Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier: qRngABNZiuzLJBUqpFG432fuiInEqMNt+Lo4RuMRUqk=
Subject key identifier: AD:75:D8:8B:80:C2:9B:8D:22:28:F9:8A:8C:28:D6:8D:68:28:6D:31
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 019D273A945843F499D924A51EC1EEFED346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (hash: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU=)
2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: SAgTXgN56TaSdgY9JsjnH2breRtwoyclI8Jl5jxBjXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:94:58:43:f4:99:d9:24:a5:1e:c1:ee:fe:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=ad75d88b80c29b8d2228f98a8c28d68d68286d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:1c:27:3d:3b:f3:bb:51:c1:46:d1:b0:91:
d3:76:2a:bb:20:d1:d7:de:23:26:18:86:d3:8a:2b:
53:ac:d5:fe:b5:8e:2b:f3:91:4f:c9:11:58:e9:44:
9f:12:84:ce:0b:9d:b4:b3:e3:bf:f9:53:1d:72:27:
a7:a1:3f:70:8f:8f:d8:59:8c:6b:43:17:90:6b:8d:
bc:89:36:9c:d8:13:e4:95:23:41:89:b0:99:24:0e:
7d:dd:f0:4b:4f:bc:a8:d6:46:2e:04:af:f9:7b:3f:
fe:9f:36:f5:7e:49:dd:19:9d:41:6d:59:4e:e6:ba:
55:c7:2b:8a:c5:c1:79:7c:f2:d5:2b:32:dd:f7:1e:
a5:72:9a:d8:cb:a3:6e:7b:0a:da:b0:6c:e1:a0:52:
e3:1c:de:2d:16:9b:89:c8:0b:5a:51:d1:1b:dc:68:
34:3e:69:27:69:26:fe:ad:75:06:4b:d1:d1:c4:fe:
c8:91:b4:20:45:fb:14:f8:2a:75:65:29:3f:a0:ed:
5f:66:4d:50:e9:4a:0a:ce:3c:17:26:54:5c:e1:59:
d4:49:48:df:7e:85:ac:4a:82:72:63:f4:64:28:f3:
4a:89:0b:c6:54:53:ee:4c:7c:04:60:7f:94:14:f8:
52:c7:81:75:3b:5e:cb:9d:55:4d:2b:85:57:48:0c:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:D8:8B:80:C2:9B:8D:22:28:F9:8A:8C:28:D6:8D:68:28:6D:31
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2d:9e:3c:cd:48:10:34:23:7b:b0:a1:a2:e2:0b:58:eb:33:
7b:45:50:59:57:62:a3:60:4e:20:fc:6f:77:3b:79:eb:b7:69:
57:25:ea:22:a0:e7:02:e8:79:54:b1:ec:36:24:dd:1a:c3:0e:
20:a5:a1:b8:50:c1:9d:9f:f2:9c:40:b2:94:bc:13:1f:97:05:
d3:4e:23:6e:24:5b:1e:0a:2b:c1:6c:6d:26:c1:8a:df:92:bf:
72:a6:7d:80:fa:3a:d6:b5:68:8b:c1:9c:3c:b5:70:1d:bb:08:
0e:ba:78:92:9a:67:3a:89:8a:56:25:61:f1:44:9c:a9:3d:30:
3a:89:a6:bc:07:cf:e0:39:07:51:30:5c:f7:5b:d2:1f:fb:20:
de:d3:cc:26:64:1f:7c:28:c7:25:49:22:bc:2c:36:62:ae:5d:
70:76:44:ee:9e:53:4a:62:ae:97:f1:f6:dd:cc:4d:ff:c0:de:
40:ef:18:18:f2:47:8e:09:b1:57:c2:11:68:26:04:d3:f7:e5:
68:88:1c:41:f6:44:05:cd:17:cd:db:38:7a:f1:e3:5d:d5:f0:
3c:d7:f8:23:1d:a2:bd:82:d7:3f:53:e3:99:4c:1e:a0:b0:d6:
85:63:34:d1:20:80:9b:76:13:31:b8:51:9a:d5:ed:5d:a5:ab:
7f:75:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:59 2026 by rpki-client