Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
File: udkwX8vVnNpLaPiI32AgSFt06YI.mft (raw, json)
Hash identifier: yOA8hnrjzAxTvDSuAhw2tYQvRxzUcKEPo4Jw5Ekh5To=
Subject key identifier: 8B:28:D7:CA:40:BB:FA:0E:A0:6C:D5:62:69:68:52:75:AC:52:CD:AB
Authority key identifier: B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
Certificate issuer: /CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Certificate serial: 019D29CE415672C0758DCD8665F3C15D99A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
Manifest number: 09FB
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: udkwX8vVnNpLaPiI32AgSFt06YI.crl (hash: KeBjSd/S4o+odc3ijF6Vn8bA9iGIju0LzNFTalWmfwE=)
2: vEwz57dImPsiNennVONbeEnvc1Q.roa (hash: FKFQdv+BqbEkz4WNye1S2doTpa1n1DGJ3Pa6LhxLa3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:41:56:72:c0:75:8d:cd:86:65:f3:c1:5d:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d9305fcbd59cda4b68f888df6020485b74e982
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=8b28d7ca40bbfa0ea06cd56269685275ac52cdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:f0:e6:5f:13:cb:1b:40:62:db:ee:6d:01:
69:65:6a:07:70:f7:a6:a0:6f:cc:df:89:cb:9a:8c:
4a:74:76:44:06:46:80:e8:d9:ed:ae:40:70:7f:66:
0e:e4:76:0a:9a:a6:d6:08:d6:71:57:55:c6:e2:44:
62:82:d0:7d:b2:a6:85:ed:e0:88:3e:9b:23:a2:73:
bf:3b:54:01:07:39:24:02:78:1a:34:08:78:83:3f:
02:e2:76:4e:e1:b3:bf:6a:24:a3:d8:04:a6:82:c1:
90:b2:c3:e1:3e:86:ab:a5:2f:cf:28:4b:e8:de:82:
1e:86:90:77:49:c2:6e:1d:f6:a4:17:b7:29:a7:96:
a6:c1:3d:80:39:36:03:b3:58:3a:aa:5d:12:d2:25:
f5:12:13:50:34:02:5e:dc:13:fc:5f:2a:b4:65:b1:
a5:eb:6b:3a:c1:c8:e0:be:da:6c:85:de:28:e4:93:
41:86:48:16:48:52:90:32:3f:06:51:c7:3c:e8:ae:
a4:74:c7:36:a5:b6:5a:95:f9:4b:ea:b6:58:d4:c7:
fc:2f:fd:55:68:12:c5:e0:4c:3a:d2:37:c5:29:6e:
a8:f9:50:34:d1:b1:a5:4b:cd:01:3c:e6:7c:43:5e:
8b:41:4f:0b:3b:c0:0b:9b:bc:d1:e6:f9:2f:28:b2:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:D7:CA:40:BB:FA:0E:A0:6C:D5:62:69:68:52:75:AC:52:CD:AB
X509v3 Authority Key Identifier:
keyid:B9:D9:30:5F:CB:D5:9C:DA:4B:68:F8:88:DF:60:20:48:5B:74:E9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udkwX8vVnNpLaPiI32AgSFt06YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19f37b-446c-4910-9c6f-1d09c79b2540/1/udkwX8vVnNpLaPiI32AgSFt06YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:18:89:2e:b4:78:94:9d:68:d9:78:8a:d4:60:1f:81:96:
c8:f3:f2:59:62:21:9a:74:ec:2d:15:f6:6b:e3:27:4e:96:92:
64:21:d3:57:ae:e9:da:7a:ed:e8:89:0d:24:4e:86:58:c7:59:
52:f0:8e:8a:fa:03:e8:03:a7:fd:08:dd:13:f2:24:24:af:13:
d0:f6:cb:42:55:63:b5:ea:56:3d:b6:7a:16:c3:53:a1:a6:b8:
60:4c:56:a5:02:28:ca:0b:f8:99:7b:8b:4e:95:28:23:8d:7b:
01:6c:16:d2:64:46:92:84:a7:cc:bc:2f:10:9b:01:54:4c:21:
a2:66:94:8d:9e:95:6e:3a:33:16:d2:a8:a2:11:ea:23:b0:99:
af:1d:47:4d:1f:ed:4d:40:7f:d1:4a:aa:23:b0:9e:f9:f8:c5:
51:c7:65:b0:97:00:a9:92:9e:38:96:f3:0f:cd:79:3f:90:71:
0f:ab:68:92:27:16:76:93:35:5b:bc:64:35:48:17:7a:94:56:
57:f2:b6:e5:bd:a3:58:80:86:2a:d8:bc:19:26:2f:ee:af:18:
87:ba:7a:13:57:41:7f:90:15:2b:14:7d:4a:2d:02:34:eb:60:
6f:30:67:e3:13:c7:78:e8:47:e3:fd:3f:2b:ba:37:4c:50:eb:
8c:e3:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:28 2026 by rpki-client