Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
File: UDUgXD0BcT-di1sA41OWGbIzUjI.mft (raw, json)
Hash identifier: QakhuoGgNdetZQ+SPUdlkzKGuYnr50ZMyL6Y7d+9QtE=
Subject key identifier: 78:D6:E8:0F:0E:35:85:C2:7D:90:51:F0:29:6D:C8:A7:63:8E:93:14
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 019F1C0E28A7E680E076A7E3903ABD97009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
Manifest number: 1153
Signing time: Wed 01 Jul 2026 05:01:57 +0000
Manifest this update: Wed 01 Jul 2026 05:01:57 +0000
Manifest next update: Thu 02 Jul 2026 05:01:57 +0000
Files and hashes: 1: 7FcZY5ssnNOL522u1DPAzU2AH3o.roa (hash: jO6v8d55L7jkpTC7tOGRMEIqorSWul+ySibJuBhbg1E=)
2: UDUgXD0BcT-di1sA41OWGbIzUjI.crl (hash: ZwZqtGEucpyzFOaSOa2tg9TcD29Mw8cYA3jrFaM07BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:0e:28:a7:e6:80:e0:76:a7:e3:90:3a:bd:97:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Jul 1 05:01:57 2026 GMT
Not After : Jul 2 05:01:57 2026 GMT
Subject: CN=78d6e80f0e3585c27d9051f0296dc8a7638e9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:21:d0:c0:d1:13:b2:0b:a0:8b:c3:ca:6f:
04:92:bf:0b:6e:d3:9e:54:5e:2b:e9:5f:27:5b:d4:
f5:b3:67:fd:c7:91:1e:22:92:61:4d:0e:40:dd:64:
75:30:24:71:b5:1c:5d:94:dd:1d:be:e9:6e:c7:ac:
20:cf:6f:2c:bc:c1:15:d5:d9:77:63:32:ee:3a:6b:
6d:e5:3c:a6:e8:0f:b9:7d:41:1d:e3:84:c9:12:4e:
3e:29:8c:fc:81:8d:a7:18:34:56:ba:bc:76:ce:06:
fb:ab:7a:b1:0e:71:65:9e:dd:02:2b:61:1d:8e:a5:
e7:a2:d1:68:9b:42:e4:f8:0d:6f:94:83:75:4a:4f:
db:17:d4:4f:14:4a:2c:38:5b:44:bd:f7:01:79:10:
19:73:ef:53:20:89:2a:13:44:8c:9e:5d:62:19:16:
de:72:a9:47:6b:a2:a7:d2:f0:ce:3e:cc:7b:23:76:
72:64:29:01:59:7b:52:f2:66:4a:c4:d9:ff:86:d3:
06:45:21:a7:87:c1:be:82:6c:32:76:9c:c1:f8:4a:
df:fc:db:fb:d1:6d:a2:52:3d:95:5e:34:c0:61:ce:
3c:ca:66:64:9b:5a:a0:9e:f7:b1:97:7d:74:dd:7b:
06:0e:04:96:cf:4b:2d:25:e8:77:5e:e6:3f:b7:38:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:E8:0F:0E:35:85:C2:7D:90:51:F0:29:6D:C8:A7:63:8E:93:14
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:7d:9a:3f:68:12:99:c6:2d:ca:92:ff:34:00:3a:1d:c8:
95:07:5a:1b:ac:1b:e2:07:55:96:f2:ad:d4:85:3a:2a:2e:db:
26:77:b5:8a:95:fe:5f:63:23:49:0c:1f:3c:fd:5e:0d:0c:bc:
f6:3c:a0:f1:f6:f9:3e:41:40:e8:3d:c0:e7:20:eb:39:26:01:
de:02:44:95:21:4b:b7:f7:7a:5c:5f:a0:43:7c:e0:c1:30:2e:
35:61:c9:37:9f:b0:31:98:8d:96:6f:67:32:d0:23:f0:5d:b1:
db:a5:22:8d:e5:48:04:9e:bb:a0:ec:9d:b2:97:ba:df:58:8b:
85:fe:c8:51:1c:df:3f:dc:50:f7:21:5e:0c:21:ac:7c:e7:9a:
7f:7f:95:f4:b6:ef:44:1b:22:29:b1:58:69:41:c5:9c:f2:10:
88:c1:60:ae:f6:89:8c:74:d8:f8:0b:e4:68:3c:1f:29:63:da:
d8:bd:7a:4c:3a:71:fd:e7:35:c6:fb:5c:bd:3b:94:bc:67:45:
60:33:f8:11:c2:97:34:4f:ca:6c:7c:6c:10:cd:ab:a6:6a:d3:
4c:2d:c2:6e:5e:95:27:9e:44:e8:a1:7f:58:e0:ec:8f:85:59:
8d:93:a5:1d:b4:03:b0:4e:db:85:e7:39:3d:bb:1d:98:62:96:
30:88:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:28:15 2026 by rpki-client