Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
File: UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft (raw, json)
Hash identifier: E1ILTX6tANnEbljtdvOqnYL1KWGI9drasjjiZJAkTuY=
Subject key identifier: 56:77:96:BF:09:D5:D6:B8:FF:59:54:52:EB:85:95:CC:6A:4A:D8:BD
Authority key identifier: 50:41:9B:F7:E9:1A:52:84:D9:75:3E:E6:EC:58:F9:24:5A:DC:6C:1A
Certificate issuer: /CN=50419bf7e91a5284d9753ee6ec58f9245adc6c1a
Certificate serial: 019D39E5B812168B35409DDA3310D834B769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
Manifest number: 1A
Signing time: Sun 29 Mar 2026 14:00:49 +0000
Manifest this update: Sun 29 Mar 2026 14:00:49 +0000
Manifest next update: Mon 30 Mar 2026 14:00:49 +0000
Files and hashes: 1: UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl (hash: Fa2gBbb4xVqQfHbcyT4EAEZoDyITAQd6IQFZ3SfroRc=)
2: oU2txaS5vqeLhMtArzDrFt6Zm_k.roa (hash: NWY7UpTwbh9+lgAmjrOULjUiB2zheOSSs88r/gMtSuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b8:12:16:8b:35:40:9d:da:33:10:d8:34:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50419bf7e91a5284d9753ee6ec58f9245adc6c1a
Validity
Not Before: Mar 29 14:00:49 2026 GMT
Not After : Mar 30 14:00:49 2026 GMT
Subject: CN=567796bf09d5d6b8ff595452eb8595cc6a4ad8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:53:23:53:4f:d2:26:c6:d6:66:ce:d3:53:
7c:58:07:ce:54:c4:29:1e:e6:74:d8:9a:af:96:0f:
50:fa:be:6e:e4:da:8b:79:28:33:7a:ed:4f:e4:1b:
ee:54:85:a5:b9:61:02:3f:77:17:4f:c5:07:b1:e1:
80:e8:f4:33:83:60:e0:95:72:30:fc:79:b1:25:bd:
05:19:01:4c:e0:5d:99:4a:06:f0:c7:15:f0:db:75:
c5:dc:5e:48:ed:cc:9b:09:d2:d4:9a:4e:d1:5d:7b:
1e:cd:9c:3a:46:ec:d9:91:18:9d:9c:6d:a1:6c:2a:
b1:07:f8:ce:e9:68:ab:6a:0c:46:02:dd:40:91:94:
18:cd:e7:e4:ee:2c:d2:e9:71:56:94:79:c3:8f:29:
d2:4f:c7:f0:58:d1:66:0b:70:bf:8e:a8:11:ec:4c:
f2:5c:51:90:91:4b:6c:09:42:59:4a:ce:95:ea:87:
8a:da:59:0f:85:8d:a5:26:0e:6d:a2:27:43:65:49:
e3:dd:4d:d4:ca:7e:0a:21:32:81:38:aa:60:7e:27:
f6:c6:74:b8:06:38:5a:e3:55:a7:40:bd:5f:0a:5b:
0d:d7:55:09:e0:db:e7:09:88:71:3f:df:8b:2b:d2:
84:ac:c4:11:3b:ac:2f:89:f1:48:25:6c:f7:6a:e0:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:96:BF:09:D5:D6:B8:FF:59:54:52:EB:85:95:CC:6A:4A:D8:BD
X509v3 Authority Key Identifier:
keyid:50:41:9B:F7:E9:1A:52:84:D9:75:3E:E6:EC:58:F9:24:5A:DC:6C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9bc0bb-5dcc-47d7-941f-8aeb6bea3794/1/UEGb9-kaUoTZdT7m7Fj5JFrcbBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:09:4a:e8:51:53:f5:b9:6e:48:c0:08:c6:14:77:ce:d1:5b:
7a:67:af:a1:1e:85:cc:79:50:c3:59:e3:8e:4f:d3:9d:52:64:
a0:7c:b2:3d:a8:04:ad:96:5a:f5:2c:b9:17:c2:3b:9e:97:4c:
80:2d:2f:9f:a7:f8:3c:68:6d:b2:e5:72:66:fc:97:0d:a4:4f:
90:fd:9a:fa:1b:7e:6e:de:b9:f3:17:d2:0e:e3:ae:ed:04:84:
6b:60:65:f1:1d:40:e8:fb:18:1f:4d:94:4f:47:c4:9c:0a:7f:
69:a5:52:65:67:61:20:eb:0b:94:7b:32:ae:6a:ca:29:ff:72:
19:25:25:bf:b9:e3:f9:82:b3:67:ce:c4:e9:b9:16:c9:a3:31:
d2:30:98:e0:30:9d:83:6d:e2:3f:3f:ec:0c:6d:9a:c8:04:52:
22:eb:45:2d:97:65:7b:0b:69:15:7e:08:b1:99:01:2f:4a:29:
9a:2b:c4:20:a9:55:ad:ec:ac:1f:4b:8b:ee:37:f3:2a:e5:80:
0f:13:24:78:9e:15:9d:fe:44:1b:55:eb:92:85:ca:b5:33:27:
be:5c:b5:f5:73:69:cf:26:42:6d:6d:a6:f1:3f:87:ef:7b:d2:
b4:18:98:9d:96:20:64:ef:80:df:17:ac:f5:41:63:ef:9c:68:
1f:99:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:42 2026 by rpki-client