Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
File: UB7eLUfXfhQKl78pidqCpYdzyMA.mft (raw, json)
Hash identifier: hmhxPhhXnqRTiLtCxYmpFwfQ6RYYzJmM1/U255al33A=
Subject key identifier: C4:98:D8:E7:40:6E:C3:44:6E:AA:2C:E5:43:A9:D0:F6:36:AB:60:97
Authority key identifier: 50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
Certificate issuer: /CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Certificate serial: 019D3865954561306D512EA08C1B0B9C3156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: UB7eLUfXfhQKl78pidqCpYdzyMA.crl (hash: 8kzYpzEPcZ4dg5X9j7W1Q1w/qNOJBMiJmwh9z6G2mBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:95:45:61:30:6d:51:2e:a0:8c:1b:0b:9c:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501ede2d47d77e140a97bf2989da82a58773c8c0
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=c498d8e7406ec3446eaa2ce543a9d0f636ab6097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:fc:fe:a6:78:a7:ae:59:04:88:84:08:f2:
85:69:21:72:9a:10:e2:18:63:58:0f:d8:7c:d5:aa:
a8:61:35:38:e2:65:51:fb:76:c3:c7:fe:d4:bb:7c:
9a:4b:fa:10:7e:a0:6e:86:ee:2b:b0:58:c8:31:ad:
12:27:72:d5:2f:76:b9:b9:d1:8b:8c:4b:af:91:ae:
47:88:81:91:5b:6b:22:f4:cd:58:7d:91:de:3b:a1:
63:d5:df:5f:b4:0a:86:ab:df:ad:ee:4f:a6:f9:64:
0a:fc:f3:18:78:ec:24:62:ef:cd:4b:1c:3f:2f:cb:
fa:e3:72:0d:04:f1:45:a5:bc:89:16:10:f6:bd:e4:
66:54:bd:24:1c:5a:a6:ea:cb:fa:62:86:a0:3b:35:
98:39:49:06:d4:05:95:f3:3b:7e:82:6d:72:ec:da:
97:ba:0b:e0:b3:ff:97:ef:c7:f4:75:53:24:37:f1:
63:7f:2b:76:63:6a:6e:e3:8b:54:d4:b4:a1:fa:cb:
2a:5a:12:82:90:93:32:16:43:93:96:5e:6a:f8:43:
33:16:d1:1c:a9:5b:8f:e5:d8:b8:81:80:5c:76:03:
9a:bb:09:e4:8b:bf:92:fb:1f:3c:e5:6f:aa:28:29:
24:18:2d:9e:5f:03:97:75:0e:13:d4:13:6c:20:1b:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:D8:E7:40:6E:C3:44:6E:AA:2C:E5:43:A9:D0:F6:36:AB:60:97
X509v3 Authority Key Identifier:
keyid:50:1E:DE:2D:47:D7:7E:14:0A:97:BF:29:89:DA:82:A5:87:73:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UB7eLUfXfhQKl78pidqCpYdzyMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/01b79c-7225-4916-8221-12edd0e0d21b/1/UB7eLUfXfhQKl78pidqCpYdzyMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:3c:bd:4a:05:ac:e0:5a:cd:00:65:6b:88:98:47:d5:27:
28:ef:07:fe:8a:75:f3:37:3a:e7:f4:8e:e6:de:81:d9:cd:91:
d3:c5:ab:f6:4a:6c:ca:b3:21:b4:21:70:af:b1:f4:b1:e7:0a:
1b:fe:00:50:ff:47:1c:b9:48:24:1f:97:b2:47:cb:cc:d1:d0:
07:3a:90:06:ea:46:c2:a9:ce:9a:8b:7b:89:c7:76:0a:53:e2:
0a:a0:4f:e2:43:cf:ff:ee:ff:13:e3:c7:ae:40:43:a9:88:85:
2c:6b:dd:18:64:a6:50:28:69:8b:89:9c:c1:81:2b:ea:ed:a3:
f3:49:8e:67:d6:43:12:4d:b5:73:a7:25:b1:04:db:17:eb:b8:
da:98:24:10:cf:b9:ba:50:75:a5:30:9a:b9:19:95:2a:e6:54:
d0:a0:27:55:38:bb:7a:8e:fa:20:59:89:7c:6e:d8:4d:e6:05:
46:fd:28:ec:c5:db:fa:5b:0a:0d:3c:9c:3e:45:e9:2d:0c:89:
54:f6:eb:fa:25:b2:77:c0:72:29:67:a3:e8:75:2f:ff:1a:ca:
99:96:96:f9:52:f9:65:f9:3c:3e:35:17:1f:15:9b:2c:df:2a:
13:1a:c4:8b:74:00:5d:98:01:7d:4e:50:68:4d:07:5c:7a:4e:
8f:05:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:37 2026 by rpki-client