Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: tNpLpAJvl59R2mD9Qs+ltdiZm5yHbNRbMC7kZkriuvU=
Subject key identifier: A4:D9:3C:72:63:30:1C:91:B2:4B:9B:9C:58:2A:91:0D:8A:7C:DD:CA
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019D27E04B2AB2C0D1BA8EB543E87E3A895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0CF3
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: fOjZOk8MncUv5K9v2OYb2mtaMlhMlUu0XPLod4HyWMU=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4b:2a:b2:c0:d1:ba:8e:b5:43:e8:7e:3a:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=a4d93c7263301c91b24b9b9c582a910d8a7cddca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:98:fc:ae:4b:4c:f5:70:bb:8b:8e:9c:43:
d3:18:bf:82:17:1b:6c:ad:02:c8:15:d5:fa:1d:17:
ae:7e:5e:0c:45:03:af:91:c9:e2:7d:75:88:c5:ed:
a0:ca:d2:9c:23:2a:ac:bb:c7:a2:8e:1f:90:65:71:
bb:12:ac:71:0f:fa:8f:9a:73:33:12:7c:d8:14:d4:
b3:6e:8b:0a:33:3e:2d:34:c7:37:71:fc:80:28:19:
77:52:4a:0f:a6:40:33:75:61:fc:5a:fd:8d:1c:f0:
c2:65:2d:0e:aa:55:7a:36:e0:5a:f4:99:d0:57:02:
43:97:e8:eb:e9:37:3e:78:3d:61:d5:7b:21:40:cd:
65:1a:44:31:0b:37:6b:d3:96:f0:e5:e8:d3:97:a1:
f1:cd:d9:4b:2d:34:37:24:39:df:b8:73:36:c0:ca:
f4:4f:ce:ab:c8:ae:e4:e5:62:59:a0:8b:5c:a0:78:
84:a9:bd:3e:ec:c8:86:ef:1e:a1:15:ec:6e:92:b9:
66:69:16:07:11:b7:2a:6e:8b:33:39:1c:bd:b3:da:
a3:23:a2:a0:61:11:80:df:b4:e5:05:9e:48:ce:b5:
9e:ae:e8:00:e8:fc:2f:f3:42:39:3c:2b:35:09:db:
4b:15:39:59:7b:3e:9c:a0:3f:1d:07:f7:10:d6:6d:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:3C:72:63:30:1C:91:B2:4B:9B:9C:58:2A:91:0D:8A:7C:DD:CA
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:85:ba:43:be:84:9f:6b:1c:59:86:b3:48:a0:65:bf:4a:e0:
d5:93:63:4c:28:d6:73:6f:af:11:78:49:a9:76:ef:4f:39:08:
85:8a:e2:e8:e4:4e:72:1b:f1:ba:5f:c5:27:07:a7:bb:5c:25:
61:d1:5c:41:a0:35:9b:2b:e6:c0:5d:07:e0:58:6f:03:e7:0b:
4b:0f:b0:98:11:ba:0d:54:7e:8b:d6:cc:02:da:96:03:74:ef:
fd:6e:8e:b1:42:f0:34:a0:28:72:6b:07:79:5a:68:7d:cf:2a:
06:e0:b8:38:46:80:53:7f:57:99:26:1e:f2:d7:9d:3f:d8:83:
8c:42:96:86:fe:ef:7a:01:f8:37:73:ac:e1:36:46:5a:92:e3:
96:fc:d0:b6:f0:57:88:79:21:f4:67:08:3a:bd:5f:e9:af:4c:
11:f0:c6:c2:57:0c:02:d3:4e:e2:40:59:96:2e:9a:f2:0d:5b:
55:85:3b:f0:dc:f2:4a:32:68:8b:04:37:73:b2:18:4b:90:32:
66:a7:00:a6:f6:03:86:18:f3:82:ce:16:86:51:17:67:60:ef:
f2:31:67:10:7c:7c:86:ad:61:4a:06:c7:5e:87:42:9d:a3:77:
9d:b3:12:56:79:71:b2:3f:13:2b:b2:a7:be:c7:43:40:a2:54:
d0:1f:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:32 2026 by rpki-client