Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: tolSvWW2RD4W5Mr03g54Bn3Ibwdvc+LpHPvIBTEq4Aw=
Subject key identifier: 8C:3A:F6:00:FD:59:2F:A6:C5:A5:F2:AE:BE:AD:01:3A:36:63:27:8B
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 019D25BA8AF216902124215BDFE00BCEFE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 027D
Signing time: Wed 25 Mar 2026 16:01:15 +0000
Manifest this update: Wed 25 Mar 2026 16:01:15 +0000
Manifest next update: Thu 26 Mar 2026 16:01:15 +0000
Files and hashes: 1: GfOZEhgtw2JHT--DTWaI1Zya79A.asa (hash: F0GiB79s0VZ9SWMMCR6FQapZt3igQN3cUd1ttOisAFs=)
2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: g+jBi7H1IPej4UvyaE6/+lFoYdOIl1hBDTkg8VvNKTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8a:f2:16:90:21:24:21:5b:df:e0:0b:ce:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Mar 25 16:01:15 2026 GMT
Not After : Mar 26 16:01:15 2026 GMT
Subject: CN=8c3af600fd592fa6c5a5f2aebead013a3663278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:b4:30:8c:61:bf:66:12:bf:9d:40:12:33:
30:f5:23:c3:91:85:29:da:6c:ef:f4:f7:53:88:cc:
7d:a7:69:f0:50:97:7e:48:ec:93:36:66:cd:e2:a7:
11:76:38:1a:27:e1:89:57:da:6a:09:9d:01:0d:e6:
b5:d6:92:fa:a8:c8:2b:35:64:e0:42:b5:e2:9b:03:
80:a6:38:ac:3b:6f:0e:f3:48:8d:75:ac:0c:d8:81:
80:08:a0:e0:6f:8b:da:96:a9:2f:e4:24:8b:65:7f:
7e:bc:6f:44:9e:80:3a:62:43:87:0c:61:77:b2:9b:
33:39:ed:0d:3a:c9:25:3c:07:bc:22:3e:0e:ca:81:
e1:44:04:52:e9:a2:b5:01:df:7a:28:ae:be:a0:41:
a3:ca:ab:32:bd:8a:37:5e:cd:0f:77:c6:9b:15:7c:
3e:a4:e6:55:b2:3a:0e:da:9e:78:de:26:18:bc:8e:
b4:d4:f6:96:58:de:db:38:2a:c1:9a:e5:57:6a:f2:
44:e8:37:b7:03:a7:01:ec:23:45:f5:7f:d5:ef:ce:
04:0a:ca:89:f4:7c:5f:8e:a2:44:4c:93:06:bc:74:
5c:d9:bf:98:d6:14:74:29:64:78:48:b3:e6:75:d7:
a9:73:d7:b9:88:73:cb:e3:13:61:bb:6b:88:a4:85:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:F6:00:FD:59:2F:A6:C5:A5:F2:AE:BE:AD:01:3A:36:63:27:8B
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f0:82:21:15:30:83:7e:ca:4c:1e:90:6e:a6:e1:58:7a:ac:
e4:73:3f:b0:c9:ac:4d:6d:e6:3c:a1:25:eb:e0:39:95:5a:e3:
c4:0c:77:9b:29:29:06:60:89:17:48:65:3a:36:ca:65:75:5a:
cd:5a:60:83:3c:09:71:8f:3f:fe:33:18:a1:61:f1:74:b3:0e:
e9:51:fc:e4:cd:3d:01:9a:6c:80:97:a7:ba:f3:64:d3:64:29:
a9:91:a6:ac:25:f0:19:ee:45:79:df:9c:4d:6c:b8:9e:70:37:
16:a7:96:cc:53:6d:6d:e6:c2:4c:2a:e5:f4:9e:b2:9a:fb:08:
ac:1a:45:3e:d2:fd:06:5a:d0:0f:ad:ec:9a:f8:5e:45:85:a1:
fa:85:f7:2d:e8:87:80:e7:32:84:72:30:39:6b:63:95:5d:16:
f3:bb:f5:c7:df:2d:b7:71:31:c8:af:98:14:d4:de:19:75:00:
9b:ac:7c:25:b4:aa:3d:23:e7:a9:a9:2e:d6:bc:1e:29:15:4a:
7c:83:fd:05:23:c6:75:74:41:d7:f9:3d:1f:26:be:17:2a:6a:
65:8c:3d:78:76:38:ff:5a:86:4f:6a:43:96:20:67:e4:88:e3:
cc:4d:3d:31:cb:51:b2:8f:5d:42:2c:0f:7d:12:61:d3:05:06:
a9:a6:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:59 2026 by rpki-client