Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: aZvHhrPoFjB7VSLNBahkw73fSSxLrOE9JuJQ8DmbqRo=
Subject key identifier: DE:B5:34:74:A0:CA:80:73:BA:39:6B:A8:F1:5B:2D:F8:D7:1F:60:22
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019D254C478931D252B6A64AB6985FB3FCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 14:00:49 +0000
Manifest this update: Wed 25 Mar 2026 14:00:49 +0000
Manifest next update: Thu 26 Mar 2026 14:00:49 +0000
Files and hashes: 1: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: qdJeAn4LxZLlK9ofwMT8RuzcqsRI36gEnnsUF9iBtR4=)
2: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (hash: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:47:89:31:d2:52:b6:a6:4a:b6:98:5f:b3:fc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Mar 25 14:00:49 2026 GMT
Not After : Mar 26 14:00:49 2026 GMT
Subject: CN=deb53474a0ca8073ba396ba8f15b2df8d71f6022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:22:fa:9f:98:82:79:e5:bf:7d:d2:73:45:7f:
ba:59:e3:f8:e1:c5:79:8e:69:48:af:92:77:93:ff:
bb:08:b7:ec:7e:e8:3e:f3:d4:b6:77:b8:55:67:6b:
76:3e:51:4c:37:1c:b2:91:aa:ac:dd:65:c7:0a:51:
13:fe:b3:54:02:7a:bc:23:f4:4d:63:9b:13:2d:0d:
26:24:b5:b8:53:5b:a4:d3:bb:67:d0:14:48:28:a6:
0a:b3:3d:6d:90:0a:fb:81:ad:c9:a1:1e:31:03:16:
d9:67:01:e4:02:ad:35:f9:24:f4:39:37:3d:f1:cf:
cb:7a:3e:74:ab:4a:0c:d2:e8:7d:15:4d:1a:9e:eb:
b1:23:00:bb:82:c7:0f:2b:c4:8b:80:19:9b:99:d7:
80:71:a9:c8:18:ca:30:2d:2b:33:81:d1:d0:e4:51:
4e:9f:ab:88:0b:a6:e9:5a:91:80:7d:57:12:2b:cb:
0d:89:48:2a:bd:1c:fe:98:98:c0:76:f5:16:0c:99:
d6:d5:50:7c:0c:33:74:29:42:02:7e:46:96:c0:f5:
23:3d:79:48:9e:a5:bc:e2:97:ff:75:0c:5e:24:51:
1b:79:05:b2:41:31:a6:e4:9c:67:1e:5a:b8:d4:c8:
ae:1d:33:f7:bb:93:7f:a4:99:05:75:3c:2c:4d:10:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:34:74:A0:CA:80:73:BA:39:6B:A8:F1:5B:2D:F8:D7:1F:60:22
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:86:ed:c5:92:b4:15:d6:a5:20:c4:94:39:70:2f:98:d2:
4f:8a:41:0b:61:66:28:9c:b1:2b:fa:74:ef:77:e0:18:a9:ed:
d0:f8:f8:b6:38:dd:ff:94:aa:08:52:49:c1:99:af:79:9d:2c:
91:79:3c:01:a7:ef:13:d6:23:fa:62:3d:c7:e0:04:34:3a:34:
e2:7a:d2:39:0c:d1:6f:40:c1:86:01:32:5d:48:fc:eb:d4:78:
74:4c:44:13:40:6f:45:44:da:3a:14:4b:cd:9d:21:27:f2:7e:
45:fe:6d:65:25:2c:f9:9b:bb:ee:83:cd:98:4b:34:a1:8f:c1:
96:c6:2d:8d:fb:61:00:79:99:92:f4:03:b1:2f:d0:52:81:53:
fa:a7:ff:cd:6c:92:31:67:b5:b4:67:5f:d9:69:e3:e6:6a:50:
2a:ec:c4:e9:50:8d:b0:ee:ce:38:a5:26:92:65:d2:a1:1e:f8:
0a:fb:aa:dd:8e:c9:ec:1b:85:f8:c1:01:90:ea:09:f7:5b:49:
c3:a2:42:84:29:51:d5:65:68:a0:0c:07:c7:e7:8e:4b:c9:02:
49:95:59:ba:9f:1d:a2:99:98:ab:35:ec:7c:be:3b:87:3f:13:
46:e2:e1:b2:ea:27:98:1c:2b:3b:81:1c:65:22:00:e4:a6:8a:
ee:7e:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:11 2026 by rpki-client