Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: tRtzq0FMo70aUkqgnhFAts8gLxc12ndCv12uAeryzHw=
Subject key identifier: D5:9C:F5:8D:59:05:4F:DC:04:4C:73:89:6E:62:AA:5F:2B:2B:A4:07
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 019CE0D969981104DE6F6495AA1F8A7AB918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 08AF
Signing time: Thu 12 Mar 2026 07:01:10 +0000
Manifest this update: Thu 12 Mar 2026 07:01:10 +0000
Manifest next update: Fri 13 Mar 2026 07:01:10 +0000
Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: NKyuBsW+4UnaRpV0pQjyacpi9MGRmfKjslCcMrCrRTE=)
2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e0:d9:69:98:11:04:de:6f:64:95:aa:1f:8a:7a:b9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Mar 12 07:01:10 2026 GMT
Not After : Mar 13 07:01:10 2026 GMT
Subject: CN=d59cf58d59054fdc044c73896e62aa5f2b2ba407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:e8:6c:31:d8:c9:af:fa:38:22:8c:63:ef:
2e:1b:f0:ee:1b:11:db:13:0a:23:87:36:0b:43:2c:
5f:3c:62:a5:7c:dc:2f:6d:5b:15:56:81:51:a3:5d:
39:3c:be:4f:77:a6:f0:62:7e:24:34:1e:9d:a2:e9:
46:87:1d:ea:03:90:08:1a:3b:2f:4d:82:10:78:59:
a6:cc:21:b7:a0:6c:8a:1d:20:84:9f:10:5a:3c:23:
23:d0:38:6a:39:e5:f6:6a:1b:7d:ef:1c:e0:e3:3d:
98:1a:97:96:49:f1:a0:61:3f:9e:6b:2a:10:a0:6f:
e2:b7:66:06:0f:1b:61:b3:dc:cb:2e:9b:88:6a:f3:
79:30:8d:f7:37:e8:27:e1:26:85:07:fd:d1:89:41:
03:a6:f3:15:60:8f:86:90:c3:94:ac:79:26:11:0f:
72:7e:59:8e:b1:6c:17:d4:d0:a4:a6:5a:b3:b4:d0:
f5:48:63:1c:66:f3:6e:6d:7f:b7:88:3d:f1:1b:4e:
8c:42:47:88:6b:59:39:39:6b:36:96:88:2a:85:4c:
b8:53:01:94:9c:cf:27:ed:49:f5:30:3d:1e:8a:5e:
96:59:5f:4f:fe:77:a0:7b:42:cf:07:d8:6c:8e:86:
e5:65:83:33:bf:21:98:91:19:5f:68:41:66:bd:2b:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:F5:8D:59:05:4F:DC:04:4C:73:89:6E:62:AA:5F:2B:2B:A4:07
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:5d:fe:7b:70:28:ad:d8:89:6e:a3:62:8f:2b:30:dd:70:
30:96:f0:19:5f:bc:3b:48:ba:5c:7f:e2:27:57:a4:f7:27:c7:
e3:ea:41:bd:03:d4:d6:93:eb:41:e2:9d:01:cb:e8:8f:c7:2a:
03:b2:ca:91:f4:c1:e6:5d:42:cc:f2:1c:c6:dd:5a:70:84:1e:
b0:1f:71:ae:ad:b3:4d:6c:27:15:55:61:85:bc:0c:ba:3b:99:
21:64:99:51:56:99:36:fe:ee:f0:a4:e9:f1:28:2a:99:45:be:
d0:f7:2a:66:23:b2:b4:8b:e6:b7:3a:2e:c9:12:c0:1f:7a:54:
82:11:56:ee:c8:20:2f:26:ce:83:d4:9b:0f:d5:cf:81:be:86:
fa:2c:7e:bc:bc:f7:b0:03:13:f6:60:f9:88:86:ce:89:81:1f:
b0:b5:6b:d8:1d:b1:03:9b:13:54:ee:19:4e:f2:b3:f7:a1:e1:
87:b3:f8:9e:94:c4:41:a3:50:15:37:dc:50:51:22:16:43:7a:
14:e4:2d:02:28:c6:c0:81:bb:8f:e1:b6:6f:6e:4a:dd:6d:6d:
6f:f4:82:e3:e2:e5:58:b8:79:df:a3:64:be:33:d0:f7:80:5d:
e8:6e:fd:82:0b:c3:69:16:67:ac:a2:5a:97:e6:fd:63:61:e7:
7d:e2:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:59 2026 by rpki-client