Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
File: UDLyl3iaGUqLUHgF811C7njA1MM.mft (raw, json)
Hash identifier: Xt/ApEK5HPRVrY87xo3Rx27CwTHuXKZqeaELIfWxgpQ=
Subject key identifier: F4:3D:61:FE:25:35:B1:95:85:BB:25:46:9B:D1:59:AF:70:AB:2E:0C
Authority key identifier: 50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
Certificate issuer: /CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Certificate serial: 019D3789ACD055DB0F7DB2265BF207C3F592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: 0bOx0YvZLkBR8StVldUHmaMUt5w.roa (hash: pVplZjzT+88YgEabA8GOmB3FR2v0rED8d9SRhfrU2/E=)
2: UDLyl3iaGUqLUHgF811C7njA1MM.crl (hash: 3JRlOAMqSIC5XV+kQlnu/jxtOpM6t34f+Haiz/BW5q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ac:d0:55:db:0f:7d:b2:26:5b:f2:07:c3:f5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5032f297789a194a8b507805f35d42ee78c0d4c3
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=f43d61fe2535b19585bb25469bd159af70ab2e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:d7:d2:44:6a:4c:68:dc:2c:08:3f:7d:26:
b5:3c:f9:e5:16:e1:ea:d5:1b:b7:70:04:d6:62:bb:
e9:01:94:1d:03:20:a7:9f:df:43:9b:26:a4:f7:54:
88:93:a3:0d:59:02:e7:1b:63:34:8f:5b:bd:e0:27:
83:8d:6a:02:86:c5:c6:82:ed:69:28:eb:83:5a:93:
61:0b:9b:db:8f:3b:0c:b6:a3:4a:4a:cc:4a:e1:63:
de:62:82:c4:0d:dc:fb:57:9f:54:98:99:6b:3f:88:
d1:ed:92:33:b0:9f:1b:c2:cb:58:92:b2:35:b4:49:
6e:a7:4a:44:ea:56:79:3a:a8:91:38:80:03:9d:c7:
20:75:c6:ab:f1:87:9a:bb:d5:70:9e:9b:a5:20:a8:
8e:4a:e9:72:64:3c:2b:af:6e:8d:89:bb:f2:f8:fc:
cf:44:3a:33:82:b6:02:82:2a:8e:b4:ac:e3:70:e6:
af:36:08:29:7b:05:a1:af:4c:23:3b:bd:97:e3:8a:
3a:0d:4e:c3:4a:8e:dd:77:ba:8e:b5:61:95:08:3a:
89:99:ea:d3:0b:61:8e:3a:80:2f:56:09:f4:0f:57:
82:b7:69:4d:25:d6:79:9a:9e:c1:63:db:9f:1a:8f:
c5:ae:71:b0:85:c0:15:86:44:69:c3:a0:f4:47:d6:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:61:FE:25:35:B1:95:85:BB:25:46:9B:D1:59:AF:70:AB:2E:0C
X509v3 Authority Key Identifier:
keyid:50:32:F2:97:78:9A:19:4A:8B:50:78:05:F3:5D:42:EE:78:C0:D4:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDLyl3iaGUqLUHgF811C7njA1MM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/UDLyl3iaGUqLUHgF811C7njA1MM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:d0:ba:fc:84:2e:b6:2c:49:da:ae:dc:bf:b1:82:e3:e0:
0e:51:a4:cf:b4:b0:6f:3c:21:27:54:8c:53:a1:62:a8:be:86:
62:20:a1:02:f7:29:46:e1:73:82:a7:02:91:e0:fb:64:d3:71:
52:6f:57:39:22:5b:d3:13:27:fb:3a:35:96:44:aa:9a:1d:f7:
29:3b:e7:33:45:5f:34:f2:ae:18:9b:98:a5:a1:ff:0e:80:a7:
e9:b6:e1:9a:1e:21:d0:76:df:77:cd:de:84:b8:71:33:de:48:
75:3e:f9:bb:30:f8:e3:3f:66:0b:d9:09:f0:a4:d8:a7:7e:ab:
46:66:54:11:a6:d2:5d:4b:f6:fb:08:11:0e:de:6b:52:fb:70:
96:cd:b8:6a:12:ba:2f:4e:31:6f:2c:42:5b:48:42:f9:21:15:
75:32:ec:0c:30:2b:b1:03:0b:90:f3:5a:b0:57:e7:9b:56:2f:
0b:1c:c4:86:7d:93:b2:83:77:0b:ca:9b:ac:19:4e:e1:ca:90:
ed:b4:15:65:de:e6:66:b9:d4:6e:3e:e5:e9:8e:92:73:10:f3:
c7:2a:63:e1:6f:02:9a:20:62:f5:f0:94:a4:a9:16:73:d9:9a:
c8:7e:1d:28:b2:38:8b:4b:27:7d:22:86:02:57:a0:98:b6:8f:
4e:6f:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:01 2026 by rpki-client