Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: vC/ON+s44jtktDxYv5F+Ntuh0P92Kcmasv8OBjpqRjU=
Subject key identifier: 72:2C:FB:58:DA:B0:1F:10:91:C2:DD:4F:6F:7C:B4:5D:30:4A:FD:22
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 019D27A8D315904082ED10113574F548EEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 111F
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: wa8CDgDAYr2nZAygPGPSJePKh7wBd36MugJruvkceYs=)
2: v-ipIT8yr4AG7JC_OJEOS1gcpDo.roa (hash: GHUlrgQfUHa7TIwzSErf9EB2ikM0OJVY/nwHMqCmoVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d3:15:90:40:82:ed:10:11:35:74:f5:48:ee:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=722cfb58dab01f1091c2dd4f6f7cb45d304afd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:a7:53:ad:dc:ad:37:5b:6e:e2:8c:58:f8:
3e:de:fe:8d:f8:7f:e8:b6:6c:60:b9:32:c2:13:c8:
c8:e0:8d:6b:fa:2e:24:57:2d:aa:07:a1:b9:a8:4b:
0d:1e:7a:1d:a6:bb:35:05:96:6d:2c:ca:1a:73:fb:
33:75:1e:eb:f3:ef:f4:4d:3a:ad:54:fe:3b:25:bd:
7b:be:0d:c9:37:89:c6:d1:7c:08:a7:57:a9:48:3d:
85:1f:73:6d:05:95:2d:ca:43:a3:7d:07:17:4e:c0:
88:d3:bc:27:f6:8e:2b:9f:ad:7c:71:60:2b:28:41:
27:77:95:61:73:e1:b7:1f:ad:06:9f:5f:1f:dd:a6:
31:4c:75:76:09:81:73:56:42:36:f5:20:07:8b:1d:
37:33:c5:27:72:fb:fe:26:1b:14:3b:db:f5:d4:a0:
d2:dd:02:2b:c5:66:7a:bc:68:fb:93:e2:8f:dd:9d:
c9:ba:7d:3c:04:7a:59:ed:12:73:75:fb:6e:f6:a8:
42:e7:d3:25:ea:af:8a:7e:ac:c3:f8:35:af:63:af:
d3:6b:89:e4:09:b3:f7:be:3a:d5:fc:98:e2:c3:5e:
6b:1a:8d:db:a7:6d:0b:ec:7b:03:94:90:d0:0d:69:
4b:91:21:e0:01:dd:ef:82:17:4e:fc:d7:b8:c1:d9:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:FB:58:DA:B0:1F:10:91:C2:DD:4F:6F:7C:B4:5D:30:4A:FD:22
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4d:d5:b3:6a:81:23:bc:f6:b1:57:28:7b:b7:02:e2:d6:15:
08:b8:2b:3e:a1:1d:f4:3e:42:37:fe:22:38:4f:78:0b:7f:80:
53:1f:a9:f7:0a:ff:66:77:99:cc:5d:b3:e6:32:13:db:1c:ae:
73:b0:13:11:c0:d4:33:0f:ec:e7:ca:fa:13:b9:69:cc:1d:94:
26:78:33:a1:c9:47:c3:be:10:b5:76:21:55:b5:7a:f0:2d:c1:
b0:85:12:a2:57:f2:04:d6:e8:e9:15:4f:c1:9b:78:a0:49:5e:
d8:d6:1d:66:2b:20:8c:5e:34:14:0e:dd:59:88:13:51:2f:84:
eb:8c:a3:bf:bb:51:a9:ad:83:01:6d:1d:56:b0:17:40:0e:6d:
67:d7:d1:b2:3d:0d:b3:31:08:d3:f1:eb:0c:34:ab:45:d3:29:
ea:22:7c:d6:e7:4d:7b:75:75:c7:e9:bf:97:63:18:62:a9:fc:
8a:65:9d:1d:3e:ad:45:b9:35:90:41:c8:37:73:f2:3c:7c:1b:
09:08:d7:64:19:44:88:f4:4b:53:e6:bc:53:f0:7a:f1:c2:78:
4f:b7:00:5f:15:e7:65:cd:e8:e0:70:5d:82:e4:6c:42:75:67:
aa:34:17:46:75:4c:43:12:03:bd:f4:0f:08:61:f3:45:f2:a8:
ca:ca:16:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:16 2026 by rpki-client