Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: XTyW1kPh2540EkXkM8bdhh4DUHCQYA256nLbxL5B05w=
Subject key identifier: FF:7D:85:05:7E:7D:20:E6:45:35:E7:18:49:5B:F1:20:4B:F5:76:73
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019D382DF625DFC871A316B787BA4AA02B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 01B6
Signing time: Sun 29 Mar 2026 06:00:29 +0000
Manifest this update: Sun 29 Mar 2026 06:00:29 +0000
Manifest next update: Mon 30 Mar 2026 06:00:29 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: 1Dms3xaEV+qUCF7puT15bR9kShx9919kBXVTB+m2B2I=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f6:25:df:c8:71:a3:16:b7:87:ba:4a:a0:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Mar 29 06:00:29 2026 GMT
Not After : Mar 30 06:00:29 2026 GMT
Subject: CN=ff7d85057e7d20e64535e718495bf1204bf57673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:5a:ee:27:31:1a:88:62:06:4a:45:e9:cb:
dc:13:2b:57:a1:45:c6:aa:a3:90:76:13:67:8f:6c:
73:d4:f9:81:d6:3e:d5:cd:08:1a:6a:44:61:c5:a8:
09:7a:c3:84:d0:c0:fb:36:b5:c3:97:66:bf:04:97:
72:ca:33:84:d4:cb:65:a3:81:98:cf:de:0b:51:be:
2a:f4:d5:a6:64:cb:55:a4:4f:47:a0:8f:b5:a2:ed:
46:21:dc:65:1f:07:6e:70:27:74:1f:e7:bd:02:ba:
b0:f4:e6:b2:b0:7d:ad:7d:05:7b:e3:1e:e7:a6:56:
0a:92:4b:f3:35:44:9c:fe:3a:49:23:87:fc:52:ca:
c9:93:52:b7:35:79:f3:44:51:6d:c6:a1:34:92:f2:
05:10:0f:4d:fd:3b:ca:ca:7c:56:6c:41:0b:32:30:
c6:89:2e:a9:ca:08:52:f0:7e:37:52:12:3b:c8:3a:
c5:5b:96:eb:5a:45:6b:f0:b0:f5:9c:52:3f:33:57:
8d:8c:32:54:15:34:37:32:e0:71:9b:12:77:e5:10:
b8:7b:b2:14:b6:26:ec:09:6b:00:b7:a2:be:43:b4:
c7:ea:60:b0:c4:16:2f:fa:3a:73:c0:8d:7f:5c:fa:
6f:5c:f5:8b:6b:02:0c:5d:f6:fe:e2:6a:2f:c4:41:
5f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:85:05:7E:7D:20:E6:45:35:E7:18:49:5B:F1:20:4B:F5:76:73
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:f8:05:dd:27:6a:18:10:ff:cf:2d:cd:8e:ab:a8:0a:82:
e1:1f:49:2b:e8:fa:ab:1e:8e:82:5a:50:5f:01:91:15:82:b2:
a8:65:d7:be:34:5a:12:bd:7a:38:74:d1:42:0c:aa:32:a4:83:
b2:f7:8a:86:7c:9a:58:52:a9:ea:fb:ea:d8:01:78:9b:16:b3:
0f:49:f9:51:92:fd:5a:11:10:06:0c:bd:a7:df:3c:86:2a:f5:
8c:a5:6e:4d:bd:ee:20:ee:a5:29:d2:36:cf:e3:65:23:8f:90:
21:1f:60:fa:3a:ca:12:be:16:34:5c:7f:2e:ba:ad:ba:56:87:
be:c6:42:fe:f3:c8:bb:0d:8e:74:48:43:46:ae:14:05:b3:e0:
f0:29:b0:8e:ea:00:ab:b3:41:8c:c1:69:f6:3d:3c:08:61:6d:
fe:c3:48:24:6c:89:1d:9f:b5:d3:db:dd:f3:d6:04:76:bb:fd:
64:aa:5b:db:d7:cf:eb:c8:38:b5:b8:64:b5:b1:70:db:5b:49:
65:9e:4e:7c:86:5f:7a:20:4f:1d:59:d5:89:d9:e4:5d:66:7b:
b3:1f:37:3f:a9:bd:8d:30:78:c9:ee:c3:90:86:0c:46:dd:78:
84:3e:45:21:8c:a2:81:c0:31:79:55:13:77:39:ae:23:d7:d3:
90:a0:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:15 2026 by rpki-client