Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: qcxOj1NhnvXBDl+zPPJqlKAk0FG4WYAiIzAhT4SnUZw=
Subject key identifier: 31:25:7E:8D:DB:09:21:5A:05:63:01:81:03:9A:2E:11:3C:82:53:E6
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 019D29975499DFA34C71CF96BB1C4A1FA0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 0441
Signing time: Thu 26 Mar 2026 10:01:16 +0000
Manifest this update: Thu 26 Mar 2026 10:01:16 +0000
Manifest next update: Fri 27 Mar 2026 10:01:16 +0000
Files and hashes: 1: 0rNoESpAqZ7s2Ti898AnDHcoBRY.roa (hash: k1laR98RBM1pgcBRG/JSlPGQHjYS4qfoYBq8kh6MnD8=)
2: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: cBiL6/V4+35E/T/6kZYNBC/V6FKdubxkVU4UZEseSLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:54:99:df:a3:4c:71:cf:96:bb:1c:4a:1f:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Mar 26 10:01:16 2026 GMT
Not After : Mar 27 10:01:16 2026 GMT
Subject: CN=31257e8ddb09215a05630181039a2e113c8253e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:56:de:f5:46:8f:ed:2e:99:b1:83:08:5c:
5c:8b:86:54:1b:11:5b:60:9a:6d:29:24:ce:02:04:
6c:a3:94:c1:78:a2:9d:77:5c:71:ce:05:b0:86:e1:
d4:45:24:e3:98:f6:90:9e:6f:7e:86:4d:3b:51:30:
62:f0:fa:cf:fa:74:84:57:ab:81:90:89:10:80:0c:
eb:58:40:c0:b8:cb:9c:b1:46:57:67:b6:b2:0a:a4:
a2:35:78:10:ce:c2:61:7f:ee:48:49:cb:d8:76:06:
1e:1e:5f:f1:91:a9:9b:ef:54:d1:13:5a:39:1d:e8:
d4:15:bf:c9:36:a6:ee:b5:d6:c5:0d:8f:da:be:ee:
3b:60:ee:66:e2:18:eb:1c:8b:6f:21:c1:e0:e0:f6:
b8:2f:04:d8:33:2d:ae:37:c4:29:41:83:c4:10:39:
4b:6d:37:f3:6f:f0:a8:70:c7:a7:6d:92:ad:3e:5f:
d1:f0:8d:b0:b0:ae:ac:32:80:6d:7b:b6:77:22:c3:
07:3a:0a:e7:77:c6:a1:b4:84:7f:2d:0d:3a:d8:13:
6b:04:b7:d4:7a:64:a4:bf:c1:a0:66:d0:76:c1:b5:
21:7b:b2:6c:75:3a:72:9c:eb:a8:41:dc:6a:8a:c9:
e3:85:0b:1e:5b:50:05:40:c6:17:90:f7:81:b2:88:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:25:7E:8D:DB:09:21:5A:05:63:01:81:03:9A:2E:11:3C:82:53:E6
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:eb:f0:09:69:81:fe:e6:a8:d9:59:9f:17:d3:72:13:91:
15:88:45:70:40:99:a9:81:35:ba:4a:f7:b3:03:43:36:76:79:
7a:43:51:86:c8:36:71:51:bc:b3:27:94:24:24:57:1e:cd:b4:
ac:a2:7f:8b:84:aa:98:b6:a7:79:b2:9e:0e:6e:dc:c6:a3:ab:
e6:7b:1b:65:7c:dd:b8:fb:cc:88:b8:5d:70:c0:b5:93:5f:3b:
9a:b1:5b:7b:91:3d:01:ff:64:dc:1c:bd:f7:71:13:87:59:c0:
30:d8:79:78:ef:16:4b:00:9a:a1:9b:93:db:39:8c:1f:92:d0:
08:76:6e:11:24:72:7c:66:d4:a6:7a:66:9b:c5:43:fa:31:1c:
41:48:61:17:c5:61:7a:3a:e0:bf:e6:51:2c:a1:2b:d7:29:e1:
cc:e6:fc:1a:7c:01:f0:96:9c:46:15:7d:76:33:17:3e:5f:6d:
19:c8:c1:65:ed:6d:a1:c5:9f:c4:5e:33:46:b9:70:d2:bb:f2:
dd:aa:7e:39:dc:4a:af:22:b6:b2:1b:69:86:9c:91:b1:c4:10:
81:75:fc:08:76:48:8c:2e:8b:a3:ac:f5:5f:6e:89:7e:66:b7:
c7:3b:d8:07:fe:36:9d:ec:92:20:19:f8:b7:6c:0a:d8:e4:48:
e8:f6:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:24 2026 by rpki-client