Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: Q7dWT4fHuX5Z4s8n/yqzMjbWS3FNdntfBcC3CrRS0IM=
Subject key identifier: 39:3F:0C:75:13:4A:B7:01:7C:65:CE:17:CE:F7:D2:EC:AE:92:E8:F5
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019D37526934CC8F3F3183C1008F3C12AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0CFB
Signing time: Sun 29 Mar 2026 02:00:40 +0000
Manifest this update: Sun 29 Mar 2026 02:00:40 +0000
Manifest next update: Mon 30 Mar 2026 02:00:40 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: 1bN5H7osxXOjJmrD+kFcbM+dUpXSNRhSPopB0RuyF8A=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:69:34:cc:8f:3f:31:83:c1:00:8f:3c:12:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Mar 29 02:00:40 2026 GMT
Not After : Mar 30 02:00:40 2026 GMT
Subject: CN=393f0c75134ab7017c65ce17cef7d2ecae92e8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:74:63:1d:3b:c4:2f:6b:c7:54:ff:2a:36:24:
2e:c3:7a:d3:de:0b:93:d4:74:c8:a2:dd:1c:f9:d1:
8a:82:5c:80:3a:c0:4b:61:b3:3b:1b:65:f0:3c:ea:
38:7c:55:73:81:24:ef:70:7c:86:32:95:08:dc:8f:
2f:ec:ee:38:7e:b0:a2:43:0e:fc:2a:b4:a9:89:d2:
0c:c2:5a:b7:dc:26:0c:e5:2f:16:1b:9c:a6:70:2d:
9d:7a:b5:75:31:0f:34:9f:2a:fd:8f:a7:dd:c4:3f:
f5:7f:68:a5:f2:0e:1e:83:33:69:79:61:84:54:f6:
26:6c:38:f0:96:71:b0:ce:ea:bb:de:18:1a:e6:4d:
73:3a:85:80:fe:84:67:71:c6:6f:3f:dd:29:7b:54:
39:39:a6:f5:a2:d7:b9:40:2e:fb:75:15:cd:37:fd:
38:be:c9:2d:ed:53:4b:c3:e8:51:01:05:e7:9b:df:
5c:5f:a1:e7:56:5f:53:c7:0e:da:33:a4:e8:a2:fe:
3f:6c:ed:47:4e:79:e4:c3:3b:ea:fc:26:ad:18:bf:
c9:30:0d:b4:f0:1a:ec:98:e9:56:da:26:d4:11:d0:
74:8e:55:b8:63:45:af:30:ac:69:b2:a1:4c:f0:43:
2b:cf:cb:25:80:7c:bb:79:44:19:a5:1d:16:39:19:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:0C:75:13:4A:B7:01:7C:65:CE:17:CE:F7:D2:EC:AE:92:E8:F5
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3a:88:28:ad:43:9a:6e:c5:fe:2e:db:1e:30:e4:81:9e:f1:
25:b1:2f:9e:99:98:64:81:ee:dd:0c:2b:3d:ea:73:1d:15:78:
d9:e0:0c:3a:5d:a9:ac:50:0d:03:68:d7:52:b4:1f:a0:c5:62:
21:63:a6:c3:04:a7:15:8a:c0:64:8e:e8:19:06:32:1c:1f:87:
e6:1e:0d:85:ab:55:20:ec:f3:7c:71:6d:98:7d:bf:ea:95:d3:
88:b0:c1:b0:48:27:85:aa:6b:83:87:96:82:b2:61:57:6c:6f:
ad:57:23:34:0a:fd:76:7a:a4:2f:5c:37:74:7e:78:80:08:ce:
3e:9c:b6:88:73:00:fb:a8:2f:23:d0:2b:a3:c1:8d:bd:8c:17:
1f:10:77:24:c2:e0:c4:9b:f8:e2:f6:a1:5b:18:7f:f0:af:f6:
63:f8:a6:e3:8a:56:78:aa:79:d7:22:7f:dc:4a:63:da:9d:6a:
08:0c:23:b6:09:a8:e0:85:2d:15:3d:da:7f:1a:92:fa:05:65:
32:38:e6:5d:7b:d4:14:be:ac:98:9f:d1:ab:18:8e:3c:66:35:
69:70:81:6c:e0:4f:5e:58:91:94:1a:50:e3:1b:35:d3:31:aa:
ee:04:c0:08:0f:6b:af:2d:28:16:47:f7:df:13:01:cd:30:40:
ff:1c:92:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Umk0zI8/MYPBAI88EqxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjYwMzI5MDIwMDQwWhcNMjYwMzMwMDIwMDQwWjAzMTEwLwYDVQQD
EygzOTNmMGM3NTEzNGFiNzAxN2M2NWNlMTdjZWY3ZDJlY2FlOTJlOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93RjHTvEL2vHVP8qNiQuw3rT3guT
1HTIot0c+dGKglyAOsBLYbM7G2XwPOo4fFVzgSTvcHyGMpUI3I8v7O44frCiQw78
KrSpidIMwlq33CYM5S8WG5ymcC2derV1MQ80nyr9j6fdxD/1f2il8g4egzNpeWGE
VPYmbDjwlnGwzuq73hga5k1zOoWA/oRnccZvP90pe1Q5Oab1ote5QC77dRXNN/04
vskt7VNLw+hRAQXnm99cX6HnVl9Txw7aM6Toov4/bO1HTnnkwzvq/CatGL/JMA20
8BrsmOlW2ibUEdB0jlW4Y0WvMKxpsqFM8EMrz8slgHy7eUQZpR0WORlmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk/DHUTSrcBfGXOF8730uyukuj1MB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjqIKK1D
mm7F/i7bHjDkgZ7xJbEvnpmYZIHu3QwrPepzHRV42eAMOl2prFANA2jXUrQfoMVi
IWOmwwSnFYrAZI7oGQYyHB+H5h4NhatVIOzzfHFtmH2/6pXTiLDBsEgnhaprg4eW
grJhV2xvrVcjNAr9dnqkL1w3dH54gAjOPpy2iHMA+6gvI9Aro8GNvYwXHxB3JMLg
xJv44vahWxh/8K/2Y/im44pWeKp51yJ/3Epj2p1qCAwjtgmo4IUtFT3afxqS+gVl
MjjmXXvUFL6smJ/RqxiOPGY1aXCBbOBPXliRlBpQ4xs10zGq7gTACA9rry0oFkf3
3xMBzTBA/xySyA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:22 2026 by rpki-client