Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier: X8hqWxmNaUra851ndbDEm+feu3KK1V7KSQIIDs1BsWE=
Subject key identifier: D5:B5:AB:F2:43:95:7C:25:F9:81:4C:58:D8:EC:28:69:F0:01:DB:C4
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer: /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial: 019D28BBABBFCF46A7D9818FB0B8F0905B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number: 8C
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: Qj_3WxS8O8o7wmIyUx4pXMwVqjE.roa (hash: fvtswZKCFIAyXG2d6n+7ikzOJYZU7ZGDE94APklZjBI=)
2: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: Qy3qGFjmHTBbwsDhkn61DREnX/xRJsddLJm3AWOMW9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ab:bf:cf:46:a7:d9:81:8f:b0:b8:f0:90:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=d5b5abf243957c25f9814c58d8ec2869f001dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:18:b9:02:52:96:06:21:bd:75:eb:3e:13:
82:4e:52:b8:20:60:6b:56:e0:27:22:07:11:28:45:
62:6c:8c:8d:cf:9a:56:4b:9c:77:91:c8:32:3e:40:
3c:fa:07:f7:7f:3f:da:47:9b:40:e8:47:45:16:c0:
87:5d:d2:12:0b:c3:b4:a4:ae:18:7f:63:6c:8d:81:
04:a7:eb:9a:49:63:60:54:e3:bf:65:65:0d:37:02:
9c:e1:d1:de:b0:ab:8c:99:50:4e:9b:9d:9d:e7:87:
f6:49:de:14:3b:32:2e:d9:46:36:a9:f6:31:c9:9d:
a9:12:45:4f:81:20:12:cb:55:d2:6a:19:6a:23:97:
e8:a0:ce:9b:d4:ee:21:df:47:d6:c1:70:cc:1d:70:
45:47:09:54:d7:b9:42:51:e7:62:78:b8:1b:29:66:
ec:b6:38:54:fc:36:46:31:df:0a:8f:03:70:20:88:
f1:08:bc:09:c8:3b:d9:bc:bc:d2:41:96:43:cf:9f:
a1:96:29:05:37:e7:c8:1b:98:f4:04:98:ae:d4:80:
01:99:61:9d:f0:0a:0e:d7:22:64:c6:62:ac:72:06:
59:94:65:d2:94:96:dd:98:2d:d7:17:6d:97:0e:64:
23:eb:1d:3c:d1:99:68:b9:4d:ac:9d:22:19:0d:8d:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:AB:F2:43:95:7C:25:F9:81:4C:58:D8:EC:28:69:F0:01:DB:C4
X509v3 Authority Key Identifier:
keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:20:95:5e:92:b2:97:f1:53:8e:05:49:0a:36:1e:48:c4:b7:
41:b0:30:e0:d4:34:e8:64:43:ae:98:c0:26:e2:d1:c1:0b:e2:
f0:60:67:a9:68:f8:56:93:64:69:ce:a1:28:57:01:d4:75:08:
04:bd:ef:d5:e9:28:3c:05:eb:d2:76:69:46:09:13:7d:47:e9:
9b:16:87:46:1c:45:79:4d:ef:b1:bc:da:ad:ad:e7:f5:cb:73:
14:c3:be:81:fc:6a:9d:69:a9:70:85:71:7f:38:65:cf:7f:56:
ca:a8:47:1b:0a:c4:9f:87:4e:78:7b:2e:74:23:54:20:8c:48:
56:aa:04:26:a0:ee:b3:90:56:c0:7a:b5:fc:66:e2:f3:72:48:
57:04:69:f2:18:21:14:ab:d2:ed:09:05:e3:49:4f:a8:c6:43:
0c:14:ab:54:7d:59:a0:dd:4f:2a:87:9a:d2:22:e1:1a:0f:31:
5c:dd:83:dd:66:3b:0d:a6:0d:41:15:5b:c1:61:67:4b:f7:83:
d6:c9:66:81:c8:3a:87:fb:87:8e:61:93:02:d5:79:ea:b7:44:
fb:05:4c:28:11:6d:9e:46:f7:39:eb:b7:6e:ca:3d:74:45:54:
6f:82:05:d1:da:61:02:cb:42:60:bc:53:61:3c:87:d7:06:1c:
51:56:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:53 2026 by rpki-client