Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: /OO3ZQv/ydJilY9G9cF+8JNoYKijXbgQB3KJXABRBoc=
Subject key identifier: 01:AE:45:5D:A5:25:09:E4:AE:EE:C6:6B:26:2B:3C:E3:AB:DD:11:47
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019D26282BB040FD88B375163A1122D318DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 187B
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: 70LnDBSoNrOEkEqVtSU93LOphGKUOT4WdaMsuDBVuC4=)
2: hEpkfnbvGtcIxWjUlVdPllfE-cY.roa (hash: QTunkkr+hN3fQscxIyK1dz5yS0xr1F0v7DcnxHiOT/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2b:b0:40:fd:88:b3:75:16:3a:11:22:d3:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=01ae455da52509e4aeeec66b262b3ce3abdd1147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:79:87:fc:cd:04:34:2f:97:cc:59:11:4c:
20:94:d9:d0:28:65:b8:91:85:0f:b5:81:35:86:b8:
f5:cb:05:5d:d1:bf:3c:06:f2:ea:32:6b:c0:5d:a7:
92:68:3e:f1:f0:9d:49:60:12:a2:54:e9:be:1f:bd:
61:ea:51:53:95:a7:00:7f:35:05:e5:99:1e:ca:d9:
30:17:41:7d:8b:a2:09:d7:ba:f3:85:76:26:1e:a4:
44:67:dd:2a:4a:36:56:b4:34:30:aa:02:93:f1:aa:
df:63:fc:a8:0f:f8:49:01:f8:be:9c:f1:23:66:80:
f6:d3:4e:2d:1c:aa:9e:29:b6:e5:e4:48:dd:e3:2e:
7e:2e:1c:9d:a6:c4:7b:cc:92:57:16:b0:00:ed:36:
df:ce:8f:9d:37:ff:c0:4c:2f:45:88:99:95:fa:3a:
c2:46:cd:62:f1:bf:89:c6:cc:f9:8c:e5:04:80:bc:
46:32:d8:32:c4:04:26:3c:6a:f4:b7:b0:13:7d:fd:
0a:a2:36:24:9a:2a:75:92:12:d1:13:4c:08:e8:93:
74:4f:18:19:e7:3a:c2:42:c5:53:6b:e8:04:c0:23:
a4:1e:02:61:de:8a:4c:7a:03:6b:fb:06:ed:e5:30:
9e:7a:1d:05:3c:e5:ee:4b:6c:92:70:06:7d:79:a0:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:45:5D:A5:25:09:E4:AE:EE:C6:6B:26:2B:3C:E3:AB:DD:11:47
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8e:ec:06:78:3a:d4:07:6b:83:9d:33:83:40:13:2e:04:8b:
ae:ff:c1:de:af:f2:d9:06:a9:a2:7b:b1:4c:4f:20:37:1a:23:
09:c5:f7:e0:8d:66:09:d2:60:17:b8:76:f9:3e:19:2a:fb:e8:
75:32:7b:31:ad:e3:07:81:75:86:47:25:92:36:87:43:08:d9:
4e:4a:86:bd:49:69:0e:67:74:4b:7d:d3:10:6e:77:24:90:87:
bb:16:d7:94:be:35:61:90:a2:fc:13:1f:6b:f7:d8:88:9d:7d:
35:bc:44:70:f2:76:c1:24:60:2f:b8:4c:cf:91:b6:78:f6:36:
10:95:73:4a:35:ff:90:8a:3d:a0:64:85:05:bf:8c:78:f0:2f:
32:74:08:a5:fc:b9:a7:e4:ff:f3:ba:b2:53:52:35:90:ab:bb:
19:54:e4:96:c1:a4:2f:b0:6e:30:6b:5a:c3:50:37:a6:fc:d7:
0a:da:b9:c6:40:0a:72:a2:12:35:a7:32:2e:d5:b5:f0:6f:3b:
53:1b:b4:5c:e3:f8:fa:a5:ca:f3:c0:67:b4:25:e0:83:78:81:
27:11:f0:f9:60:18:bb:ac:5d:53:1a:c1:9c:a7:8c:ab:42:8f:
bb:24:73:fd:71:29:61:f9:54:5b:e1:f8:60:d7:7d:16:9e:c0:
0e:74:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:51 2026 by rpki-client