Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: jo7jPDU/zgMY7f8DHZh0GP7CFaireVi3rHRqpi7JkCA=
Subject key identifier: BD:8E:7C:77:26:2A:C4:AA:93:E2:27:4B:25:00:38:DD:70:C4:4B:57
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 019D2696272A684147D3EE2BBD0095B9B028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0B40
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: wpai0DkIIeASwBiRBNTOjIR4AjF49D7yj9idhyUgVpw=)
2: oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa (hash: 4HJuj+rF75MFgy3hHG2f3m8rThIv9PhuU60sXijKG80=)
3: vwvW1Ad1jPnRXRdjbJDp97AR8iQ.roa (hash: rHp1bLQ38wfktmQvruIWIEUStakR7R1FCh+zLkjl1H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:27:2a:68:41:47:d3:ee:2b:bd:00:95:b9:b0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=bd8e7c77262ac4aa93e2274b250038dd70c44b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:11:6e:51:b4:ff:d0:21:0e:93:cc:99:85:
bf:5c:fe:14:64:af:0c:45:78:8a:42:e1:8d:10:8a:
07:de:0f:e3:07:15:70:bb:31:f0:ad:66:b5:4b:78:
61:9d:47:36:c4:81:fe:f5:4d:f7:fe:09:07:99:c1:
9d:3d:0d:70:99:25:dd:a2:83:29:9c:3e:6f:9b:40:
93:f6:06:12:42:75:92:8b:66:b8:76:f9:67:a8:29:
d2:06:b6:51:80:b6:51:0e:9b:23:fb:5c:53:c5:49:
36:d2:bd:75:89:28:54:3b:47:3b:ba:a6:3f:4e:e0:
cb:c9:7b:19:d9:8e:46:5a:cb:1d:a0:81:34:0c:e1:
80:23:a4:2e:a7:e6:47:c9:56:69:33:88:07:43:ba:
ca:fb:ae:5a:01:d2:d8:d7:5b:a4:c7:3f:59:46:46:
46:96:ed:82:7b:65:b0:08:31:bc:47:66:47:18:06:
cd:5d:af:28:b2:9a:27:4c:77:79:0e:9f:80:23:3b:
87:88:d5:55:4a:4a:18:a7:ae:a5:40:31:03:4c:6f:
5e:66:b7:8a:e3:59:43:24:93:6a:58:6d:e3:c4:d4:
9a:a4:aa:7e:21:24:15:58:e7:5d:7d:e0:7e:39:ff:
c4:d3:84:02:2a:cf:df:01:03:4f:31:18:f7:cc:e9:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8E:7C:77:26:2A:C4:AA:93:E2:27:4B:25:00:38:DD:70:C4:4B:57
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1f:1d:62:59:3e:26:32:5f:5e:c0:20:a3:50:b3:3e:b1:f4:
4a:39:9c:d9:b7:91:e1:38:fb:46:3c:be:06:a8:34:f7:93:af:
f2:3e:1b:dd:4f:a5:e9:1a:a2:5f:68:a0:74:cb:80:69:78:cd:
19:27:f9:2f:0c:4d:2e:8e:14:c4:36:ad:9e:9c:46:04:f3:16:
44:a0:85:de:2a:0a:3e:10:9a:05:18:b2:da:87:a9:ae:a6:42:
a7:5f:3e:08:43:e3:42:ed:5d:5c:fa:60:88:aa:54:f0:32:e4:
00:46:06:77:e0:dd:91:e9:cf:54:cd:98:73:9e:39:7c:95:61:
68:18:67:62:9d:35:aa:24:8e:63:1b:75:dd:72:6d:49:e8:40:
c7:90:39:5a:7e:59:97:a1:7c:3c:12:2c:6c:6d:c4:30:b6:58:
5a:af:e6:c0:67:fc:c9:f1:8e:53:9b:ee:2a:07:61:31:8a:e7:
c0:d7:aa:70:8b:79:0e:45:6f:36:bb:7d:41:af:ad:db:33:a0:
a8:17:d6:d1:b5:ed:bb:9a:d2:78:93:c0:0f:f4:16:6d:ed:47:
bd:61:0b:d5:b8:2d:dc:a5:b0:21:01:9f:a0:bb:15:76:d5:f4:
84:1e:5f:8f:f5:dc:b1:51:8d:78:be:10:12:62:52:a0:79:4d:
66:89:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:50 2026 by rpki-client