Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: eWm4KwRAHqcxhJsWB8yO7IRhWPstYUAqWBRrRROFzUw=
Subject key identifier: 33:F0:2D:29:7C:0C:35:B9:4F:08:87:4A:90:6D:A4:50:96:C7:F0:1F
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019D2884AE617901B92CA75E4172C6BBDAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 04C3
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: vQn5RIbp8PnpXo1OgbMEUI80v0KnRM8ouIdibf9n5y0=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ae:61:79:01:b9:2c:a7:5e:41:72:c6:bb:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=33f02d297c0c35b94f08874a906da45096c7f01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:46:4a:7b:ef:ea:3c:71:8c:f2:10:bd:43:
7c:ef:02:53:8f:4b:3a:82:5e:05:cc:93:07:85:87:
cd:e2:6f:9c:42:fc:cc:ca:fc:e3:a2:77:2c:13:73:
65:ba:d9:a7:a7:35:0c:2f:35:6e:32:be:b1:ab:c1:
6e:33:5e:6b:3b:08:fb:b0:54:cf:30:71:56:00:7a:
78:27:af:c3:a9:a0:fe:aa:48:9e:8b:19:e0:aa:9d:
a4:ec:bb:25:b6:02:88:21:ad:cc:c0:5b:c2:70:bd:
b5:93:b7:74:26:f2:80:76:ff:9a:db:57:6b:7f:28:
3f:46:17:52:c7:f3:73:b7:95:1b:a2:e9:81:ae:10:
6a:83:30:37:c7:1f:76:23:9e:3e:3c:85:05:28:96:
ce:ff:a5:b4:6d:0e:92:02:c8:90:ae:e1:81:06:20:
8c:14:0e:54:4c:d8:01:1f:04:01:c6:4b:d0:24:e8:
fa:ee:55:f7:1d:ea:ef:b7:0e:9f:3c:eb:aa:4b:65:
ce:e7:42:2c:47:8b:56:11:08:70:86:d8:87:85:5a:
aa:11:23:4c:6d:fa:d2:8e:0e:7f:3e:14:b2:48:9f:
f7:dd:19:ff:53:d1:87:32:6a:e8:d6:92:c0:14:f6:
b1:24:3f:d0:54:52:5c:57:af:f9:b1:c0:63:74:e2:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:2D:29:7C:0C:35:B9:4F:08:87:4A:90:6D:A4:50:96:C7:F0:1F
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:c6:dd:bb:37:26:3e:7e:c9:2d:9f:c0:b4:20:b5:74:40:
12:ad:e9:17:84:5d:c1:92:9c:f5:43:fd:f2:83:fd:c6:c1:3e:
86:28:38:8b:a3:c7:0d:d2:d5:fe:fc:28:39:93:15:b9:89:03:
a0:8a:69:1d:8b:cb:4a:00:37:ae:fd:2f:13:80:6a:86:89:4d:
00:78:27:e4:51:a7:e7:a0:4c:24:0f:96:23:fe:02:84:dc:16:
23:1e:9f:3e:d1:df:09:73:3b:5a:5c:19:55:6a:3f:af:3b:b0:
1c:a9:31:98:6d:ff:3b:37:a7:39:67:41:7d:24:d4:15:e3:8a:
85:e4:82:9b:bc:2e:84:bc:34:3d:98:6a:7a:55:a1:d1:fb:63:
2c:1f:46:6a:30:9c:18:60:a3:4e:22:71:62:ca:87:ba:7d:17:
55:63:6c:42:d0:54:da:ab:0f:52:05:f8:57:18:d8:c6:2c:d9:
8e:90:3e:98:67:d7:43:b5:28:8d:be:01:38:e6:0b:c1:e6:7e:
9a:94:77:9a:c6:d0:36:fc:86:0c:26:00:d9:59:b5:36:ea:eb:
34:d2:fa:89:be:70:e4:da:7e:b8:e4:b5:0e:f1:ba:f3:ed:a4:
6c:fb:6c:32:b6:97:7c:31:00:5d:9d:31:a9:6e:0f:23:9a:0e:
5b:0f:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:46 2026 by rpki-client