Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier: /UsmYXHTalZLD+eXFyxSksJmOLz8nuSn6cvN2TaS/Zo=
Subject key identifier: E2:24:C0:A6:E4:FD:48:B9:25:80:AA:9A:F3:78:33:29:EF:E0:C6:AC
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 019D389C5B1E36F04BB5535B2C1A86B982F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (hash: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU=)
2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: y7/0H4//NmX6sy9/zGKTRhQf5T/jTPDni92ZxZblP5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5b:1e:36:f0:4b:b5:53:5b:2c:1a:86:b9:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=e224c0a6e4fd48b92580aa9af3783329efe0c6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:86:dd:e8:a4:0e:6c:81:00:0e:0d:c9:5c:
50:18:31:e2:cd:db:9e:ca:02:b7:b4:98:7c:ee:ac:
54:ea:b7:a1:6f:6b:ce:6d:ea:ab:f7:6f:0c:51:12:
da:39:cc:14:f9:22:3a:3d:bb:25:17:95:f9:ef:54:
bd:09:ed:31:72:75:3a:f2:14:94:19:95:55:44:15:
57:0d:07:86:9c:46:03:79:e4:3c:48:e9:67:03:b3:
4c:32:28:c0:99:01:35:c6:d4:be:0b:b8:5b:da:81:
2c:62:a3:26:38:29:ae:1c:fe:b9:6c:af:1d:a5:1a:
6e:fe:7b:05:ac:af:29:11:36:76:47:ec:7c:44:12:
2f:59:4b:ab:66:8d:5d:8c:34:94:35:78:4a:97:3e:
ae:b6:db:f6:cc:f9:fa:80:62:e2:21:b2:9d:6b:76:
9d:3c:6a:02:c5:50:23:a4:e2:fe:a3:d7:74:f7:13:
91:66:1f:2b:cf:bc:85:fe:25:8c:f8:73:4d:34:ad:
38:42:22:e5:18:88:c5:e7:94:5c:16:9c:d2:f9:dd:
9e:f1:9f:a2:4e:13:c4:b3:24:22:93:85:57:e4:44:
eb:7b:1a:ef:71:51:29:f9:ad:1c:d2:3b:b9:18:ee:
84:a9:fe:c4:62:c1:53:cd:b2:ba:c3:f1:af:00:6b:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:C0:A6:E4:FD:48:B9:25:80:AA:9A:F3:78:33:29:EF:E0:C6:AC
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0b:5b:91:a1:a7:22:8f:f5:b7:0d:ac:98:65:9d:9a:26:36:
14:ec:71:ed:fd:fe:5b:c1:1b:99:90:f3:e5:32:6d:39:18:0f:
42:95:11:9c:59:bd:02:90:2b:8c:fe:f1:4f:4a:b8:5f:62:f2:
83:12:67:bf:cf:cd:61:a5:19:06:18:6b:4f:14:dc:52:dd:94:
38:af:ee:c7:22:18:4a:2c:df:ae:25:3d:54:90:f4:be:36:fe:
d4:63:84:68:c5:7c:70:d9:f7:40:22:d8:58:b0:d2:d7:e6:3c:
6d:9c:eb:83:18:c8:99:54:34:6c:03:7e:70:bd:de:d2:63:9c:
8e:37:b5:52:8a:c0:85:42:6d:b5:f0:99:bf:d2:02:62:8d:80:
b4:53:bd:44:83:c9:28:39:19:3e:6f:da:0a:86:59:3b:65:a9:
d1:94:28:f1:1c:14:c7:14:fd:45:92:03:fd:ce:23:07:c2:ea:
1b:20:6b:91:46:4a:f3:11:c4:09:99:d2:06:e6:b5:c7:a5:1c:
48:e4:02:75:3e:32:63:14:75:7e:96:ec:e3:e8:93:bf:a4:d5:
c9:4e:67:77:c6:a0:28:90:9a:d7:4d:1c:cb:6e:68:ab:7d:e0:
4f:fb:af:79:7f:78:73:01:fb:05:a3:7d:cf:f8:47:c1:7f:18:
f4:d4:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:51 2026 by rpki-client