Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: 2Zb/1zYmZOvKH+hvT98LyzWzNHFq4h+JZxDbO2l+1EQ=
Subject key identifier: 28:FF:90:89:68:D3:D9:CF:D6:7E:13:41:DE:EF:EE:98:70:62:A8:07
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 019DCC747BC4B281F111B79E1A22F96D0A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 0929
Signing time: Mon 27 Apr 2026 01:01:18 +0000
Manifest this update: Mon 27 Apr 2026 01:01:18 +0000
Manifest next update: Tue 28 Apr 2026 01:01:18 +0000
Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: 3OHjT8mCJ/w/+TFlSp9JOsT+ffrWXhQ91v7POCLGquc=)
2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:7b:c4:b2:81:f1:11:b7:9e:1a:22:f9:6d:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Apr 27 01:01:18 2026 GMT
Not After : Apr 28 01:01:18 2026 GMT
Subject: CN=28ff908968d3d9cfd67e1341deefee987062a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:fb:bd:7c:d9:ed:07:e1:39:4e:57:61:7a:
8f:9a:37:cb:de:8f:2c:2a:f1:00:45:a0:81:cd:19:
dd:92:19:bf:4b:e3:5d:43:0b:57:6f:d0:c1:94:12:
46:89:27:fa:c5:d9:5f:71:c8:5a:3a:9f:0f:82:3f:
46:88:ce:c6:bc:8c:b2:fd:14:b8:4c:c9:04:69:85:
28:e3:23:8b:64:28:6c:e9:1e:cf:c5:9d:c5:78:ef:
15:71:13:86:7c:45:fe:92:91:b4:ec:14:5c:c6:1d:
1a:28:ea:54:a2:09:fe:42:4d:ad:b7:c1:64:61:7a:
98:3a:72:e1:af:45:10:e9:73:d6:05:d1:67:87:17:
05:97:7f:09:f2:53:9b:bd:7b:bf:87:0e:78:fd:79:
83:80:ca:74:f4:61:d1:33:0d:e2:24:f9:d7:87:b5:
9a:37:15:ea:c0:3c:fc:b3:b9:b5:a7:49:b3:01:37:
33:1e:b6:e2:97:63:5a:ac:c6:95:3d:86:cd:37:db:
1f:75:33:e2:af:b7:b5:e4:8d:ae:5c:07:56:99:72:
61:33:9f:7b:8a:36:80:f0:8c:a8:6f:4b:2b:0a:da:
14:15:cd:40:c9:a2:32:fb:b2:a3:ec:5f:53:80:31:
d4:5a:75:c2:8b:e8:f8:e9:00:83:9b:84:c5:fb:68:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:90:89:68:D3:D9:CF:D6:7E:13:41:DE:EF:EE:98:70:62:A8:07
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:ea:f0:c6:2f:a2:82:2b:8a:18:d2:61:19:91:bc:38:58:
de:29:51:b5:f1:d7:75:e8:09:21:0f:9d:cf:2f:de:27:b7:ac:
87:ca:95:d7:ad:80:5d:bc:dd:ff:e5:9b:ef:dd:b1:03:c7:1c:
02:25:8a:2d:75:09:f3:4c:57:8a:f9:6c:9a:e3:ca:f0:bd:76:
4c:67:e1:9b:12:8b:8f:d2:d8:41:7f:5e:7e:5e:74:af:67:91:
fe:a7:92:0c:22:de:6c:a0:99:48:6b:19:61:88:dd:ea:39:28:
84:d2:09:15:aa:18:37:b6:43:f3:3c:c6:cb:9d:09:6b:61:05:
25:4c:d3:f0:45:6b:c3:d2:85:ba:ee:ae:e4:66:7e:e1:3b:b9:
f1:26:37:76:36:d5:f7:f9:1d:ae:4d:b4:e4:dd:09:7e:6d:71:
e9:c6:16:0d:83:cc:9e:bd:b1:7c:cd:1c:b0:33:9f:c6:10:e2:
ca:b7:22:6d:39:cc:f2:b0:27:1a:12:c4:ea:e9:97:e1:81:9c:
7e:83:96:8a:3f:f9:a1:c1:4c:7a:1f:8e:33:03:2c:9b:8e:83:
6d:4b:1e:8e:68:39:eb:70:99:55:98:f6:d4:7f:d5:ae:ba:a1:
32:7f:3f:c5:27:95:f2:bc:81:ff:a2:2c:26:05:71:77:6f:b6:
ac:23:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:30 2026 by rpki-client