Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: nxIARJ32UhgGVPKgpla+zk0Ct+nTn7BHc8x7sw2Lk6g=
Subject key identifier: 67:FA:49:6A:89:36:02:1C:06:AA:11:8F:4C:FA:39:38:01:D1:59:A5
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019D26CD6A4DCDF99929B30EAAC16E932287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 01AD
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: XSvmCWw4vqdNrxaZ2WmvqM15rEjk1Og3rjOMyqa5t1k=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6a:4d:cd:f9:99:29:b3:0e:aa:c1:6e:93:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=67fa496a8936021c06aa118f4cfa393801d159a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:43:7c:4c:0b:0c:d7:1d:71:64:b2:17:e5:
f5:0e:6a:3e:3b:ad:f5:ef:71:58:cd:4c:28:27:b2:
28:26:c7:a6:61:c9:70:8c:99:47:c2:29:70:60:63:
fc:72:90:cf:37:e1:30:b6:f0:43:8c:92:49:2e:79:
37:53:37:65:4b:b7:32:2e:f0:a6:02:35:ce:5e:1d:
60:fb:67:17:6b:a6:4f:9a:97:bb:72:b2:04:73:f5:
26:f7:fe:6b:2f:a3:c7:08:43:8b:e6:44:21:e4:f9:
4e:4f:10:ae:f5:7f:18:51:02:b2:59:7f:dd:69:ef:
ac:0d:39:4b:e3:d3:bd:2d:df:2f:04:a8:7b:09:62:
88:49:17:80:04:87:e1:7c:73:9b:9b:2c:e9:6f:5a:
78:0d:0b:94:0d:ac:2a:24:dd:fc:b5:db:ca:06:ea:
e3:ce:41:97:8c:ea:33:b2:27:ac:3c:bf:31:cc:bb:
66:c6:1c:a1:2d:0d:c4:4d:2b:7e:53:11:00:82:23:
4c:64:4b:c9:86:3d:90:0b:af:c0:16:bc:65:8b:77:
06:f8:ca:e3:b8:f4:32:89:1d:17:d0:ee:95:d8:bf:
be:5e:5e:c4:7a:fd:cd:a4:a3:fc:4d:89:58:80:a7:
0b:3c:20:c4:87:3b:71:25:ad:27:11:83:f2:07:a2:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:49:6A:89:36:02:1C:06:AA:11:8F:4C:FA:39:38:01:D1:59:A5
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0a:84:76:28:02:cb:ca:7d:73:83:8e:69:0c:0b:20:bc:55:
89:59:d1:85:d9:4b:32:62:71:2a:4b:fc:3d:8e:ad:f3:91:b1:
04:14:4a:e7:6f:78:34:47:6a:23:a3:20:28:32:70:44:68:95:
7c:52:d9:2b:6c:08:6e:a8:91:09:cc:7f:61:e3:1e:fc:08:50:
68:63:08:27:ef:39:b3:db:5c:3a:cc:3a:92:b1:b6:82:4f:50:
60:6b:20:fd:e4:4e:a3:63:60:ce:0f:28:f7:0d:03:39:f3:88:
f2:b4:f2:95:b5:25:2e:30:ab:8a:69:36:69:6a:cd:8e:b1:36:
0d:11:96:9b:c9:8b:78:5e:04:9f:ae:4b:9c:25:ab:2e:e2:67:
ac:70:fb:5b:7c:cf:4c:26:b5:56:c2:9b:9e:63:f1:19:d5:5d:
27:65:43:f0:5c:de:44:ed:7d:a7:6e:50:75:1f:68:ad:66:bd:
61:96:9f:2a:67:06:9f:2b:e2:22:49:60:af:e9:e0:40:92:a8:
34:db:e6:a3:f4:3f:1e:fb:b7:5a:1f:85:fe:d7:32:f5:4f:f7:
c6:b2:b2:68:15:99:0d:27:65:fa:85:5e:76:2e:3e:32:93:5e:
78:69:7f:67:57:dd:c2:05:c7:23:52:d9:93:2b:ef:0e:6b:8c:
41:8d:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:00 2026 by rpki-client