Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: RCQ+wzUA7EAZzSOs7YZlzbvASCsw47ZtjHHCtj6VzIY=
Subject key identifier: 3C:E3:C6:F1:16:19:76:37:9A:44:6F:E6:72:2F:AB:DA:F8:EA:52:11
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 019D389C1A6480D76303FF95A076ADA850A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: n5hXyHETn+EUP81N+CXCKszXdhqEBLUEczSEBTNr184=)
2: j_DUMdAnZ9L25T_DLZEtDSOt7Jg.roa (hash: HhU7n7OhPQgUoe1hdC5otibZ4YzWb9TWF6sNGUEEoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1a:64:80:d7:63:03:ff:95:a0:76:ad:a8:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=3ce3c6f1161976379a446fe6722fabdaf8ea5211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:de:95:8b:44:4a:2a:10:13:19:fe:68:cf:
63:ca:b6:02:36:2d:5b:31:b1:38:b0:0b:fe:29:87:
e7:0e:d4:cc:b2:47:35:eb:a9:ac:0c:7d:ee:cc:9c:
7d:39:07:cc:84:07:99:e4:e8:89:5f:4c:8d:84:b8:
d6:05:b2:b6:fd:b9:68:fa:10:19:f3:95:d4:4b:6a:
be:0f:13:ee:d5:bb:47:46:68:a1:5f:1a:33:08:93:
7b:1d:27:67:7b:54:89:f5:d6:01:33:26:98:d4:d7:
f0:08:82:fc:48:a7:d2:bf:d4:96:60:29:8d:5b:e1:
c1:82:17:1a:6b:14:76:db:5c:5f:96:7d:fb:b6:5c:
12:a2:d1:cb:01:5e:58:c2:43:e2:36:73:bc:7d:14:
03:e0:e7:c1:58:3a:65:2a:5e:d1:63:98:91:ac:32:
d8:f0:fc:66:b7:07:0c:97:3c:6b:d7:80:86:5e:6e:
47:2c:42:51:27:4b:40:0e:ab:c4:06:fc:d4:51:78:
87:98:c7:7c:ed:39:f0:1f:70:31:7b:fe:ae:7e:0e:
61:7c:7c:35:dc:83:2b:75:68:d3:1e:02:e9:be:70:
7e:f0:82:2a:b7:55:9c:ee:23:b4:ae:53:23:53:ab:
d8:a5:a1:6f:07:39:31:80:ac:a1:bd:dc:88:de:22:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E3:C6:F1:16:19:76:37:9A:44:6F:E6:72:2F:AB:DA:F8:EA:52:11
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8b:eb:6c:9a:58:55:b3:e2:f1:db:7d:ae:f3:a2:dd:db:a3:
c6:02:76:9a:70:18:a0:73:0f:64:8d:33:03:f6:78:5b:e6:be:
d6:41:1f:49:a6:cc:0c:5b:6f:db:68:e8:dd:83:d7:6f:90:bd:
19:73:59:97:2f:fc:e1:78:eb:c0:f2:e3:59:e2:9a:40:ac:6e:
a6:3e:02:06:ed:0a:4d:48:b4:ab:3a:56:09:45:1b:9c:9b:aa:
f6:64:62:fc:d2:c6:18:88:8d:89:ff:d4:c5:2f:4c:b5:22:f5:
4e:4a:90:7e:32:9c:f6:3e:aa:72:90:e1:58:1e:91:40:f2:36:
a0:21:25:50:3a:b3:7f:db:33:2c:32:3b:c7:54:1d:ac:60:92:
a7:4d:44:e5:02:a4:cf:92:fd:ad:76:9c:7d:36:07:ed:5f:4e:
8c:5e:fe:1e:d5:97:6e:39:cb:5d:87:a5:38:e4:77:3e:b0:56:
b5:e2:5d:34:fb:20:76:21:fb:68:d9:6c:8b:19:b8:06:de:55:
d9:39:05:1e:bf:2a:b7:9c:2f:56:0e:83:b4:e0:ea:1c:c2:6f:
fa:22:08:8c:91:1c:11:a1:aa:96:15:fc:dd:cf:5b:86:4e:c8:
49:93:37:87:08:21:f8:ac:81:dd:36:64:89:12:cf:1f:de:76:
f8:7e:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:54 2026 by rpki-client