Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: 4LRyMu9dEN872d2TLuqo+EW9DONIlXWktCr+rr365Yk=
Subject key identifier: 07:91:DF:72:6C:9F:E0:D3:27:27:D6:98:29:A4:C2:60:A4:CB:0D:74
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 019D27E09884A2F4559CCAF51A04947EEE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0DEB
Signing time: Thu 26 Mar 2026 02:02:03 +0000
Manifest this update: Thu 26 Mar 2026 02:02:03 +0000
Manifest next update: Fri 27 Mar 2026 02:02:03 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: IRSeDFY7Ep/8gy+zTKcIvutZzvGv8Hbjsi4qckX6TEk=)
2: o-iJD6qSKBcMDFIpOFvRxAvVB68.roa (hash: h1nVK1njqo5/GGkuCAVn8ZtCHKNzAogi9mgaa3QkB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:98:84:a2:f4:55:9c:ca:f5:1a:04:94:7e:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Mar 26 02:02:03 2026 GMT
Not After : Mar 27 02:02:03 2026 GMT
Subject: CN=0791df726c9fe0d32727d69829a4c260a4cb0d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:47:cf:13:d7:70:02:39:9a:bb:fe:99:dc:
34:4d:90:35:10:ac:cd:75:af:66:aa:ec:4d:ca:2b:
5f:ee:f3:cc:ab:9f:34:b0:eb:0c:bf:3c:eb:a5:7e:
10:f4:21:91:d0:82:e6:06:5b:4b:eb:0f:ca:cf:ad:
7d:12:57:bb:5f:fe:f9:99:6f:71:68:69:35:48:af:
d0:e9:61:f7:9c:ce:77:86:df:44:40:f8:e8:f8:d6:
e2:fa:2d:97:d3:cf:54:83:a1:85:8d:9d:21:6f:6a:
ce:da:61:a6:21:06:18:91:3e:07:83:36:6a:90:f4:
02:e0:57:75:43:34:2e:d2:3e:fa:66:ba:21:4b:c0:
a9:8a:26:ee:31:ea:ff:48:f4:a0:59:35:05:f6:f5:
7a:20:30:f8:7a:d2:74:0d:e8:3e:4e:59:60:39:1f:
80:91:b3:f4:32:25:45:aa:c8:6d:ae:d5:b6:5d:35:
a9:81:ba:95:f4:f6:da:ed:53:94:6d:02:b1:99:b2:
88:24:80:6b:7b:f5:55:9a:4e:e7:53:79:d4:f2:a7:
9b:fe:17:4d:8c:4f:8d:d7:c6:9c:23:cf:2f:aa:4b:
50:9d:cc:ee:6e:60:14:b3:c4:af:ea:08:69:29:d4:
86:55:5d:0c:e0:d2:0e:d1:26:8b:06:36:ee:0c:03:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:91:DF:72:6C:9F:E0:D3:27:27:D6:98:29:A4:C2:60:A4:CB:0D:74
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f2:fc:8c:fd:01:87:ec:2d:62:d7:df:1a:fe:80:21:0f:bb:
9b:2f:3a:3f:70:70:b6:4e:b9:11:6f:88:3f:d4:7a:bb:f4:9a:
6b:b4:b6:8e:90:43:2e:22:57:c0:0e:b5:c7:d8:2a:e5:90:c2:
df:ac:84:f8:e8:3a:ea:b0:2d:1e:6d:dd:0b:c2:93:63:9f:8f:
9c:88:65:68:fd:a8:3c:dd:ba:b0:2a:69:81:b5:f1:0e:c9:78:
81:bc:40:49:d5:c9:0f:a4:18:a1:12:bd:fb:f1:78:9b:6f:bf:
dd:8a:40:20:5a:74:29:a9:76:4e:d8:06:b2:d6:1c:c0:2d:05:
cb:a2:a6:44:2a:9a:7d:7d:66:9e:19:92:a1:27:b8:70:d0:00:
b5:08:57:6a:63:4f:e4:4d:9f:d9:bd:85:ce:74:24:7e:f6:f8:
fd:33:d8:3a:1d:f2:98:d3:0b:64:f6:4b:54:91:ae:2e:17:c8:
29:f3:b2:07:69:27:b3:c9:5e:ef:dc:6d:d1:9e:7d:73:73:18:
ab:93:c6:f7:64:1e:ed:32:e8:6b:3e:4d:22:b3:ba:c5:bb:9e:
97:b9:69:7d:c2:ff:18:a1:32:e2:c4:5f:24:ff:7f:7f:40:f5:
36:77:28:5e:f1:2e:60:0a:77:0d:e6:4b:02:76:fb:b6:f2:65:
4a:3f:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:16 2026 by rpki-client