Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File: UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier: HzwgEItXvjwp9UfoN5eUMXYj44iBDIMMRuCR54s/2zQ=
Subject key identifier: 3A:E1:DF:AC:C6:ED:21:85:F3:E4:9E:29:BE:91:96:52:80:96:7F:6C
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer: /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial: 019F954943CBEDBCBA0FB711A2D412D1543B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:34 +0000
Manifest this update: Fri 24 Jul 2026 18:00:34 +0000
Manifest next update: Sat 25 Jul 2026 18:00:34 +0000
Files and hashes: 1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: iE1jHFJwKeGSJdscBuFOMz4MMk8tYVy4jnnfZhxxFzg=)
2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:43:cb:ed:bc:ba:0f:b7:11:a2:d4:12:d1:54:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Validity
Not Before: Jul 24 18:00:34 2026 GMT
Not After : Jul 25 18:00:34 2026 GMT
Subject: CN=3ae1dfacc6ed2185f3e49e29be91965280967f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:89:c0:72:d6:34:ed:c2:db:2a:8e:ff:2b:ed:
ca:62:8d:e4:a0:62:b7:92:b2:bb:ad:18:ec:b7:ac:
cd:70:f2:2b:98:24:ea:9a:b0:ae:38:c1:94:2d:12:
05:5d:53:f1:d3:d4:96:cf:5d:c9:80:f8:94:3a:15:
75:ce:f5:d0:a6:17:80:96:5c:d8:f6:47:5e:02:91:
e7:ec:96:98:9b:9e:82:2b:a5:2a:75:ab:ad:ec:b9:
ba:6b:c6:51:d2:1c:c5:ec:a1:50:25:c5:5b:0a:a5:
e8:46:cc:49:f9:c6:dd:3b:50:c7:5c:8d:dd:10:30:
63:7d:92:b0:6f:1d:c6:9e:ba:29:8c:ea:90:90:85:
a2:2f:02:83:ec:35:71:89:c0:98:c5:88:86:50:c0:
e8:d6:1c:05:e8:2b:b7:07:1b:0d:a6:15:4a:90:d5:
a8:fc:aa:42:1c:08:39:d1:7a:d9:01:88:b4:a7:0a:
1a:6d:d2:c5:b3:5c:27:58:0b:19:0a:eb:ac:04:f5:
0e:59:e9:b1:9e:6c:9e:73:3e:89:9d:c2:6f:f4:69:
e9:25:79:07:e3:6c:65:50:55:be:d2:02:3a:66:a5:
c4:79:0a:ca:58:56:c6:44:3d:4c:c2:73:c0:8b:65:
e1:30:7c:a9:1f:d8:31:95:3d:8c:95:02:1a:d1:c9:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:DF:AC:C6:ED:21:85:F3:E4:9E:29:BE:91:96:52:80:96:7F:6C
X509v3 Authority Key Identifier:
keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f6:30:77:47:1f:71:3b:27:44:27:7b:a8:c7:8a:45:1c:f5:
56:2b:a9:51:d3:e6:2e:ff:d3:f0:c2:11:01:b7:e9:37:23:9e:
15:0e:78:1a:9a:71:e9:b3:23:80:81:23:8d:a9:a8:81:f2:2f:
98:6f:85:b3:bd:51:96:b1:75:9f:ff:c2:ff:79:34:08:67:13:
a4:12:d3:6a:bb:eb:d8:d3:f0:54:2e:02:89:c5:21:0f:ad:66:
ef:e0:7d:5d:b9:55:36:b3:38:cf:db:62:6f:c0:d7:89:03:64:
58:4e:9d:1b:8a:00:d1:9e:ee:97:1d:2f:de:24:67:a7:27:e5:
0c:ec:1b:de:02:26:ff:d0:f8:17:ab:0a:af:9f:25:dc:54:f8:
ff:e5:20:85:cb:d4:3a:ab:68:b2:7a:7a:ec:e3:1a:fa:d1:e5:
b6:1b:a3:fc:74:83:b2:2c:d9:0e:7a:88:9e:75:ba:80:53:f8:
64:30:54:00:ae:54:81:60:46:44:e9:ff:cb:81:80:f3:4e:5c:
47:52:71:69:d4:a4:85:84:d7:1b:3b:e6:2b:b3:26:4d:93:9c:
2d:56:e0:1f:d1:63:85:20:60:2b:11:ac:14:61:03:d3:6c:c4:
54:44:ad:c1:58:a9:be:b9:49:c7:a8:96:3a:5f:4a:d6:65:e0:
a7:b6:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:20 2026 by rpki-client