Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: NiOXiL9W7fXcPejxv6TCa0sQ/nQxaYJdv7MRFBdgb1M=
Subject key identifier: 18:39:E2:C8:B4:F2:41:88:F9:10:82:F0:F6:CE:10:6A:61:65:A6:EE
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 019D27DFD16282CCE32A0793FE00686B7D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 0B21
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: rgs3s5Yrolc4XiN+y2iMC/J+Af4Vm+/PNmYAjYavOFA=)
2: ryDXnnwnZr1091-wn3Xn8hWEPlQ.roa (hash: cLPzRbnAmpDPM25/ehEAiv6PVrI6yHFxO/FTdnRAlow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d1:62:82:cc:e3:2a:07:93:fe:00:68:6b:7d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=1839e2c8b4f24188f91082f0f6ce106a6165a6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:96:37:1b:f4:5e:36:ea:e8:7c:e8:ee:4a:
12:aa:62:ad:e9:a7:09:ac:4c:a1:35:b8:c9:19:03:
c8:1c:cd:16:82:1d:73:72:83:55:58:4b:f3:85:d2:
e2:29:38:be:11:06:78:8a:d9:fb:cd:ad:70:c7:13:
5e:4a:aa:1d:0c:56:22:8b:a3:f1:49:eb:dd:40:c1:
b2:9a:fd:3c:de:3b:a4:67:cb:b3:04:3f:35:04:fc:
be:f3:2b:6b:b5:b0:d4:13:32:8f:e1:d9:91:67:3d:
b5:4f:4f:86:3a:30:65:1f:b8:c6:0d:ce:28:d0:de:
b1:8e:f0:7a:e4:2b:06:61:48:9e:56:13:31:e2:03:
fe:52:9a:a3:59:62:d8:3c:d8:b7:8b:a7:43:08:b5:
81:db:40:3a:a2:22:5d:90:83:9b:bb:93:5e:01:21:
aa:62:03:f4:6c:2f:45:cf:77:dd:44:78:9e:ec:ac:
4f:b6:47:ac:60:01:7c:ab:d6:06:2e:5f:15:bc:b0:
53:64:b1:c2:06:45:cd:b5:a1:62:b4:64:29:a4:85:
92:42:92:36:29:87:76:32:3b:7d:99:de:68:b0:7a:
8f:d6:64:c0:60:81:a1:ef:bd:63:82:68:32:c0:8b:
32:94:cf:fe:20:c1:80:79:5c:6e:11:10:15:03:78:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:E2:C8:B4:F2:41:88:F9:10:82:F0:F6:CE:10:6A:61:65:A6:EE
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d4:85:9a:9d:97:70:69:b0:ad:3d:8a:5a:cc:a5:68:0f:34:
50:bf:73:04:c7:bf:88:79:36:1e:61:a6:a6:ec:3f:e0:cb:cc:
e1:c6:cb:e0:5d:4a:bb:fc:83:ec:d9:34:2d:db:8c:ed:77:91:
53:40:59:49:74:51:1c:cb:41:64:8c:01:f9:a9:d2:27:6a:e5:
40:5d:a7:de:da:da:b4:3d:7f:81:09:ad:f6:1a:df:6d:ee:7c:
bb:51:8b:ab:ea:86:ce:9f:ee:e2:91:22:df:03:35:16:fa:12:
01:07:02:17:39:8b:62:90:86:92:02:aa:5a:d1:77:22:5d:e8:
84:4f:96:4c:17:e4:73:2c:79:d3:4d:8d:47:4c:56:65:bc:0c:
eb:31:bf:ff:f2:60:67:14:a7:80:e4:30:9c:4f:53:ed:da:90:
56:c7:79:61:45:14:8f:25:b4:06:73:aa:f8:0e:b2:49:b8:cb:
dc:6e:e1:05:65:b6:0f:d5:cb:94:34:7f:b8:ed:28:d4:90:6d:
13:2a:ab:f3:97:35:c9:ac:fa:b1:1e:04:2e:b1:f7:c5:1d:1f:
3f:03:37:fb:fa:91:2e:d4:29:3d:73:08:11:ef:43:49:c5:d5:
c4:0d:0b:c8:eb:8b:ea:ff:b7:60:8f:1d:7f:8b:16:62:eb:c3:
89:12:46:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:38 2026 by rpki-client