Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: H2Zp5ZldR0czWwds2oRhkzcftCjE0WZJzrq9nMc3hxo=
Subject key identifier: 7F:8F:78:F5:7C:DD:84:16:43:7E:0D:4A:19:07:91:50:A6:6F:4B:BF
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 019D25833E81941C6A9FA29F9B0B674385FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 15:00:51 +0000
Manifest this update: Wed 25 Mar 2026 15:00:51 +0000
Manifest next update: Thu 26 Mar 2026 15:00:51 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: bavNkpSwRL9wA1vCmZgnQa9CKwoc8HjACLnJZeLX0b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:3e:81:94:1c:6a:9f:a2:9f:9b:0b:67:43:85:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Mar 25 15:00:51 2026 GMT
Not After : Mar 26 15:00:51 2026 GMT
Subject: CN=7f8f78f57cdd8416437e0d4a19079150a66f4bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:88:71:17:19:30:30:a9:3f:04:f2:75:72:
af:f3:ac:0f:47:3e:ca:a8:48:5c:13:54:1b:16:6f:
b6:23:a2:ed:5d:df:b8:91:6a:5f:15:aa:7a:97:b9:
7b:41:27:4f:c5:d9:56:df:61:1c:fb:2f:34:70:6b:
7c:d8:8a:b9:a5:92:3d:fa:61:23:91:38:89:01:f4:
d6:d7:fa:b9:93:e2:ed:78:d6:7a:8a:9b:49:45:48:
2e:08:19:92:e5:96:d1:ce:79:a4:6f:bc:8c:99:48:
f1:87:4b:3d:bb:87:73:51:f9:dd:9d:c5:6c:38:3a:
b5:e7:a9:f4:b8:c7:5b:26:7d:9a:00:a3:4f:3a:81:
3f:af:94:ba:5a:88:04:03:b3:b0:7b:64:93:6a:a1:
ec:90:03:28:fd:dc:3c:d0:30:1a:31:be:d1:5a:9e:
3c:bc:3e:0f:d3:84:5e:dc:1d:88:c9:8f:70:cf:1b:
21:c9:c5:f8:59:20:cf:ac:83:b7:ab:e8:95:a1:79:
5a:b6:c4:99:92:eb:b4:fa:f2:48:d5:4f:58:cb:69:
8a:9a:78:d4:41:87:fb:9a:aa:9c:af:fa:a5:3d:0a:
9d:02:03:bb:3c:f2:ee:2f:96:28:14:df:55:44:c0:
86:17:2d:48:c9:9d:8f:ca:60:df:91:63:b2:d0:04:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:78:F5:7C:DD:84:16:43:7E:0D:4A:19:07:91:50:A6:6F:4B:BF
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:d8:ac:a1:db:e0:82:d2:6f:82:89:88:8a:26:70:e6:71:
23:ad:38:00:fb:1c:c4:e1:27:9c:04:bb:55:b3:ae:2b:60:cd:
05:ca:fd:19:ce:dc:d9:b4:25:0e:e8:bd:49:64:55:91:43:2f:
a9:57:30:8c:ea:94:e7:8a:d6:17:ad:8c:d1:4d:75:18:2a:5b:
0b:8c:58:c4:20:2d:06:34:ed:64:95:58:25:ff:0d:74:69:e6:
7c:b5:74:99:d4:12:1d:9b:8d:79:e0:6c:95:31:2d:41:ca:0b:
ab:7d:10:e5:3e:1d:7c:31:c6:65:9c:46:f6:f1:2f:6a:d8:5a:
f9:7f:d1:c5:1f:45:19:8e:c0:78:93:e2:09:50:3f:eb:40:eb:
8a:a7:bc:24:ef:bd:ed:47:f8:57:b7:39:32:61:61:15:f1:8c:
ac:de:c4:4e:42:3a:1c:73:a2:1f:f1:ee:d5:e8:33:3e:bb:be:
f9:84:28:22:7e:26:4e:d0:de:4e:b8:a9:5e:8d:d2:28:6a:20:
ad:8e:01:01:29:83:db:38:95:61:34:8d:1c:dc:40:5b:fb:e0:
b7:96:ab:2a:f9:0b:32:63:c3:85:01:8d:f1:15:18:61:6a:d9:
ae:e9:0c:91:df:ea:ba:11:e7:de:09:f3:cd:21:8e:48:c9:ae:
94:3b:ea:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgz6BlBxqn6KfmwtnQ4X7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1
NjQ1M2IwHhcNMjYwMzI1MTUwMDUxWhcNMjYwMzI2MTUwMDUxWjAzMTEwLwYDVQQD
Eyg3ZjhmNzhmNTdjZGQ4NDE2NDM3ZTBkNGExOTA3OTE1MGE2NmY0YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgqIcRcZMDCpPwTydXKv86wPRz7K
qEhcE1QbFm+2I6LtXd+4kWpfFap6l7l7QSdPxdlW32Ec+y80cGt82Iq5pZI9+mEj
kTiJAfTW1/q5k+LteNZ6iptJRUguCBmS5ZbRznmkb7yMmUjxh0s9u4dzUfndncVs
ODq156n0uMdbJn2aAKNPOoE/r5S6WogEA7Owe2STaqHskAMo/dw80DAaMb7RWp48
vD4P04Re3B2IyY9wzxshycX4WSDPrIO3q+iVoXlatsSZkuu0+vJI1U9Yy2mKmnjU
QYf7mqqcr/qlPQqdAgO7PPLuL5YoFN9VRMCGFy1IyZ2PymDfkWOy0ATMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+PePV83YQWQ34NShkHkVCmb0u/MB8GA1UdIwQY
MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt
ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1
LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAHYrKHb
4ILSb4KJiIomcOZxI604APscxOEnnAS7VbOuK2DNBcr9Gc7c2bQlDui9SWRVkUMv
qVcwjOqU54rWF62M0U11GCpbC4xYxCAtBjTtZJVYJf8NdGnmfLV0mdQSHZuNeeBs
lTEtQcoLq30Q5T4dfDHGZZxG9vEvatha+X/RxR9FGY7AeJPiCVA/60Driqe8JO+9
7Uf4V7c5MmFhFfGMrN7ETkI6HHOiH/Hu1egzPru++YQoIn4mTtDeTripXo3SKGog
rY4BASmD2ziVYTSNHNxAW/vgt5arKvkLMmPDhQGN8RUYYWrZrukMkd/quhHn3gnz
zSGOSMmulDvqWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:26 2026 by rpki-client