Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: WUlJLkfIHOY2voHi8GQccK7AOa32xt48iQgrDIqv3R0=
Subject key identifier: B3:A6:B4:18:02:36:04:28:87:D2:E8:5D:E4:82:14:42:04:98:D4:87
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 019D299725AB14389515072A9C7332F65073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 17C9
Signing time: Thu 26 Mar 2026 10:01:04 +0000
Manifest this update: Thu 26 Mar 2026 10:01:04 +0000
Manifest next update: Fri 27 Mar 2026 10:01:04 +0000
Files and hashes: 1: DSNdKFy2lJZTElrkr1CT78IoHhA.roa (hash: tO7SJshvN0dMXN0HLWLnqvO3CSU22x0MTTkNed+s0+0=)
2: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: Fh3QKQi28Lzg6tIoZZtSUVYzoFILKuV1V44lDFlkH18=)
3: djYcUtesGEo6eXtApCancG1zlf0.roa (hash: 44l8vn7/ig8bOerFV7hDXQ04Yd8aH+DUwqLc2CBTt4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:25:ab:14:38:95:15:07:2a:9c:73:32:f6:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Mar 26 10:01:04 2026 GMT
Not After : Mar 27 10:01:04 2026 GMT
Subject: CN=b3a6b4180236042887d2e85de48214420498d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:4e:04:f1:c0:73:c8:99:48:f5:f6:3f:9e:
56:ae:53:8b:26:33:9b:da:1d:f8:ed:eb:1e:05:52:
0c:33:16:f9:42:7d:21:db:93:aa:41:25:d1:2c:ef:
11:ea:1f:1a:a7:11:17:a0:5d:ee:80:50:51:83:ef:
51:b9:5c:eb:71:c5:39:60:85:cc:0e:6a:03:18:56:
c8:d6:cb:f2:fc:28:41:20:50:d1:16:c9:62:72:9f:
c6:3d:fa:3f:71:92:de:3d:4c:c9:36:ae:8f:9d:1e:
e4:40:22:3b:71:b9:34:15:0e:37:29:50:bb:05:c1:
54:24:a0:6f:cb:0b:cf:a5:de:3b:4a:a3:42:52:0c:
16:95:9f:9b:d2:8a:ed:0d:40:7e:8c:ff:2e:46:7e:
1a:ca:a8:5f:12:81:24:1f:d2:0a:0f:89:17:83:fe:
59:cb:2a:2f:20:07:82:2c:b8:79:5c:ac:e4:f5:3a:
b6:4a:a1:69:6b:d4:05:18:97:4c:9d:04:20:4e:b8:
3c:b6:28:aa:37:12:1a:e3:e5:fe:0b:df:cb:59:3d:
cf:30:f4:42:3c:95:95:19:49:e1:95:94:13:73:83:
bd:56:71:ec:a9:a6:e3:38:fa:33:ab:61:00:ab:48:
72:e9:ac:be:3f:91:c9:3f:9c:73:01:cc:45:fd:c2:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:B4:18:02:36:04:28:87:D2:E8:5D:E4:82:14:42:04:98:D4:87
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:83:bd:31:94:f3:22:a8:28:71:12:be:24:02:53:0c:1a:24:
44:f0:b2:2d:f2:d2:32:3b:5c:39:48:3d:c7:b3:a0:3c:a7:e5:
f0:05:f7:17:b7:c5:a1:64:22:20:b6:d9:bf:f9:26:c4:6c:1c:
e4:42:57:67:f9:fd:ee:f3:ca:5e:a4:b3:66:ec:3b:ae:64:df:
94:41:08:56:cf:fc:b3:93:49:bb:2a:d5:85:46:f5:28:aa:84:
21:84:c6:02:20:29:51:8c:9a:c2:7d:ed:6b:e7:54:af:e0:1b:
17:88:84:de:2d:63:97:af:26:6c:d5:fa:54:f5:ea:ce:eb:c8:
2f:e5:ed:a0:68:2d:95:2f:ac:e4:82:f2:80:2c:1e:f8:32:c9:
99:c8:75:e9:be:6b:43:9f:33:e1:40:b3:30:7c:32:52:60:59:
80:81:0c:27:74:0f:37:4e:c9:64:c9:1e:e8:b6:47:27:26:8d:
bb:fe:7b:6b:a4:94:c7:81:29:f4:4d:c4:77:0e:46:d7:cd:6d:
35:2e:67:fa:e2:9c:03:ef:06:a3:a2:8c:95:e3:50:46:58:24:
e6:88:9d:71:cb:d5:b5:d0:0a:65:21:43:a0:a4:82:0d:ba:f8:
b5:c4:4d:8d:64:41:dc:7d:ee:be:92:f5:de:f1:78:50:6b:36:
3b:6e:ea:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plyWrFDiVFQcqnHMy9lBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj
MWFiMzEwHhcNMjYwMzI2MTAwMTA0WhcNMjYwMzI3MTAwMTA0WjAzMTEwLwYDVQQD
EyhiM2E2YjQxODAyMzYwNDI4ODdkMmU4NWRlNDgyMTQ0MjA0OThkNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxOBPHAc8iZSPX2P55WrlOLJjOb
2h347eseBVIMMxb5Qn0h25OqQSXRLO8R6h8apxEXoF3ugFBRg+9RuVzrccU5YIXM
DmoDGFbI1svy/ChBIFDRFslicp/GPfo/cZLePUzJNq6PnR7kQCI7cbk0FQ43KVC7
BcFUJKBvywvPpd47SqNCUgwWlZ+b0ortDUB+jP8uRn4ayqhfEoEkH9IKD4kXg/5Z
yyovIAeCLLh5XKzk9Tq2SqFpa9QFGJdMnQQgTrg8tiiqNxIa4+X+C9/LWT3PMPRC
PJWVGUnhlZQTc4O9VnHsqabjOPozq2EAq0hy6ay+P5HJP5xzAcxF/cIShwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOmtBgCNgQoh9LoXeSCFEIEmNSHMB8GA1UdIwQY
MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et
YjRhMTgxY2Q0MGY2LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2
LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoO9MZTz
IqgocRK+JAJTDBokRPCyLfLSMjtcOUg9x7OgPKfl8AX3F7fFoWQiILbZv/kmxGwc
5EJXZ/n97vPKXqSzZuw7rmTflEEIVs/8s5NJuyrVhUb1KKqEIYTGAiApUYyawn3t
a+dUr+AbF4iE3i1jl68mbNX6VPXqzuvIL+XtoGgtlS+s5ILygCwe+DLJmch16b5r
Q58z4UCzMHwyUmBZgIEMJ3QPN07JZMke6LZHJyaNu/57a6SUx4Ep9E3Edw5G181t
NS5n+uKcA+8Go6KMleNQRlgk5oidccvVtdAKZSFDoKSCDbr4tcRNjWRB3H3uvpL1
3vF4UGs2O27qcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:44 2026 by rpki-client