Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json)
Hash identifier: yAkd3qW6M44i32FRy2s2xe2J0k5Y6M/wXyvM2ZR/GHg=
Subject key identifier: 57:61:7E:C4:82:13:B3:90:25:D3:48:17:1E:03:24:FF:F4:D5:B9:97
Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Certificate serial: 019D3865E1602EF85EBE08B2CD7AC9A5E8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: SN/U3GW/gGVgzge0h4syrNJQKOX8zdIZ8P+6t8E9+zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e1:60:2e:f8:5e:be:08:b2:cd:7a:c9:a5:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=57617ec48213b39025d348171e0324fff4d5b997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:76:56:7f:48:48:e0:21:36:ab:78:42:3d:
74:b2:46:09:fb:e5:8b:d4:6f:50:d7:6a:7d:41:08:
f9:19:4f:ab:d2:ac:a5:6b:09:e4:e1:6f:ce:86:56:
db:5a:3e:2c:ef:49:da:06:0a:e5:7b:c6:c9:90:d2:
39:1d:29:4e:6a:7f:82:10:74:0a:4e:93:e8:fd:88:
15:56:03:3a:22:e0:ce:2e:08:f9:28:99:eb:e9:6e:
30:a0:ee:7c:bf:d0:9f:37:9b:cb:bf:51:a6:4a:1a:
9f:8f:fd:82:3b:db:57:f9:94:e6:da:0d:7c:8b:6d:
d3:68:f9:12:6f:ec:33:cc:75:99:1e:95:44:d8:48:
2c:3e:38:8f:82:a8:55:97:97:d6:10:73:54:82:47:
98:26:73:3c:d4:94:fc:b7:ee:c9:a7:d9:56:b2:95:
69:10:a4:9e:45:26:f9:9e:6c:cf:94:2f:1a:8c:18:
c4:29:8d:57:a4:60:ad:a4:d8:08:47:7b:75:49:fc:
c0:86:24:65:6a:59:38:d9:41:eb:c0:e4:db:8a:02:
95:d6:a4:43:05:59:a0:50:4e:92:cc:64:c4:83:e9:
c2:3a:90:77:bc:de:5e:91:73:4a:78:50:3b:82:35:
15:50:3e:cd:d9:38:cd:bc:5f:65:89:46:6e:1a:f1:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:7E:C4:82:13:B3:90:25:D3:48:17:1E:03:24:FF:F4:D5:B9:97
X509v3 Authority Key Identifier:
keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:96:0f:58:20:24:08:bd:bc:62:51:30:75:8e:84:b8:ef:
2b:95:ba:b7:62:03:b1:ad:e9:78:09:85:ad:82:e4:34:2b:3b:
4a:5d:3d:02:e5:ff:dd:ce:c0:50:c8:bb:db:b9:7e:f2:f5:c9:
5f:ee:8b:33:c2:b7:2c:de:c1:22:0f:96:3f:16:48:03:5e:fe:
87:72:1d:f7:dd:0e:04:f5:eb:f5:93:e4:4a:13:89:ab:6c:8a:
80:5a:b1:69:01:0a:15:14:05:33:09:1a:b7:52:70:61:43:ef:
64:64:f1:44:06:f2:dc:20:45:c5:33:05:3d:0e:aa:e7:04:13:
0b:c3:57:7c:42:30:b2:03:55:56:08:2e:b8:32:ff:7b:b7:b6:
1b:5a:14:41:f2:1d:eb:4a:db:19:c6:8c:48:ca:d9:3b:19:40:
2e:7f:d8:3f:0d:a9:eb:47:26:dc:27:df:72:e9:90:db:1a:82:
55:c2:ad:b6:98:aa:3e:05:7d:19:6b:00:08:59:34:ad:db:8d:
90:0d:ce:2d:18:42:81:e4:88:3e:26:5f:dc:37:d4:c0:5e:9d:
fd:82:3e:78:74:c7:2f:11:d7:67:de:80:8c:0f:c5:ff:b1:c8:
78:05:f7:50:0d:e7:3b:06:49:fd:95:de:ba:83:08:52:a0:bf:
aa:25:43:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeFgLvhevgiyzXrJpejSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGE0ZDIyOTkxN2Q0NjU3MzhhNDgyMWI2ZWVjNWJlYjI0
ZTZlZTQwHhcNMjYwMzI5MDcwMTM0WhcNMjYwMzMwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg1NzYxN2VjNDgyMTNiMzkwMjVkMzQ4MTcxZTAzMjRmZmY0ZDViOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFF2Vn9ISOAhNqt4Qj10skYJ++WL
1G9Q12p9QQj5GU+r0qylawnk4W/OhlbbWj4s70naBgrle8bJkNI5HSlOan+CEHQK
TpPo/YgVVgM6IuDOLgj5KJnr6W4woO58v9CfN5vLv1GmShqfj/2CO9tX+ZTm2g18
i23TaPkSb+wzzHWZHpVE2EgsPjiPgqhVl5fWEHNUgkeYJnM81JT8t+7Jp9lWspVp
EKSeRSb5nmzPlC8ajBjEKY1XpGCtpNgIR3t1SfzAhiRlalk42UHrwOTbigKV1qRD
BVmgUE6SzGTEg+nCOpB3vN5ekXNKeFA7gjUVUD7N2TjNvF9liUZuGvExrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdhfsSCE7OQJdNIFx4DJP/01bmXMB8GA1UdIwQY
MBaAFLoKTSKZF9Rlc4pIIbbuxb6yTm7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQt
MDU3YWQ5MzMxZmE4LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQtMDU3YWQ5MzMxZmE4
LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaKWD1gg
JAi9vGJRMHWOhLjvK5W6t2IDsa3peAmFrYLkNCs7Sl09AuX/3c7AUMi727l+8vXJ
X+6LM8K3LN7BIg+WPxZIA17+h3Id990OBPXr9ZPkShOJq2yKgFqxaQEKFRQFMwka
t1JwYUPvZGTxRAby3CBFxTMFPQ6q5wQTC8NXfEIwsgNVVgguuDL/e7e2G1oUQfId
60rbGcaMSMrZOxlALn/YPw2p60cm3CffcumQ2xqCVcKttpiqPgV9GWsACFk0rduN
kA3OLRhCgeSIPiZf3DfUwF6d/YI+eHTHLxHXZ96AjA/F/7HIeAX3UA3nOwZJ/ZXe
uoMIUqC/qiVDsw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client