5f:91:af:21:7e:34:4c:63:1e:c8:40:a1:
1e:f0:c2:26:58:99:1c:36:73:05:17:d5:88:7d:78:
ff:b9:b0:2c:f6:99:5e:d8:66:d5:d6:0c:95:ed:5b:
7f:de:51:39:58:db:1e:7c:f7:ec:eb:cb:32:5d:a2:
eb:64:c0:9d:5f:12:af:d6:b8:10:91:5c:f8:53:13:
8f:9d:16:2d:59:8b:a4:fb:62:bd:5a:a5:51:57:3b:
3f:80:a0:22:6b:8a:09:94:8e:0e:9f:d1:99:4b:d7:
e1:c3:2b:63:13:ab:e7:c6:e2:34:cf:c9:84:95:a9:
83:7f:22:11:3d:f5:37:60:ba:08:fb:09:67:9b:b5:
47:c9:b5:cc:ee:bc:a9:f9:fb:0f:71:c3:00:f7:2b:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:09:D3:09:F2:80:14:A8:13:00:00:EB:3C:31:59:86:0B:58:19
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:d4:8f:b5:a6:74:5e:79:15:fb:f4:05:a4:b7:43:3a:9d:
d2:ef:00:34:c8:9c:34:5c:c4:68:99:62:e8:93:c8:f4:9b:82:
b4:07:f1:24:49:ab:78:d3:f1:66:55:2b:8b:3f:aa:9d:78:6f:
e6:f4:d0:70:c1:b8:e3:db:e2:6f:c5:e7:04:e1:0e:5d:55:4e:
96:47:7c:0d:43:80:82:3c:ff:c7:cf:88:d3:db:c2:00:72:49:
7d:56:07:54:ce:10:9b:58:1c:ca:ed:d6:5d:dd:6c:20:b5:54:
bb:16:99:a7:4c:d9:f5:66:c5:16:33:a3:22:45:5f:d6:0b:d2:
f0:8b:69:3f:c6:e3:b2:3f:8f:fe:a1:ab:f4:1f:3b:02:a4:e5:
a1:66:ca:ce:c8:4f:df:02:71:ae:67:48:91:92:76:87:58:8e:
75:bd:4d:da:be:bc:48:62:c2:dc:80:83:bb:4b:0a:85:ff:b1:
ab:cd:24:4f:d2:8a:0f:4f:b1:54:c6:ec:35:77:fe:99:af:4c:
64:d2:ed:2b:28:7f:d5:cf:21:3e:60:72:6b:00:db:54:0a:0f:
5f:45:7a:f4:98:28:59:56:a3:18:d3:cc:01:36:3a:dd:50:ff:
df:ce:19:35:a7:7e:20:65:81:d5:2c:f1:13:cf:89:48:5e:0d:
b2:98:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:49 2026 by rpki-client