Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: 5YIEB2zty+oUCPUbOriSY60xROcMnAr7/QA3kZmoMQk=
Subject key identifier: 9C:C3:CA:2C:20:77:9E:B4:AE:A6:B1:CF:4A:65:5D:49:FE:41:18:4B
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 019D29CDEBD32375F4D16FF5FBB6C8AE27CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 1051
Signing time: Thu 26 Mar 2026 11:00:54 +0000
Manifest this update: Thu 26 Mar 2026 11:00:54 +0000
Manifest next update: Fri 27 Mar 2026 11:00:54 +0000
Files and hashes: 1: 7FcZY5ssnNOL522u1DPAzU2AH3o.roa (hash: jO6v8d55L7jkpTC7tOGRMEIqorSWul+ySibJuBhbg1E=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: NKtzN2gvxrnpocr+WYVY8VsPWaieKOc7PJAq+gJ75d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:eb:d3:23:75:f4:d1:6f:f5:fb:b6:c8:ae:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Mar 26 11:00:54 2026 GMT
Not After : Mar 27 11:00:54 2026 GMT
Subject: CN=9cc3ca2c20779eb4aea6b1cf4a655d49fe41184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:a0:e8:82:23:36:89:df:38:59:e5:1b:b0:
23:47:56:34:fc:fe:33:3e:72:e1:0b:3e:9f:4e:f9:
07:d2:2f:86:b9:97:f6:ad:90:1c:ba:ce:b8:4f:03:
54:4b:1a:2e:13:62:94:c9:f1:eb:8a:52:9a:7d:2f:
34:3b:68:53:85:bc:4e:c3:3d:16:0f:4a:da:47:50:
6b:75:f1:11:84:4d:3a:f4:c1:1e:d1:98:c2:8e:e9:
8c:52:6d:b5:8b:f5:82:7c:4b:b1:7b:e9:eb:f6:c6:
a4:47:15:be:e6:4d:f9:7f:02:f6:b7:82:44:25:c0:
53:5a:41:c1:d5:64:0f:ea:8f:76:ec:49:4b:53:5f:
0d:1c:57:a3:3c:63:79:08:f2:75:93:d2:0b:35:8a:
b5:ac:32:64:b9:e9:ce:e6:29:35:10:be:e8:6b:34:
d6:46:66:5a:c4:17:a8:ea:7b:e2:af:e1:6b:1b:bc:
82:17:bc:9b:b9:f2:09:09:3f:02:55:5c:35:6c:23:
33:8e:de:74:73:56:cb:33:33:07:4a:ee:b9:4c:17:
4f:a5:38:8d:9a:9c:5a:e0:1b:3a:85:a4:99:dd:45:
a8:ef:67:2d:1f:fb:04:ed:44:05:d7:6c:f2:70:74:
c1:27:79:7e:bd:1b:f6:82:ec:61:ba:f2:9c:0c:59:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:CA:2C:20:77:9E:B4:AE:A6:B1:CF:4A:65:5D:49:FE:41:18:4B
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8d:31:e9:20:56:10:af:52:fe:15:55:b1:02:9e:81:cf:a4:
c3:43:c9:74:12:d9:82:74:32:91:6a:de:71:b4:51:19:82:78:
09:1b:21:a7:24:10:a0:0b:d8:01:a3:d0:13:20:91:4a:16:5c:
29:52:72:f2:3a:64:d1:dd:f3:dd:61:05:97:de:2c:ba:75:6d:
95:e3:74:34:c9:a0:2a:c8:05:42:63:33:91:1d:ba:4e:e1:7c:
f0:a9:7b:f3:9c:6f:c8:d5:92:46:e3:68:6f:a4:a8:c3:14:29:
d3:54:0c:38:5b:48:60:d8:0f:05:e8:46:78:43:ee:db:eb:5d:
03:32:1f:3e:37:11:02:d4:43:82:0c:ea:aa:cc:d1:e5:c3:92:
a0:45:37:ae:87:69:59:f8:b6:85:97:15:4f:fe:df:11:76:f0:
1d:d9:5e:00:e4:ed:46:c8:1d:39:5a:21:f5:97:5b:7b:36:bb:
66:de:c9:e5:b0:4b:9f:ff:1a:f9:7f:84:c2:06:2a:3c:59:d9:
90:1e:38:be:41:3c:9d:af:0a:2b:30:47:92:4a:70:a2:c6:21:
ee:35:e0:e3:bd:85:8e:cb:8f:d2:d5:77:5e:59:fd:48:ab:5c:
13:15:80:49:fe:04:e0:36:b4:4f:fe:fa:dd:1f:53:d8:90:ff:
28:52:82:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:46 2026 by rpki-client