Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: 5nzrupaLB9Ff6YNCbEEvDrRg0s67J7TmV3nz2jIShcY=
Subject key identifier: B9:21:A4:92:15:31:F7:65:56:D6:78:57:08:40:55:A4:A3:FA:04:63
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019D37C122C1EE20962C6697D060D1067DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 10EF
Signing time: Sun 29 Mar 2026 04:01:37 +0000
Manifest this update: Sun 29 Mar 2026 04:01:37 +0000
Manifest next update: Mon 30 Mar 2026 04:01:37 +0000
Files and hashes: 1: GTNj1uopxhcFHlYEIMNdLURp3bo.roa (hash: sNXrtC73S3XHslCegvtHnqUIQVTOhSUYsSYlbuOfH4o=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: 7smOPiuvrorxelSOhfr/jEoypdjBLpxDexpPckUX3bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:22:c1:ee:20:96:2c:66:97:d0:60:d1:06:7d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Mar 29 04:01:37 2026 GMT
Not After : Mar 30 04:01:37 2026 GMT
Subject: CN=b921a4921531f76556d67857084055a4a3fa0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:84:2e:af:d7:36:aa:5e:be:15:07:dc:02:
a1:fe:8d:f9:06:ac:93:7e:81:75:a5:24:7b:ab:19:
36:84:7e:b8:d8:eb:a0:ee:f1:4e:b1:dc:57:f7:b3:
07:91:07:08:fe:b5:8c:03:b7:26:8c:84:27:52:a7:
78:d5:1b:b1:07:55:ff:9e:43:95:ae:71:ca:6a:ed:
40:1e:7f:6a:07:cf:e3:42:41:57:e0:c4:18:f8:ca:
fb:77:d8:af:b3:15:e9:fd:0d:ef:ce:4a:99:df:6f:
04:7c:af:df:52:55:b8:9b:2c:8c:d1:54:28:b4:48:
11:05:96:ab:c6:96:04:ae:2e:c4:88:80:bf:fe:8e:
c3:94:8f:2d:a2:bf:b3:79:08:3c:16:b8:33:76:41:
5e:8b:18:71:14:e6:f9:a5:ee:ea:58:8c:ef:ad:eb:
82:93:f2:74:aa:6e:b0:dc:75:14:d2:ae:64:df:59:
99:60:77:74:5c:90:e7:2c:6f:cd:0f:08:22:4a:2e:
57:09:c4:7b:cc:26:17:d5:90:db:98:b1:7c:eb:13:
33:f2:51:76:2d:c6:ec:4e:aa:c0:c1:ab:99:4a:0b:
2b:6d:f8:e9:33:d5:7f:02:2e:87:fd:ae:84:bb:f8:
2d:21:35:fc:6d:02:2c:db:9b:ff:e5:10:0a:9e:de:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:A4:92:15:31:F7:65:56:D6:78:57:08:40:55:A4:A3:FA:04:63
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4d:6a:a7:ad:96:10:af:a7:9a:41:7f:b5:57:67:18:1e:62:
a7:0c:89:fa:f1:4b:59:8a:3b:04:4d:0b:df:42:37:34:f3:58:
7e:43:be:50:d6:be:f9:1c:57:8d:2d:09:c2:fa:75:0f:4d:bb:
33:fd:9a:66:0d:b5:8e:53:29:57:c9:a6:fa:62:8f:2d:7a:ce:
e5:57:76:1f:79:54:9c:87:37:cf:22:bf:cd:a6:ed:ab:c1:60:
54:da:c4:ad:6b:51:77:33:31:57:ab:a9:25:97:2a:d2:f5:47:
6e:01:c8:59:c3:48:35:32:9b:7a:67:3f:a6:32:8a:9c:c8:05:
bb:e9:ff:af:17:a9:d5:c5:d0:1f:15:37:e7:36:9b:49:b0:04:
7e:38:f2:dd:7e:b9:41:7b:18:3c:2f:e4:d4:6c:69:1a:d6:4b:
49:15:fb:5b:65:0b:f7:c7:5a:ae:24:1a:1d:91:e2:61:55:47:
49:8e:45:85:3f:c1:db:19:15:d2:e9:52:2c:b6:f7:53:de:ae:
83:a2:1e:c0:24:f3:4e:6a:3a:8b:7b:d3:28:03:41:e3:d2:f3:
c9:e6:4e:91:22:6f:22:59:29:de:8a:de:c2:71:4a:98:61:16:
08:44:e4:c2:25:0b:37:59:97:db:f7:94:0b:f3:7b:17:c2:d7:
8e:7b:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client