Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: mQLc28QBAWbin7gHzoKMuZ3N4HiDJ3UnJ4FsYclQLmw=
Subject key identifier: C3:D9:50:16:5E:7C:B6:A7:E1:66:2F:7F:9D:B3:61:4D:A1:0D:87:6B
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019D28167F7DF1410EC5C94B901037DD5124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1600
Signing time: Thu 26 Mar 2026 03:00:56 +0000
Manifest this update: Thu 26 Mar 2026 03:00:56 +0000
Manifest next update: Fri 27 Mar 2026 03:00:56 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: y9yWltX2rjJqovm4n237vOwPEKg4/DoO3wGecY3laOc=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7f:7d:f1:41:0e:c5:c9:4b:90:10:37:dd:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Mar 26 03:00:56 2026 GMT
Not After : Mar 27 03:00:56 2026 GMT
Subject: CN=c3d950165e7cb6a7e1662f7f9db3614da10d876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:44:89:69:4e:3b:f0:91:c3:3f:9f:36:de:
cc:ed:8a:13:6a:0d:9a:36:c1:a0:ea:a6:58:4c:8e:
1e:cc:f2:83:b6:f6:fe:ad:a5:85:d2:f3:e4:6f:fd:
f6:d5:8e:4f:66:ee:d8:24:c5:dd:45:0f:92:38:0e:
5f:57:39:7c:64:7c:0a:e8:01:55:ec:bb:9f:a7:56:
13:83:fd:04:f3:8f:26:9e:f6:b3:7a:7a:d1:08:8e:
2a:d1:31:1d:aa:03:27:33:a9:db:3c:94:5c:7c:94:
16:ac:92:30:2c:a6:42:ef:33:82:8b:27:8b:ba:01:
43:a2:a4:fb:bc:bc:ce:e3:b8:79:84:92:f5:09:fa:
d2:d4:1e:7c:04:e3:e8:9d:2f:95:f5:af:56:9e:d6:
b0:62:d3:4c:c6:c6:46:c0:d6:98:5f:c5:40:2d:ab:
29:94:2f:9e:79:8e:3d:bf:f0:ab:5b:fd:85:a8:53:
3f:69:de:db:96:e9:d6:9d:d6:eb:1f:02:3a:e1:12:
7f:51:49:3e:41:f3:56:4a:3c:13:39:55:60:ec:77:
1c:e0:a7:5f:61:e6:75:95:88:46:a6:58:4c:8f:17:
18:c3:e4:78:a2:fc:67:38:e4:f0:ab:81:9d:24:8f:
f4:c2:14:d7:55:2d:eb:52:9c:28:ef:a5:4f:ac:fc:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:50:16:5E:7C:B6:A7:E1:66:2F:7F:9D:B3:61:4D:A1:0D:87:6B
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8a:4b:8b:25:0d:85:bb:ba:31:b1:bd:4c:e3:cd:1b:81:3f:
10:ba:87:5b:ad:01:ce:68:b0:fe:36:52:7a:05:af:8b:26:38:
3e:94:a5:fd:5b:3d:2f:e4:ea:b7:38:c7:a9:32:aa:f6:5a:50:
e7:e6:e9:b9:85:9b:1a:86:42:5e:96:b6:17:9d:aa:1e:b7:04:
e0:43:2d:21:2c:1f:3d:7d:8a:b6:b3:fe:c1:7d:fa:3e:52:a8:
34:6f:36:48:8e:c0:42:23:f7:de:50:3c:05:63:09:37:4d:f8:
70:b2:29:fc:46:b7:25:0b:8a:fd:16:54:bc:e2:55:e3:4b:67:
e8:ec:67:6c:5c:f0:af:16:f7:44:98:55:ac:67:db:b9:9b:a1:
dc:6b:50:d7:3d:6e:b4:78:14:38:31:d2:81:dd:6c:4f:65:7b:
0c:e1:71:67:db:0e:5e:ef:68:e6:06:e0:18:3d:25:9c:ac:6b:
bc:80:28:93:ee:90:86:0d:cf:c5:84:8f:d6:6f:f6:86:c3:2b:
57:5c:4e:d6:2e:cf:45:5d:e1:9e:af:f8:1a:94:1c:a1:4c:88:
97:ec:f1:35:7c:e4:96:25:d9:4e:53:fc:a6:dc:bb:cd:69:87:
6c:4f:15:86:ac:f5:c4:0b:78:4a:ba:fc:da:c1:71:be:29:89:
af:1b:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:40 2026 by rpki-client