Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: x5mzAJFhAN5uKrYhvQXdb8uimqzDh/aZg+mYJexj6fc=
Subject key identifier: C0:B4:6F:34:33:16:41:87:05:C8:40:45:E3:E3:C2:B7:5D:B0:B5:0B
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019D2772846A761E8AD021CC7D42103A0617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 15D1
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: 4vRrFfHEC3GgT1183FGac5Crjjs.roa (hash: ZrwSZSbeJqZyB/UsX8E/gauKcYuf9yaAKmeIWSckNBg=)
2: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: L92Z2OSGDo52PemqaJ9mPM1oIn+ByocWlP4U+BBJXKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:84:6a:76:1e:8a:d0:21:cc:7d:42:10:3a:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=c0b46f343316418705c84045e3e3c2b75db0b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:f1:63:a6:24:cf:42:65:44:e7:f2:52:38:
b6:3c:50:99:75:b4:27:25:a8:c8:55:01:c5:29:57:
cf:d8:cf:7b:c8:18:e0:9b:98:ca:c4:d2:6c:34:3c:
b6:cc:61:94:7d:5e:b5:29:c4:2c:72:04:e1:87:f3:
2b:64:e2:20:84:f9:f8:d5:63:0b:20:d1:af:e4:cb:
b7:cc:91:64:a5:b4:dc:9d:38:f9:63:24:2d:3a:cb:
6c:53:85:8c:1b:07:2a:ba:a1:c9:5b:76:a2:62:d4:
ee:f7:69:9c:e4:f7:a4:cf:7f:8f:fc:24:14:c7:24:
12:ae:45:f3:7c:cc:89:02:02:c8:86:49:fd:c6:04:
37:b8:3b:d1:41:04:93:fd:a2:95:73:48:b3:6b:d6:
58:09:d3:4e:f6:41:a6:4f:ce:7a:ce:8a:58:5e:e6:
f0:99:36:56:93:1b:75:83:1f:dc:02:ba:5e:93:7d:
1f:ca:b1:72:6c:c6:05:f5:e6:06:11:ea:4f:be:a5:
dd:95:bb:01:1b:38:33:e3:b6:14:ff:20:a1:c9:fd:
36:73:4e:fe:5a:c8:a7:6a:7a:8a:43:73:c3:0e:c8:
4b:06:6a:ed:4b:fa:b7:59:e1:12:6b:1a:ec:82:6f:
9b:ca:96:c1:ea:81:87:06:2c:ed:c2:6c:09:14:30:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:6F:34:33:16:41:87:05:C8:40:45:E3:E3:C2:B7:5D:B0:B5:0B
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:aa:62:99:0d:ac:26:e8:c9:e9:34:6e:6f:e1:8e:d1:2b:
4b:c7:01:4d:9f:38:d5:3e:a5:a9:2e:1d:43:93:e3:16:64:cc:
93:bc:93:8f:e8:75:be:ba:b6:81:ab:e6:75:b2:7e:ff:e9:f4:
00:e6:c7:a4:f9:3c:74:2d:9d:1c:89:34:96:b0:72:7b:c1:31:
a4:a3:64:d3:84:29:b9:a7:e7:2b:f3:b6:1b:22:bc:9d:26:21:
c6:89:ba:68:3d:7c:21:20:1e:e4:ea:8e:39:a8:1f:c0:29:c7:
59:87:83:ee:84:97:a1:a2:70:d0:d3:7d:a1:9a:10:77:f0:95:
6e:19:04:61:fe:fc:5f:2a:09:58:cf:27:b7:ba:b3:0d:d7:03:
7d:59:51:98:90:f4:65:45:86:24:fd:98:2d:36:26:3c:f4:5c:
a3:5f:bb:b5:f3:e5:f6:3d:23:39:84:d3:36:ea:35:8f:db:9a:
31:ee:0d:58:48:fb:32:12:1c:bb:ce:01:dc:4a:59:6e:c6:16:
44:25:de:bc:26:72:af:8a:56:71:b4:06:62:53:78:94:48:09:
9a:53:5a:44:87:b0:7d:77:e1:2a:e4:27:16:5a:44:b8:80:23:
c5:23:a1:fa:c2:f0:e2:5d:cc:61:ae:9c:40:17:89:0e:9d:e0:
f1:b0:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:29 2026 by rpki-client