Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: tjceZjuopHJ8KMLi1z/J1cs6V9iWAz7d+MqNku2lC8c=
Subject key identifier: AE:37:46:2D:06:94:82:73:50:64:05:1C:2F:E5:3A:82:E1:EF:8E:DD
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019D38D3A92D9677DB91ED9BC2B9B8F64601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 15DA
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: 4vRrFfHEC3GgT1183FGac5Crjjs.roa (hash: ZrwSZSbeJqZyB/UsX8E/gauKcYuf9yaAKmeIWSckNBg=)
2: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: hmfen2SoJnd9MZiv8sHoE/rtVoMAYh/Hht4MzI5JAtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a9:2d:96:77:db:91:ed:9b:c2:b9:b8:f6:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=ae37462d069482735064051c2fe53a82e1ef8edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:57:ea:a9:69:5e:9d:2d:4a:81:7a:72:93:
08:4d:39:44:9d:81:d4:42:ae:c5:9e:31:d2:fd:91:
4b:98:67:2a:45:fa:77:1e:0c:35:94:5e:ba:a9:6a:
ed:be:91:81:9c:ec:8c:0e:67:00:96:0b:83:04:d7:
48:5d:12:cb:33:c7:21:6f:72:7d:db:c6:a3:4c:c6:
62:1f:b4:7c:83:2b:fd:76:5b:60:07:f2:e4:54:1c:
82:eb:84:ad:c6:63:42:84:7a:50:b4:77:84:d3:d5:
1d:e7:83:eb:78:98:76:ce:d3:96:9a:d0:ef:1c:ef:
ee:36:00:6a:06:54:7c:6e:e0:e7:cf:75:b9:02:ba:
15:75:15:8d:cf:8f:d2:a7:71:08:e8:f4:7a:fb:9b:
b1:19:ef:96:03:7b:01:67:d6:b6:d1:71:08:dd:0a:
b9:f3:c0:11:53:5a:53:c1:9c:f0:83:1f:39:0b:7c:
1f:3d:05:d6:33:d7:05:19:7e:6e:b2:ef:ea:1c:1c:
7e:a0:4b:9f:ec:41:08:4c:26:ab:9e:56:7f:3e:03:
b8:91:d3:ab:d4:ae:4f:61:9b:b6:a7:ea:4e:d2:6e:
c4:20:c8:23:78:59:d2:18:6e:a7:bc:82:12:a1:80:
71:23:5f:c4:26:87:03:d6:52:85:cd:1c:37:19:ed:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:46:2D:06:94:82:73:50:64:05:1C:2F:E5:3A:82:E1:EF:8E:DD
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:76:55:9d:f4:01:b1:ab:55:53:19:fa:dd:d4:96:9a:57:
7d:d1:82:26:65:29:0e:57:28:f0:2b:78:54:e6:b7:58:29:5b:
53:e4:6c:1f:6d:14:83:51:94:af:9c:aa:62:39:2b:a7:fc:10:
87:cb:ea:d3:fd:62:bd:69:7f:33:b9:23:85:8e:e8:5c:9e:83:
aa:05:83:23:fb:16:41:27:95:23:6b:2a:12:26:9b:be:3d:3b:
59:1f:da:15:c9:f6:b4:b5:3f:23:70:37:a9:55:df:8f:32:e7:
ff:c3:ae:e1:e2:62:22:9d:9f:7b:7d:9e:c2:a6:c3:e8:3e:8b:
e8:c5:2a:ae:0c:2f:bd:51:36:fb:56:4a:a7:ee:50:89:04:8c:
a8:80:c5:66:84:08:3e:8b:00:53:9a:40:61:f6:35:c3:49:14:
fb:15:54:03:93:86:50:4e:03:64:8b:52:15:c4:07:51:a0:1a:
ad:d9:26:f5:83:7f:b9:9e:d4:3a:b8:52:a1:c6:de:e9:09:5a:
ae:aa:f3:23:aa:0b:3b:a4:a9:98:a5:d6:f8:75:8b:46:2b:29:
cd:b5:34:24:2f:0b:35:65:11:29:19:f2:db:37:8d:7a:2f:93:
46:54:e9:0c:f0:fd:13:1b:8c:33:de:bd:31:58:6a:07:a1:d0:
7c:60:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client