Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: I9dh5q3MVRKnKBy8EVBziGBbDHXWKWsh/rAfSnXYRz4=
Subject key identifier: EC:95:5E:90:EB:24:92:0C:1A:B3:C2:7C:88:90:03:3C:2E:1F:24:10
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 019D37C0C4E8FF9BC6B203324A542B2D1FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 0C49
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: phZJbDm17+JtFmdcIuOjWr80OtQeJy0tesBcxn6mTJQ=)
2: ohBM3zsEzHBfzu5ZdOgEuGWV564.roa (hash: i84QGTyCQlLNMzWx6hzk7qApExrJMNQGhjePWOzMThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c4:e8:ff:9b:c6:b2:03:32:4a:54:2b:2d:1f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=ec955e90eb24920c1ab3c27c8890033c2e1f2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:ee:91:01:4a:03:a0:44:5e:3c:e5:7c:3e:
47:33:48:61:04:25:05:08:00:ef:c4:f5:b2:a7:f7:
0f:19:1a:07:66:d4:a7:9b:01:6a:04:ab:7a:34:1f:
e9:77:93:78:8f:7a:d3:bd:23:98:bc:f0:71:11:2d:
e4:d7:ad:03:5a:9b:b2:5d:78:27:dc:03:20:ce:e9:
be:05:2e:17:de:ab:c3:1c:c6:e6:ea:10:f3:03:b1:
b8:79:2f:66:00:12:7b:a7:8e:e4:2c:84:5c:34:04:
36:8d:a8:1c:44:50:3d:e3:27:49:ac:ac:cd:3f:99:
b7:19:9b:b6:87:55:7c:b0:62:00:4a:49:92:ec:30:
2e:e2:dc:80:5c:b8:36:8b:68:93:06:48:b5:8b:f3:
9f:61:2b:a9:a6:69:b5:4f:da:c5:d3:67:68:42:a1:
98:3f:bf:84:21:aa:ff:31:77:ed:26:f2:2f:90:b3:
b5:73:8e:38:ad:8d:46:8e:99:03:9d:d6:6f:0c:37:
26:ed:78:f7:2c:19:42:90:e0:5c:e7:a6:46:c3:56:
ff:50:0e:52:60:f3:15:17:5d:ad:36:ee:d9:2b:cd:
a3:f3:6a:54:23:3c:6b:10:98:bb:72:fb:56:d6:aa:
ad:c8:63:47:a8:0c:49:73:c9:a6:c6:66:e6:ab:61:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:5E:90:EB:24:92:0C:1A:B3:C2:7C:88:90:03:3C:2E:1F:24:10
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:94:8d:e3:70:d6:7a:36:2c:b5:26:ae:44:18:f8:dc:49:a4:
82:c8:97:dc:72:4a:ee:22:90:39:86:6f:a9:e7:59:eb:29:e1:
99:5c:fb:38:f7:ba:35:e0:3b:8d:5f:46:c5:23:3a:a0:f9:9a:
61:e0:40:fa:9a:41:23:38:ac:31:60:85:a1:76:aa:48:e8:73:
26:0e:4d:de:29:37:76:ec:c2:85:97:76:5c:f0:83:c0:78:67:
5a:61:57:c6:f9:f8:89:95:19:e4:8a:6d:d2:6f:37:2c:15:a8:
9f:3a:c6:26:2b:f8:25:18:28:8b:14:39:f8:11:a8:1e:dd:22:
ea:07:79:0a:2b:18:f7:b7:7a:bd:4b:af:99:67:c7:80:d8:59:
45:f0:c0:eb:e7:f9:db:80:07:bc:37:c8:b2:b9:46:5a:a4:c6:
26:09:39:ec:2a:0b:f8:da:be:70:70:6f:16:4a:4b:a5:4d:98:
6d:73:19:aa:d3:5f:49:7d:48:80:2d:6d:8f:2f:6b:ce:28:fd:
fb:09:cf:26:7a:b5:bd:d4:77:a9:0f:16:18:64:a1:4f:a1:24:
07:57:56:76:ad:23:b9:13:cc:bb:4b:1b:a6:ed:71:8a:17:44:
8f:42:da:ff:50:3e:55:3a:b1:7a:9c:69:16:b6:47:9b:da:d5:
15:94:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:10 2026 by rpki-client