Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: LsprgLuFw5N1LsUNRofLH2XBuWh6ap2KjQPd50mGfMQ=
Subject key identifier: CD:BF:04:D7:89:A1:F6:29:25:76:4F:27:D4:6B:CD:AE:D7:31:D3:85
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 019D38D3C416057F1A9C89A10911B31875C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: si/yRUSZDTpJNYhK3r8YM2C6pJ2JWCve2oiMix23uls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:16:05:7f:1a:9c:89:a1:09:11:b3:18:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=cdbf04d789a1f62925764f27d46bcdaed731d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:fa:ed:a4:21:2c:56:3b:87:cc:dd:0c:4e:
fe:93:8b:05:a4:07:34:6d:04:28:ed:7c:09:87:df:
b3:5b:72:05:11:b5:68:31:26:b4:c7:2d:0f:c8:5e:
c4:df:ae:a0:0b:54:9c:8e:c4:11:a5:81:fd:e8:95:
15:d1:cb:20:e6:78:e4:df:e4:67:bc:70:f9:a7:d8:
e5:a7:fd:09:2d:42:47:cd:fd:f8:b2:9d:01:b2:4f:
68:e8:91:58:d3:ed:ef:7a:1b:28:35:34:16:cb:74:
24:01:ad:58:1e:59:07:6e:07:d9:55:40:d3:e8:1b:
76:1c:1b:81:c1:0f:97:a2:b2:ad:0d:e5:02:51:25:
ef:6f:93:32:7e:ab:3b:b1:91:5a:c0:f2:3b:87:14:
57:ca:cd:ea:6f:cb:15:4d:17:31:a6:50:a8:ca:72:
b2:1e:d4:e9:08:21:eb:b1:cd:3b:f8:28:eb:b7:2c:
47:cc:7e:37:50:80:a5:6b:59:00:a5:1e:a6:73:f1:
72:af:a7:59:59:d8:4d:f0:e6:6f:3e:56:66:86:2b:
91:f5:80:82:03:81:e7:d1:86:3f:58:08:ce:62:29:
47:0c:bc:a2:e9:3a:91:cc:8f:75:1e:fd:63:aa:34:
38:5e:67:ca:c0:3d:cc:cd:e8:6f:7c:be:7a:92:f9:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:04:D7:89:A1:F6:29:25:76:4F:27:D4:6B:CD:AE:D7:31:D3:85
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f5:2f:b0:3a:52:fa:bb:f0:80:d0:40:7a:ae:69:ea:c7:36:
3a:0a:67:35:f3:95:78:49:ac:7c:65:43:11:79:fd:b0:fb:5d:
42:6e:52:fa:59:12:f3:95:d1:06:72:7c:97:47:79:66:2e:bc:
e8:f0:e0:ea:cf:91:08:ec:0b:a6:d4:a2:5f:f1:99:b5:b8:87:
8e:5c:9b:1d:b1:c3:4e:65:a2:14:ae:05:f7:94:d1:76:26:bd:
69:2c:91:fe:2a:ff:73:d7:cc:19:0c:84:0f:bc:f6:46:a3:43:
61:78:97:62:d7:95:75:4f:af:bf:8d:42:cd:3d:3a:e6:de:74:
9d:7a:14:b4:88:fb:d2:2b:08:1e:78:e5:d7:69:1d:fc:71:b6:
95:84:4a:b2:77:42:0d:72:c1:2f:d3:e7:67:29:b5:61:ca:cb:
15:87:f9:ed:06:ec:65:68:78:e4:a8:ed:0f:28:70:9e:36:e4:
0c:e6:b7:8e:e1:a7:e2:d2:8d:e8:e5:b1:fa:c8:eb:02:ec:9e:
7d:8c:7b:2c:28:38:44:cc:74:e9:3c:d9:98:dc:d5:e1:05:2b:
b8:97:82:74:08:dd:8d:7a:42:fd:f9:e0:5f:a4:77:23:6d:5d:
fd:98:a1:63:f8:6d:75:c4:c0:9e:fb:28:08:d7:0d:c5:ed:5b:
46:ca:e2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408QWBX8anImhCRGzGHXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjBmMjM0NTFkYzA1ZmE3ZWNmOWQxZWI0MWRkM2QxMzc1
NjQ1M2IwHhcNMjYwMzI5MDkwMTM1WhcNMjYwMzMwMDkwMTM1WjAzMTEwLwYDVQQD
EyhjZGJmMDRkNzg5YTFmNjI5MjU3NjRmMjdkNDZiY2RhZWQ3MzFkMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+X67aQhLFY7h8zdDE7+k4sFpAc0
bQQo7XwJh9+zW3IFEbVoMSa0xy0PyF7E366gC1ScjsQRpYH96JUV0csg5njk3+Rn
vHD5p9jlp/0JLUJHzf34sp0Bsk9o6JFY0+3vehsoNTQWy3QkAa1YHlkHbgfZVUDT
6Bt2HBuBwQ+XorKtDeUCUSXvb5Myfqs7sZFawPI7hxRXys3qb8sVTRcxplCoynKy
HtTpCCHrsc07+CjrtyxHzH43UICla1kApR6mc/Fyr6dZWdhN8OZvPlZmhiuR9YCC
A4Hn0YY/WAjOYilHDLyi6TqRzI91Hv1jqjQ4XmfKwD3MzehvfL56kvmS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2/BNeJofYpJXZPJ9Rrza7XMdOFMB8GA1UdIwQY
MBaAFFKw8jRR3AX6fs+dHrQd09E3VkU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMt
ODQwZjA5ZWQ0OGQ1LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q5MjQtNGRiZC00NTAxLWJmYjMtODQwZjA5ZWQ0OGQ1
LzEvVXJEeU5GSGNCZnAtejUwZXRCM1QwVGRXUlRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPUvsDpS
+rvwgNBAeq5p6sc2OgpnNfOVeEmsfGVDEXn9sPtdQm5S+lkS85XRBnJ8l0d5Zi68
6PDg6s+RCOwLptSiX/GZtbiHjlybHbHDTmWiFK4F95TRdia9aSyR/ir/c9fMGQyE
D7z2RqNDYXiXYteVdU+vv41CzT065t50nXoUtIj70isIHnjl12kd/HG2lYRKsndC
DXLBL9PnZym1YcrLFYf57QbsZWh45KjtDyhwnjbkDOa3juGn4tKN6OWx+sjrAuye
fYx7LCg4RMx06TzZmNzV4QUruJeCdAjdjXpC/fngX6R3I21d/ZihY/htdcTAnvso
CNcNxe1bRsrikw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:33 2026 by rpki-client