Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
File: Unzgu6rDVu3srWci8qhvjgZJCY4.mft (raw, json)
Hash identifier: 6dNruSm8R46EVNMsODGl2eEKIp+xE9D3Dn6nwvv3K0M=
Subject key identifier: BD:01:87:DA:D1:84:08:73:10:5B:B5:B7:81:DB:B7:32:95:7E:02:6E
Authority key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
Certificate issuer: /CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Certificate serial: 019D27A90EEB134FABBBEC57185FF2ACA960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: Unzgu6rDVu3srWci8qhvjgZJCY4.crl (hash: ZX2p0MW2CHHufUI0SJZCZK7aMghVciE8sbNw4pDbTSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0e:eb:13:4f:ab:bb:ec:57:18:5f:f2:ac:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=527ce0bbaac356edecad6722f2a86f8e0649098e
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=bd0187dad1840873105bb5b781dbb732957e026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:c1:00:e6:6f:6b:59:33:33:cc:81:82:ee:
32:a6:3f:38:7b:4f:a6:11:82:74:c7:b0:8b:aa:65:
96:e4:55:4b:8a:28:aa:65:b6:98:57:da:4e:79:93:
58:7e:da:26:93:43:e5:a9:8d:bf:94:c4:c3:7f:c1:
13:e9:cf:90:b9:86:3f:0d:12:cf:b0:29:4a:ca:c5:
e0:61:fb:d1:23:d3:95:a5:a2:aa:fd:b0:bb:3e:4e:
6c:50:64:91:6d:af:a5:30:6f:22:e8:b8:c1:f5:a9:
94:5f:d0:55:e2:e8:0c:20:b7:fc:9a:c4:da:f0:bc:
ba:3b:7c:29:39:84:d3:95:56:07:84:90:96:3a:d6:
6c:d1:08:ed:3a:b8:e1:a7:bb:d4:aa:61:52:41:fd:
59:23:e3:5f:30:05:eb:d6:74:eb:43:00:87:13:9f:
3a:17:b0:40:1f:10:49:fe:f4:c9:28:b8:f0:f1:11:
e5:bc:5f:6a:0d:84:27:b3:ef:00:27:8d:ea:58:e3:
8d:36:c5:82:f0:cf:3a:6a:f0:8a:6d:75:c5:99:1c:
20:a3:e8:14:4f:41:ed:f1:50:7f:c7:fa:d0:a3:d4:
7e:c1:ff:bf:f9:a1:3a:b4:1c:87:0b:af:41:b7:35:
03:21:51:3c:9c:5d:82:94:98:cb:41:65:e3:22:d1:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:87:DA:D1:84:08:73:10:5B:B5:B7:81:DB:B7:32:95:7E:02:6E
X509v3 Authority Key Identifier:
keyid:52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:26:0e:4a:ba:2d:96:80:56:7e:d6:2d:41:b1:d2:3c:f4:36:
74:4e:65:b1:d1:79:c3:8b:ea:a7:39:fb:4f:6b:f3:fd:b7:16:
22:6e:d8:30:d6:b1:22:8a:6c:ba:93:70:38:11:0b:aa:b5:fc:
97:22:9e:db:69:39:12:8c:5c:ae:2b:57:7d:11:2a:bb:ba:42:
55:29:96:5e:69:e5:e3:15:11:38:bb:7c:ac:09:c6:b0:77:49:
10:eb:e2:d1:8e:41:8e:a6:ac:5a:7a:56:d4:6c:89:18:86:ca:
91:79:5e:0c:37:ca:5c:4a:2e:72:f9:1a:44:63:2f:10:42:f0:
3e:99:8a:48:c5:e8:1d:87:14:35:b4:d9:d4:11:1c:16:78:4f:
12:09:78:2a:8e:cf:fd:c4:29:85:a4:ad:29:67:f1:a4:64:1d:
87:1b:3b:a1:d8:7e:8a:ad:8a:e4:e3:b1:ab:e8:2f:7f:fc:75:
5f:c8:28:68:8a:77:8b:78:36:f7:f1:bd:aa:a8:b4:b6:5a:6c:
e2:52:2f:c1:d3:70:a8:ba:0a:24:3b:e2:12:25:d0:e8:9d:87:
7a:76:a4:bf:b4:53:8d:33:fe:63:d8:30:04:dc:0e:95:d3:1a:
2a:27:18:e2:49:87:e9:d3:39:0c:8a:46:c8:b0:f5:d3:6c:10:
c3:c6:6b:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqQ7rE0+ru+xXGF/yrKlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyN2NlMGJiYWFjMzU2ZWRlY2FkNjcyMmYyYTg2ZjhlMDY0
OTA5OGUwHhcNMjYwMzI2MDEwMTIzWhcNMjYwMzI3MDEwMTIzWjAzMTEwLwYDVQQD
EyhiZDAxODdkYWQxODQwODczMTA1YmI1Yjc4MWRiYjczMjk1N2UwMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03fBAOZva1kzM8yBgu4ypj84e0+m
EYJ0x7CLqmWW5FVLiiiqZbaYV9pOeZNYftomk0PlqY2/lMTDf8ET6c+QuYY/DRLP
sClKysXgYfvRI9OVpaKq/bC7Pk5sUGSRba+lMG8i6LjB9amUX9BV4ugMILf8msTa
8Ly6O3wpOYTTlVYHhJCWOtZs0QjtOrjhp7vUqmFSQf1ZI+NfMAXr1nTrQwCHE586
F7BAHxBJ/vTJKLjw8RHlvF9qDYQns+8AJ43qWOONNsWC8M86avCKbXXFmRwgo+gU
T0Ht8VB/x/rQo9R+wf+/+aE6tByHC69BtzUDIVE8nF2ClJjLQWXjItE1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0Bh9rRhAhzEFu1t4HbtzKVfgJuMB8GA1UdIwQY
MBaAFFJ84Luqw1bt7K1nIvKob44GSQmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDkt
OGEyYjdmOTU2OTI0LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85MWRhOGYtY2IwOC00OWMwLTgzMDktOGEyYjdmOTU2OTI0
LzEvVW56Z3U2ckRWdTNzcldjaThxaHZqZ1pKQ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiYOSrot
loBWftYtQbHSPPQ2dE5lsdF5w4vqpzn7T2vz/bcWIm7YMNaxIopsupNwOBELqrX8
lyKe22k5EoxcritXfREqu7pCVSmWXmnl4xUROLt8rAnGsHdJEOvi0Y5BjqasWnpW
1GyJGIbKkXleDDfKXEoucvkaRGMvEELwPpmKSMXoHYcUNbTZ1BEcFnhPEgl4Ko7P
/cQphaStKWfxpGQdhxs7odh+iq2K5OOxq+gvf/x1X8goaIp3i3g29/G9qqi0tlps
4lIvwdNwqLoKJDviEiXQ6J2Henakv7RTjTP+Y9gwBNwOldMaKicY4kmH6dM5DIpG
yLD102wQw8Zrgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:51 2026 by rpki-client