Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.mft
File: UnflGtXwNMxWbBkw8ZgwYDP2ZPM.mft (raw, json)
Hash identifier: RY5zFk9QkdbYI2H0ayRVTIz/GOUTXJuO5S6weUMnb3A=
Subject key identifier: 4E:77:CE:B2:8A:C4:BB:ED:2E:23:5F:82:24:FD:BD:FB:D9:59:25:6D
Authority key identifier: 52:77:E5:1A:D5:F0:34:CC:56:6C:19:30:F1:98:30:60:33:F6:64:F3
Certificate issuer: /CN=5277e51ad5f034cc566c1930f198306033f664f3
Certificate serial: 019D3307A0983C474893C1BAA28B54BE2887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.mft
Manifest number: 46
Signing time: Sat 28 Mar 2026 06:00:31 +0000
Manifest this update: Sat 28 Mar 2026 06:00:31 +0000
Manifest next update: Sun 29 Mar 2026 06:00:31 +0000
Files and hashes: 1: UnflGtXwNMxWbBkw8ZgwYDP2ZPM.crl (hash: L6DhidQ3zEqY5FvjCw9ZVRILjVsz0Mne2laQe04rgv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:a0:98:3c:47:48:93:c1:ba:a2:8b:54:be:28:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5277e51ad5f034cc566c1930f198306033f664f3
Validity
Not Before: Mar 28 06:00:31 2026 GMT
Not After : Mar 29 06:00:31 2026 GMT
Subject: CN=4e77ceb28ac4bbed2e235f8224fdbdfbd959256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:c1:d4:34:9b:61:7b:97:50:63:bd:fd:21:
13:3a:83:c4:c9:e5:61:d7:72:6e:5a:87:ae:0b:a8:
db:73:5a:76:f6:a4:c0:27:bb:3f:da:78:23:a9:8d:
2e:d9:83:2f:ff:a5:15:ea:25:80:9a:6b:99:ad:40:
4e:2d:04:32:9b:9f:9c:64:94:60:c3:14:31:26:00:
47:60:8d:53:99:83:78:e2:ff:7d:5f:bd:5d:c9:0c:
b6:26:ef:84:2c:d2:c9:ed:66:c7:3b:01:54:66:1e:
18:0e:e1:88:57:51:81:18:a2:f8:dc:d9:3f:a1:af:
34:ce:5b:fd:8f:bb:51:27:c8:24:e4:b5:f3:d5:dc:
61:fa:1a:16:13:06:e0:c0:bd:3b:34:24:a1:51:11:
03:61:f0:14:17:be:5c:5a:f4:01:63:e0:36:38:d2:
30:13:e8:bf:03:05:86:f7:d7:b7:f3:ea:35:88:5c:
0b:d5:88:3b:87:fc:d3:97:4e:3d:12:2c:ad:c9:4d:
99:ca:1e:af:6e:98:5f:8e:2e:63:2e:0c:6a:e9:2c:
38:31:30:f3:3e:50:ff:9d:d6:95:20:77:b7:dc:18:
1a:72:b7:69:1c:5b:64:99:27:b5:0b:5b:a9:38:29:
f2:a8:da:e8:9c:57:d4:69:57:b5:13:22:8f:07:fd:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:CE:B2:8A:C4:BB:ED:2E:23:5F:82:24:FD:BD:FB:D9:59:25:6D
X509v3 Authority Key Identifier:
keyid:52:77:E5:1A:D5:F0:34:CC:56:6C:19:30:F1:98:30:60:33:F6:64:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/UnflGtXwNMxWbBkw8ZgwYDP2ZPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:68:ae:2f:78:7c:36:ce:8a:20:e7:89:be:dd:0e:d0:e9:31:
cd:62:91:62:42:7d:e8:de:9f:01:df:5d:7e:92:c7:66:79:64:
e1:be:e6:d4:0a:24:24:c3:de:39:6b:f9:e2:6d:89:0e:1c:50:
13:f7:40:71:d5:65:3a:77:76:6d:57:59:f0:59:db:f4:59:44:
cb:47:ab:d7:a5:9b:a2:24:76:ec:92:39:1a:c8:8f:89:ea:9c:
61:de:15:5c:1a:4c:1c:9d:71:df:c7:8e:f0:57:8a:21:f2:3f:
ba:d1:f4:f3:5c:2a:1a:d9:00:5f:fd:3d:43:d5:4b:90:82:dd:
59:51:7f:c1:06:fd:95:a8:a2:ce:60:90:5b:0a:0e:de:12:6e:
a8:1b:af:2c:4a:61:3e:5f:b6:7d:62:58:c1:ed:bd:e6:42:16:
b9:be:c0:49:3a:79:2f:98:40:41:98:5b:67:69:d9:a5:79:29:
9b:d1:16:85:24:0f:9d:32:35:10:20:1f:1a:26:65:75:71:60:
c7:75:db:44:64:91:90:fb:41:4f:e8:bf:45:3e:f5:06:01:6b:
ca:83:62:c8:2d:bd:4e:71:15:e0:08:86:c1:73:45:d8:81:fe:
c8:8b:34:6f:91:74:18:8c:9e:2c:40:26:c4:e0:c7:5d:6d:e8:
f6:62:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:13 2026 by rpki-client