Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: zMxpgAhE5C1qSN6cN9ZAcXSX0KXyH4TLHy/Uua+LD8c=
Subject key identifier: BE:F4:BA:E2:F2:0C:0C:C3:B2:87:90:4C:09:56:98:1E:1F:94:A0:12
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019D2772737B9C43A635DB140BD0BBD75794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 1105
Signing time: Thu 26 Mar 2026 00:01:45 +0000
Manifest this update: Thu 26 Mar 2026 00:01:45 +0000
Manifest next update: Fri 27 Mar 2026 00:01:45 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: xoPEJ4o1FEozHcWi2Gse81TTulGHXGqHFoaz1LUY1xY=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:73:7b:9c:43:a6:35:db:14:0b:d0:bb:d7:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Mar 26 00:01:45 2026 GMT
Not After : Mar 27 00:01:45 2026 GMT
Subject: CN=bef4bae2f20c0cc3b287904c0956981e1f94a012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:03:25:08:99:d2:c1:a0:25:37:f9:f7:aa:
df:64:39:53:a0:53:60:5d:af:26:25:a3:69:b4:35:
cb:13:d0:28:28:1b:b2:19:d5:12:e5:e1:e6:39:b0:
fb:87:80:d1:51:dd:8f:3c:9b:11:4c:fe:62:22:9e:
7c:4e:93:a7:2d:7a:7e:d9:2f:f3:5f:af:10:15:9e:
a7:56:31:34:c5:d1:c0:8d:dc:e9:b9:49:43:c9:a3:
9d:0b:51:b8:90:37:3f:64:b3:31:31:30:49:f6:25:
ec:5b:90:14:ab:e2:34:89:89:9b:4f:09:3d:b6:8d:
db:24:52:03:8d:ef:a8:b0:13:fc:b2:ee:f6:3f:d9:
6b:10:68:77:01:04:e8:52:9c:03:83:5e:8e:f6:ff:
2e:94:6f:bb:a6:26:51:c6:86:c4:f2:18:1a:63:4c:
bd:ae:e5:68:49:37:35:bc:b0:0c:a9:e9:ec:51:77:
1c:ca:99:4e:9c:da:8a:3b:32:e3:47:8c:f7:f6:19:
42:ac:66:af:93:ad:1f:48:8a:7d:d4:2e:4d:b2:ec:
d1:e1:34:d3:7e:27:d6:b4:6b:45:4b:ce:2d:a4:6a:
f8:17:f7:d4:57:d0:62:c5:46:58:a1:e6:15:a7:20:
e2:64:c2:7c:85:ca:47:b6:50:2e:e9:50:78:dc:1a:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F4:BA:E2:F2:0C:0C:C3:B2:87:90:4C:09:56:98:1E:1F:94:A0:12
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3d:41:af:19:87:32:f6:8d:0e:36:ca:d5:cf:be:c7:d3:50:
89:78:4f:56:e7:2b:50:35:ed:5d:67:6c:57:a3:49:78:be:3a:
10:13:33:17:90:72:1a:8a:63:6d:ee:0d:25:74:89:97:0e:57:
0f:e7:06:35:fe:0a:e0:d0:90:ea:6f:a2:11:64:7e:23:ba:e4:
f1:d4:ce:42:b0:7e:7b:a3:7d:a8:61:cf:82:6d:78:12:73:a0:
f0:4f:64:ca:e8:0f:2a:6f:03:84:28:9f:be:4f:52:91:de:18:
b1:b8:a6:19:2b:1c:24:a7:2d:3d:cb:38:36:eb:e2:2b:31:89:
7d:92:99:9d:56:36:b6:72:fd:4d:37:b4:b5:fa:04:c4:44:e7:
9f:cf:78:ad:64:fc:92:a2:72:0e:d6:a5:3f:c5:f7:29:56:25:
c3:9d:ee:58:4e:a4:e6:9d:19:11:68:6f:81:72:f0:7a:04:7e:
dd:20:49:5f:54:86:53:ba:9d:f5:45:eb:24:4e:2d:15:c9:01:
07:36:b1:9d:07:82:2f:c7:ef:ad:c0:58:4c:c0:f8:35:00:c9:
d9:3f:59:8b:56:b5:a2:a4:38:51:1f:14:df:93:97:d7:1b:11:
00:22:da:a6:78:06:04:5b:6c:62:c1:75:b1:57:05:e4:ec:f7:
f5:37:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:20:16 2026 by rpki-client