Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft (raw, json)
Hash identifier: mwgLhB8TdRODntnRYPjco2NUB9g+YrZ7mO2W8kW9a/Q=
Subject key identifier: CE:72:EE:D0:22:98:47:50:EC:8E:36:1E:A1:02:FB:DD:06:9E:1E:50
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 019D375223D71FA2884CDA14C8D724EE6B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
Manifest number: 075F
Signing time: Sun 29 Mar 2026 02:00:23 +0000
Manifest this update: Sun 29 Mar 2026 02:00:23 +0000
Manifest next update: Mon 30 Mar 2026 02:00:23 +0000
Files and hashes: 1: UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl (hash: bD7x4nEUcL/BfhiD45+d2FPUE2eaaGlUNYMUWz4nZHY=)
2: kyxqx7NPhGb4ggxOfoZpnu1n_S0.roa (hash: TCL6ozSUuPbHKcQL9MhFYjm+l3Ilnl3GbAL+XQhGlFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:23:d7:1f:a2:88:4c:da:14:c8:d7:24:ee:6b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Mar 29 02:00:23 2026 GMT
Not After : Mar 30 02:00:23 2026 GMT
Subject: CN=ce72eed022984750ec8e361ea102fbdd069e1e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:63:23:fe:9d:91:1a:8e:df:1b:ab:3a:82:
7d:02:3e:0c:95:95:77:89:3c:31:f2:64:23:b1:f9:
67:d9:5a:9c:81:92:20:7f:87:d1:0f:ed:6a:ef:c0:
77:72:5b:a3:7a:ad:58:66:61:f9:5a:9c:6c:02:cb:
b3:f6:17:16:4c:bf:15:a2:de:64:85:98:5b:f9:2b:
c8:a3:a9:86:54:ca:cb:e8:f9:f3:c3:83:a1:72:06:
70:1b:35:e2:8d:37:87:c4:3e:6c:05:bb:a7:52:79:
60:5d:5e:87:be:cd:af:29:ac:81:70:d1:03:05:30:
1e:1a:da:2b:c8:83:5c:fb:bd:72:70:92:3f:bf:38:
c5:e8:66:1a:05:b6:00:3f:74:08:6e:08:dd:66:0d:
8e:00:21:45:60:85:ab:c2:41:e4:28:fa:9e:41:3d:
71:ab:c6:ab:0f:54:2f:5e:73:9c:18:8c:81:7f:23:
dd:ec:6a:0c:90:47:2c:2c:fb:b6:c3:98:47:20:db:
5f:45:a6:db:2d:4a:18:ea:ab:16:99:1a:cf:84:8e:
57:7e:f5:94:04:25:67:84:ed:a8:a9:a4:bd:bc:35:
e4:1d:ee:6b:00:d2:c5:56:02:61:4f:5e:fe:e4:d3:
db:44:66:1d:d9:f4:c5:0e:df:2e:1d:09:53:fc:c1:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:EE:D0:22:98:47:50:EC:8E:36:1E:A1:02:FB:DD:06:9E:1E:50
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:74:bc:05:3a:08:b9:73:51:9f:17:45:6e:02:7e:b3:01:80:
62:d2:17:0f:f3:7c:61:35:b1:98:8f:52:54:58:7d:f1:b6:7d:
fd:c2:83:2b:7b:0d:c2:0d:90:58:df:ef:a3:de:3d:74:f1:93:
9a:6b:76:71:30:84:07:e5:44:d3:a7:09:b3:fd:d0:cf:bf:a5:
b8:51:cb:84:a8:0c:1a:55:10:a9:0a:35:fc:44:b2:d8:db:9e:
03:7c:a4:e9:9f:dc:20:8f:45:69:d4:28:57:35:e9:25:85:66:
56:5b:a4:22:36:a5:ba:c5:7c:fe:b9:59:4f:b6:fb:9d:b7:f7:
9b:68:68:a4:78:96:34:86:29:af:45:cf:e3:fc:7b:96:be:89:
68:0c:4c:ba:b6:ab:00:a7:7d:86:83:32:23:f6:1a:2b:f0:b1:
85:95:20:2f:f5:ac:37:2a:94:eb:f2:82:f8:46:e9:3d:1b:1d:
ee:7f:b8:0b:e3:a9:01:eb:8f:cd:3c:a7:b4:f4:02:46:f2:8a:
ad:b0:bf:ef:c9:ec:f9:46:08:59:66:a9:36:85:d4:b6:66:76:
24:ad:ff:f9:34:43:5d:79:6c:6e:bb:16:34:1e:47:42:bd:21:
1f:ca:ce:98:3a:a0:cf:65:a0:56:46:c2:98:55:58:dd:ad:d4:
d8:9a:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client