Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File: UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier: HfnC3C9Rugg94xcx6d8wBop3ZT4qY0kRfOICDgoxG0s=
Subject key identifier: 49:D0:99:6D:47:42:46:7E:71:9B:51:3D:4F:65:DA:1C:AE:41:E8:FC
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer: /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial: 019FA89A1818658994621620407D8C847322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:38 +0000
Manifest this update: Tue 28 Jul 2026 12:01:38 +0000
Manifest next update: Wed 29 Jul 2026 12:01:38 +0000
Files and hashes: 1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: lmUfLzf9sBqPFtMJ/1ycwE2Ndjlzr71pDe4SyhFUzO0=)
2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:18:18:65:89:94:62:16:20:40:7d:8c:84:73:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Validity
Not Before: Jul 28 12:01:38 2026 GMT
Not After : Jul 29 12:01:38 2026 GMT
Subject: CN=49d0996d4742467e719b513d4f65da1cae41e8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:c0:cb:63:95:e1:90:1c:c0:b4:28:cd:20:
06:2c:13:dc:61:b6:5a:95:86:0d:6c:fc:dd:68:95:
52:24:ae:bd:32:ba:a3:63:36:a8:f4:12:58:f9:3b:
8c:04:c9:ab:30:d3:46:0f:52:a7:2c:fd:60:8d:43:
ba:50:f4:5e:f2:b8:69:4d:94:3f:09:e5:e4:1c:66:
2c:04:ab:e2:48:ee:bb:64:d8:44:79:13:0a:1b:1b:
d2:46:6f:55:5f:53:b6:1b:8c:89:70:c8:7f:ac:fe:
a6:2a:6e:18:ec:79:27:79:cb:97:b9:9e:0f:be:f5:
62:16:5a:2a:de:66:34:b5:95:d1:31:44:31:3f:54:
84:80:f7:8f:ef:2b:a7:15:c2:14:b7:33:d6:bc:95:
e6:5e:b6:84:34:af:d4:b4:22:e7:b3:7d:6c:53:88:
e4:12:b5:16:59:7f:ac:ef:d2:76:6e:e3:bb:25:bd:
d6:7a:21:4f:9a:d5:f5:63:94:36:37:1f:ca:24:09:
aa:45:37:7a:0f:95:fe:11:c1:ca:78:2b:03:e4:2f:
29:5b:ed:ff:e1:b6:c4:d1:43:41:9a:94:47:f4:fb:
28:d3:c0:42:bb:bd:23:77:51:dd:a5:e6:29:09:c4:
a5:8a:c9:9b:e7:cf:c0:09:86:1d:35:83:35:d9:13:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:99:6D:47:42:46:7E:71:9B:51:3D:4F:65:DA:1C:AE:41:E8:FC
X509v3 Authority Key Identifier:
keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:59:b1:e4:6f:72:5c:6f:84:0b:d3:5d:ed:4f:bb:77:9c:59:
7a:55:82:30:42:95:85:93:c5:ec:68:b2:df:0d:48:59:f0:15:
4c:4c:a5:b1:49:a6:04:60:67:57:8f:57:8a:fe:1b:5f:af:c2:
31:31:66:9d:7d:7b:f0:88:69:38:3c:2b:38:72:54:61:fa:44:
66:ca:f9:c0:95:3a:7c:a5:96:01:42:6d:01:cb:46:95:f8:1c:
30:a8:74:aa:b4:b1:ba:62:7a:3d:e1:2c:dd:9d:2f:73:e3:3a:
c9:38:ca:be:a9:4d:db:29:c4:d4:57:36:8e:23:b2:0e:b2:ef:
f9:8f:3e:f6:ce:87:6c:a3:3d:70:a7:0b:bc:39:3f:e4:92:7d:
e1:0e:4e:b7:ec:e0:e8:89:88:30:83:82:1b:7c:58:65:68:9c:
61:26:d5:b6:0b:22:b0:da:d3:c8:3d:c5:46:1c:20:67:6e:21:
74:36:95:7d:ed:29:3a:b6:66:e5:21:c9:b9:22:8c:17:59:c5:
0b:30:81:79:3f:c5:79:a4:da:de:14:4d:ac:3e:95:73:5d:3f:
5b:2f:22:e3:0e:34:58:39:fc:9e:93:9a:1a:9b:d5:56:ab:32:
57:22:9a:8d:b4:d3:57:dd:73:46:0a:f4:ef:ca:3c:c5:aa:99:
d5:18:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:53 2026 by rpki-client