Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft
File: UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft (raw, json)
Hash identifier: ss2+fkUG6UVVTj53F32tsjIaRZoVDXAcUaoiA0WNkz8=
Subject key identifier: 0B:B2:2C:61:84:66:2A:AC:7B:B1:4C:D8:8C:59:4B:36:1F:2E:E4:B2
Authority key identifier: 50:18:24:7F:BC:EE:38:85:77:D9:A4:C4:DF:FC:13:74:46:1B:F8:9A
Certificate issuer: /CN=5018247fbcee388577d9a4c4dffc1374461bf89a
Certificate serial: 019D34BF9036AC0FBC66F6C9D87873BD7ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgkf7zuOIV32aTE3_wTdEYb-Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft
Manifest number: D4
Signing time: Sat 28 Mar 2026 14:01:02 +0000
Manifest this update: Sat 28 Mar 2026 14:01:02 +0000
Manifest next update: Sun 29 Mar 2026 14:01:02 +0000
Files and hashes: 1: UBgkf7zuOIV32aTE3_wTdEYb-Jo.crl (hash: yq5N9gO1pWnzOP7IT6HF0d/UFcbybKuXMetY0hPzfyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgkf7zuOIV32aTE3_wTdEYb-Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bf:90:36:ac:0f:bc:66:f6:c9:d8:78:73:bd:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5018247fbcee388577d9a4c4dffc1374461bf89a
Validity
Not Before: Mar 28 14:01:02 2026 GMT
Not After : Mar 29 14:01:02 2026 GMT
Subject: CN=0bb22c6184662aac7bb14cd88c594b361f2ee4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:dd:60:df:e4:59:fc:e0:39:b4:82:5c:76:
f9:bb:82:5d:8a:8f:30:e1:4d:ac:b6:51:31:56:f0:
22:ed:5a:93:e0:c0:fd:99:f7:dc:66:c8:0a:48:e8:
41:a6:8b:a6:2f:06:df:6b:4a:94:1c:0a:79:39:02:
37:cf:f6:f0:99:cd:0f:22:57:35:fa:32:c5:f6:45:
9f:18:2f:72:41:e6:37:43:b3:15:bf:f1:9a:2a:67:
1c:b2:ea:44:97:50:9e:57:87:28:12:4e:6a:97:81:
ff:c1:bd:47:c4:c4:d6:90:7c:49:ee:36:74:54:4b:
48:51:94:95:2f:96:fe:89:fc:d9:66:7f:2d:54:03:
2e:f2:f8:93:a5:d4:a6:ac:bb:de:89:5f:14:dd:33:
e1:3e:ff:22:17:73:0c:bb:67:9b:a5:da:18:d9:20:
fd:df:2f:c8:71:9a:13:51:62:c4:43:73:2c:1f:01:
b9:2b:08:e3:14:3c:5c:02:bb:4b:c4:fc:11:7d:68:
c2:a8:a4:12:8d:8d:d6:f5:ec:d3:dc:12:10:03:ff:
c4:3b:b9:1d:1e:2e:3d:69:7b:10:31:9c:d3:b3:a0:
f9:6c:bf:ea:49:42:21:d1:33:f0:fe:5e:95:1b:8a:
21:2e:33:4f:d9:f9:9c:96:7f:25:61:de:d2:11:bb:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B2:2C:61:84:66:2A:AC:7B:B1:4C:D8:8C:59:4B:36:1F:2E:E4:B2
X509v3 Authority Key Identifier:
keyid:50:18:24:7F:BC:EE:38:85:77:D9:A4:C4:DF:FC:13:74:46:1B:F8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgkf7zuOIV32aTE3_wTdEYb-Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:5d:b2:10:67:f9:9e:11:78:cc:54:82:64:a3:0b:62:d8:
f7:25:ee:87:b8:88:c6:e0:34:79:ad:93:9b:b2:31:db:75:54:
c5:13:f6:c7:2b:2b:16:32:6f:a7:bc:77:01:f9:40:58:57:d5:
26:10:82:38:8c:96:e1:7e:86:a0:fb:92:f4:f7:13:aa:c3:74:
d8:d9:70:f5:26:33:a7:23:8a:2d:ef:36:4a:f2:7d:ae:25:f5:
3f:ea:46:d7:fe:1d:c2:4c:8d:8c:73:ba:d3:bc:72:e8:b5:40:
b8:70:e3:ce:8e:b3:45:29:6e:93:39:45:1f:b7:b8:99:9d:73:
10:3c:a9:5c:af:99:64:05:14:aa:82:52:77:f1:e0:3a:fa:a7:
d5:9c:f6:17:f0:ee:8f:ba:8e:af:19:6a:a7:1c:d2:e2:7b:89:
6b:a6:af:ec:29:f2:9c:4a:17:4e:5f:75:d4:11:84:f3:cd:2d:
2d:f1:ed:6c:e0:e1:76:13:e5:d0:b5:69:a6:b6:4f:78:b8:d9:
41:a7:78:c3:b6:01:7e:e2:5a:9c:c1:66:d6:e7:a2:6c:c3:14:
2d:56:27:14:bd:04:55:c3:c1:c7:b3:45:69:8a:3f:7f:a2:94:
b9:be:0d:0d:17:ce:ce:82:dd:42:d2:f1:ca:55:b2:7c:2c:70:
31:18:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:04 2026 by rpki-client