Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: FRm9BVJM3tlAB5OV+RpWiu3PRIF7sgG40PEIiaY15Vw=
Subject key identifier: BD:4B:98:FF:51:5E:3A:24:39:79:A5:CF:BE:9F:E5:19:EC:A0:2C:C8
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 019D2703D7400688BA1104E87C7AF951B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0F6B
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: yKFbXtKSfma/3Xygtui/h8KeOGrCVrdn1NmMH1QCJcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d7:40:06:88:ba:11:04:e8:7c:7a:f9:51:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=bd4b98ff515e3a243979a5cfbe9fe519eca02cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:a0:03:89:9c:9f:39:15:e8:59:e3:ff:06:
3f:15:03:01:ba:f6:4c:75:c8:70:88:bc:3f:75:8b:
15:42:1e:81:ea:dd:c3:79:ad:ea:27:eb:db:52:d1:
f9:1e:05:31:5a:63:c6:8b:27:e1:34:49:de:aa:84:
84:1f:d4:05:17:cb:2f:4b:52:c1:cb:ca:53:b1:7f:
5d:91:bc:39:54:6f:78:4e:8d:d9:df:3f:ad:f2:41:
1d:97:29:8f:8b:33:a2:0a:25:52:27:7b:6f:4b:90:
6d:3d:c0:62:39:75:c5:89:0b:a6:08:00:5b:17:70:
1c:fd:d5:92:1b:1b:69:7d:56:75:94:b1:67:89:6c:
11:b1:fd:5a:0f:06:7f:d4:a1:f2:c5:9d:aa:57:57:
f1:dd:3a:35:0c:08:b7:46:77:8a:8d:c5:19:5f:25:
1c:cc:65:53:3a:46:f2:ce:9b:82:f2:06:75:9a:d7:
ea:48:95:31:03:28:79:63:34:ba:0a:6a:69:b9:7e:
47:27:55:06:92:e0:7f:81:11:0c:6e:cf:d4:d0:50:
49:a8:6a:fe:ac:81:11:86:56:a4:bd:d3:74:62:4e:
99:df:81:94:4e:c2:39:88:48:d1:a9:a7:6c:ac:ac:
dd:a0:a1:1d:1b:fb:3e:5e:14:02:ed:a8:b7:03:de:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:98:FF:51:5E:3A:24:39:79:A5:CF:BE:9F:E5:19:EC:A0:2C:C8
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:da:91:b8:58:5d:0e:2e:02:9f:82:23:51:7b:7c:1c:7b:b3:
d7:15:6a:7b:10:ac:41:44:fd:73:5b:a0:dc:b4:74:6c:9f:c0:
b3:a0:9e:c1:83:c2:fd:4b:7a:04:a4:b2:96:b7:58:35:11:da:
67:8b:a4:f7:87:93:4f:4a:e0:79:a3:67:b5:e3:9c:c3:13:74:
ca:fa:40:e3:d0:15:7f:fc:e1:4c:8c:b1:bc:e1:a3:e4:65:b6:
29:b9:c1:c9:f1:3b:dd:04:d5:87:8d:98:6d:d5:7b:9d:9a:5b:
92:a8:9e:6a:31:4d:f8:c9:1a:73:f4:1b:e6:61:4a:ad:99:36:
cd:be:a9:0b:c2:75:4a:48:df:dc:02:54:49:0a:3c:ed:d4:e6:
50:7e:1a:4e:5f:cc:9f:bb:47:54:11:30:ac:db:a1:99:bc:ab:
30:e1:5d:49:0a:f4:f1:a1:53:fa:11:0a:19:cb:27:21:86:65:
9d:ff:e3:fd:b4:56:06:a5:e5:f0:b7:19:03:80:ef:4e:0a:01:
2d:7c:b9:8e:56:9c:a3:39:8c:0d:f9:2b:9f:4e:f8:39:d8:72:
45:1b:e7:c1:06:a6:ee:8f:db:01:c5:cd:9a:28:6f:07:9d:ba:
9a:e8:6a:62:b8:89:c1:aa:e4:51:3a:f1:75:36:5e:84:ed:f7:
c4:ff:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:19 2026 by rpki-client