Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: FqLuAj5ause/NUoTpOzhzabnnLTkcDWaWgr5furC/Tw=
Subject key identifier: 9D:2F:6B:B2:2E:83:35:98:93:59:B2:72:FE:8E:75:FE:4B:D3:F0:F2
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019D37C038225085F9CBB71E073B15FB6D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 15E1
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: iypgb33VG3+PbsgZjc/dyxvFqwHRsil5XzRgsjXeSXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:38:22:50:85:f9:cb:b7:1e:07:3b:15:fb:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=9d2f6bb22e8335989359b272fe8e75fe4bd3f0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:a2:79:59:16:be:7c:50:b1:4d:dc:fc:3e:
0c:e1:bb:9a:4b:52:67:96:d3:f6:64:06:ea:46:4c:
87:aa:6b:fe:cb:52:41:f6:6b:21:b7:13:99:2c:ce:
89:89:21:b1:c5:bf:8e:fc:6a:99:75:40:d3:6d:d2:
04:b0:c9:85:45:6d:e3:94:d1:fb:07:1e:c2:c7:ac:
6b:27:5e:ff:48:ed:59:0a:4e:bd:e7:a9:66:6c:59:
b2:ef:40:cd:17:ae:bc:59:70:ca:33:2a:2b:eb:f4:
b2:19:02:8b:70:4c:98:1c:57:10:c5:cf:4a:91:20:
94:d8:ca:fc:63:cf:6a:30:60:75:92:79:52:75:e9:
4c:9e:c6:13:3c:55:63:6b:3e:a6:c2:26:6f:4b:f1:
42:44:13:c4:6d:d0:7b:5e:96:2e:f1:8a:31:f4:0b:
d6:9b:50:ea:d0:48:76:4d:c0:b0:97:c1:5b:9a:45:
20:35:b9:0d:95:fa:3f:23:ca:de:a1:29:4a:e7:5d:
20:82:fa:27:74:4e:0b:52:26:87:68:77:9d:29:40:
8c:d9:21:2f:73:63:a4:30:0a:4d:ed:da:05:a9:af:
be:2d:74:c9:0b:1b:dd:ef:bf:96:00:46:8f:a2:4e:
4b:e8:fc:12:51:a0:54:e8:58:9a:29:e3:0f:c7:d2:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2F:6B:B2:2E:83:35:98:93:59:B2:72:FE:8E:75:FE:4B:D3:F0:F2
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:94:eb:d7:50:9d:dc:b1:c9:d6:88:15:66:0e:1d:b9:73:61:
2c:22:f6:db:d1:f0:24:54:09:5f:b4:a7:fc:c6:a0:f0:ed:c5:
21:5b:9c:75:c5:fa:ff:9d:44:f5:97:dc:6d:bb:e2:c2:e5:68:
00:e3:51:1f:3a:37:de:bb:d3:3d:57:a1:24:c4:af:05:6c:6b:
0f:11:78:eb:3a:30:79:7c:f4:ec:10:eb:fc:6b:41:e9:31:70:
5b:84:2d:31:97:1d:de:e9:91:a5:91:51:b0:2f:6a:96:f1:5c:
4e:c6:a4:d8:3e:4c:53:ff:c3:60:d0:07:78:d8:db:4c:d4:46:
bb:f8:4c:65:59:11:74:f7:a7:fd:88:3e:e8:1f:5d:03:cc:4d:
d5:60:bc:43:f9:46:b2:37:5c:2c:eb:5e:b3:a8:7d:dd:92:6a:
40:bb:0d:9a:14:0e:84:dd:0a:90:69:f9:fc:97:e9:98:43:3a:
f8:37:53:ae:10:a0:4a:0a:b7:d9:75:fd:01:28:0a:68:2e:8e:
72:62:49:93:a1:a8:70:f3:56:20:4f:23:bb:9e:63:ae:cc:81:
ac:1e:34:c7:14:70:d8:01:1b:98:c1:6f:f3:62:b4:64:45:1e:
46:38:06:38:2f:f6:f0:b9:f8:9a:89:cf:d0:53:7c:9f:e1:76:
01:34:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:10 2026 by rpki-client