Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: +XijhgY6fCgyK753/QcBSWE39Vh3sn7uv9HODNLeQXE=
Subject key identifier: A2:DB:33:9C:11:68:C2:EB:E0:A9:B6:8F:52:AF:86:65:DA:9F:7E:46
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 019D3909C20ABE12ADAB3C4A552BD9637860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 17D1
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: DSNdKFy2lJZTElrkr1CT78IoHhA.roa (hash: tO7SJshvN0dMXN0HLWLnqvO3CSU22x0MTTkNed+s0+0=)
2: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: jKx8wOSl6fNAzlHGEgSoRcMYwWKm/52+WQ1v1h7/U04=)
3: djYcUtesGEo6eXtApCancG1zlf0.roa (hash: 44l8vn7/ig8bOerFV7hDXQ04Yd8aH+DUwqLc2CBTt4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c2:0a:be:12:ad:ab:3c:4a:55:2b:d9:63:78:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=a2db339c1168c2ebe0a9b68f52af8665da9f7e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:51:fd:2d:1d:e7:4b:ad:f5:8b:ca:e5:16:
7f:d5:04:d0:35:fa:6b:fd:84:a8:22:d8:4d:8d:4a:
ab:d4:77:35:57:70:62:00:31:5e:a5:6f:24:2b:99:
06:0c:63:1b:2a:8e:0f:a5:b1:13:06:5f:11:a9:90:
da:01:14:4e:00:23:68:4f:a6:ab:e0:48:8e:ff:e7:
1e:8c:40:68:c3:45:c6:4b:1b:15:ce:23:1d:75:c7:
3f:64:ef:67:73:0b:9d:f7:61:cc:db:77:54:48:58:
a9:28:7e:24:b0:f9:df:6b:5a:4f:e3:16:cd:07:37:
46:26:f3:13:20:2e:61:f8:86:2d:f2:5e:86:8d:29:
22:f1:c4:ea:fa:57:db:e9:6e:2f:ae:a2:41:0f:20:
17:c8:4d:c3:59:3d:4c:ff:50:c3:c3:97:ad:6d:6b:
13:b1:c3:5d:1f:b0:a4:8b:cd:fa:d8:0a:9c:ea:45:
1b:81:28:e7:29:6e:93:a2:56:17:6d:71:fa:d1:56:
d7:11:3d:c2:1c:f0:69:c0:1b:6f:b4:5a:b6:3e:2b:
18:43:22:96:8e:81:69:9b:49:76:dd:3a:1f:cf:43:
ae:ad:33:8c:24:f5:16:5a:19:a6:10:95:48:06:14:
f3:d0:19:6e:c8:ff:95:24:2d:b0:66:ff:53:30:53:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:33:9C:11:68:C2:EB:E0:A9:B6:8F:52:AF:86:65:DA:9F:7E:46
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:c4:97:d9:34:0c:a7:18:4b:6c:27:0f:83:8c:e0:b3:1b:
77:17:9d:ce:d1:69:61:8a:f5:7e:bd:f1:fb:af:54:35:97:a1:
47:67:38:35:55:fa:82:d3:ad:b2:60:99:64:a4:65:84:87:e9:
07:2e:a4:15:18:d6:ae:de:5d:f6:b5:72:ae:97:3d:a9:c9:6e:
66:f2:15:01:af:f7:1a:31:35:47:af:48:9c:df:97:63:f2:4b:
57:60:67:6d:6c:26:d0:e4:8c:1c:3b:df:06:f2:0a:bd:fc:03:
34:f9:b8:b5:0b:66:23:c1:20:94:9a:d7:e7:78:95:b4:34:43:
aa:86:15:8b:7f:c8:17:a9:bf:85:b1:00:2b:67:86:b8:dd:d3:
f4:af:65:7c:94:86:55:a6:6e:fa:4f:6d:77:2a:3b:ac:f4:84:
4d:44:bf:27:b2:dc:5c:df:c3:bb:b7:83:37:22:38:ab:ab:64:
31:2c:2b:99:5f:f6:e1:fb:37:8e:29:61:45:af:37:75:da:18:
67:7a:fe:e4:76:22:6a:17:97:50:c9:9c:88:4f:72:66:f9:a2:
fa:ac:69:81:1b:e2:70:96:16:87:c8:ac:66:ef:e9:e0:4f:8c:
7e:36:cf:65:96:c9:af:1a:0f:1d:ef:70:e3:d4:cf:8d:08:a6:
33:34:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:44 2026 by rpki-client