Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: VfPeGbflD+PWK3crmu6Ji/0rg2M+rUWGo5prpjJY0GI=
Subject key identifier: B2:38:F2:01:1A:0B:72:CA:3A:45:86:24:55:08:CE:38:B5:55:4F:85
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019E1DFE0C5DFF22313DB2748D874C4CBADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 022D
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: YCW/So1KbpboNAzUZ+RtRHYhFPXeyRq2++8nxYMFFgE=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0c:5d:ff:22:31:3d:b2:74:8d:87:4c:4c:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=b238f2011a0b72ca3a4586245508ce38b5554f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:fa:85:ba:67:39:28:37:d3:8a:93:07:9c:
36:a5:79:43:47:8d:12:27:ba:d9:ca:8a:94:d1:c6:
24:58:b8:61:5d:54:93:b7:b3:1c:de:c7:28:56:3b:
d9:f5:bd:65:b4:c6:1d:05:ac:9d:16:9e:93:31:e5:
93:6c:da:32:0d:c6:0b:98:e5:a2:03:31:e5:b9:02:
de:0a:17:3f:2a:78:16:36:22:4d:62:73:77:fd:51:
07:0e:00:d0:71:fb:9a:e6:fa:0c:be:1a:de:3d:1e:
d3:b6:59:41:8f:a1:66:2b:18:44:4e:30:41:82:88:
b9:6c:e7:37:54:54:5d:54:cf:3e:ba:ba:39:3b:cf:
30:5f:11:10:3c:9d:eb:a3:66:0d:e8:e1:e8:07:23:
91:63:88:29:8a:0e:5e:0b:4b:b7:fe:1c:9e:28:5d:
a3:e2:ad:71:ee:83:e7:38:b5:10:31:d4:a7:d9:10:
98:f4:1f:60:3f:14:d0:3d:35:4c:c9:8f:52:31:89:
35:3f:1f:75:3f:ae:00:fb:f1:9f:e6:e6:51:11:3d:
6c:f4:6e:cd:d8:ce:fb:d2:0c:b7:20:a5:02:87:70:
a2:b4:4b:32:63:d5:f6:5e:42:3d:be:6d:89:a9:4f:
69:7c:82:9b:e6:8f:7e:d0:75:fa:9c:25:97:37:a4:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:F2:01:1A:0B:72:CA:3A:45:86:24:55:08:CE:38:B5:55:4F:85
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:8a:68:ba:26:87:c0:87:e6:8f:2b:2c:22:30:62:c8:21:
65:db:91:73:1e:b1:3d:e3:24:e8:ea:0b:8f:04:57:3d:bc:a9:
58:18:55:f4:12:4a:04:a5:42:43:4e:74:7b:8f:7f:20:a0:bb:
e5:fc:65:50:6b:b3:1e:c7:2d:34:91:6e:6d:db:8b:3a:9d:94:
ae:78:84:80:b0:11:d0:d2:49:0c:38:a0:c2:3c:bc:5f:b9:56:
0e:a3:cd:bb:09:a8:7f:e6:6b:4c:55:d2:4e:dc:32:5e:91:1e:
fc:74:d7:23:d7:16:5e:b4:34:b0:69:07:ad:47:bb:5a:e3:2a:
4e:25:da:b4:92:02:08:71:7e:f6:45:83:87:54:94:b4:5f:28:
c2:8d:49:98:d3:91:48:2d:83:f5:6b:bd:d5:ba:19:98:29:d9:
aa:60:7e:ec:0a:20:d4:ec:fc:d3:7a:f5:14:b1:22:c4:30:21:
ed:61:1f:4d:8a:72:7c:49:e8:66:32:9a:cd:69:52:18:c3:6a:
8b:64:a0:f1:7c:ae:3a:55:27:bb:56:ba:2b:45:83:57:a9:37:
79:f9:46:13:d9:ec:44:af:ad:73:86:9b:2a:8c:d5:6f:da:3c:
1f:8f:85:04:1f:6a:3e:71:16:87:1a:cf:6a:f1:38:7c:a4:af:
e8:b0:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:59 2026 by rpki-client