Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
File: UDCmlphoVt51uCLWrpX-ATE4IK8.mft (raw, json)
Hash identifier: CTx5OFPkiYXQ5pIefqdFVKUkqvKEIIFZPFnHSiuDs+8=
Subject key identifier: 73:12:AF:23:A4:3E:96:35:1F:38:AD:B1:7A:37:1B:CB:1D:08:7F:79
Authority key identifier: 50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
Certificate issuer: /CN=5030a696986856de75b822d6ae95fe01313820af
Certificate serial: 019D37C05984C8E11A97F0BD063500A88B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: UDCmlphoVt51uCLWrpX-ATE4IK8.crl (hash: jw8HpNeEnCW/I7jRteBzwR5JfM00Xqp2gGUceQCtRu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:59:84:c8:e1:1a:97:f0:bd:06:35:00:a8:8b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5030a696986856de75b822d6ae95fe01313820af
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=7312af23a43e96351f38adb17a371bcb1d087f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:09:fe:1a:b5:86:72:7e:63:6f:6a:a6:78:
62:08:9a:a0:32:e9:03:21:7c:d8:ae:64:94:93:b8:
a3:f9:ca:26:c1:db:91:fb:18:37:e0:a4:3f:42:eb:
41:0e:1c:0f:c4:45:cb:d8:ca:f1:20:29:36:8a:40:
6e:65:9e:dc:82:4e:f5:21:44:70:f7:b8:c7:07:45:
f0:c2:bf:53:78:88:82:16:e7:ef:52:56:8b:f0:d6:
5b:ca:37:9e:f9:7e:68:0a:1e:2d:07:d5:e7:34:09:
9a:32:ac:a2:1a:36:cb:52:81:7b:8e:27:9e:1b:37:
c6:22:c3:90:5b:0b:c1:10:cf:c4:f8:f9:f8:47:c5:
54:20:80:21:b9:a1:79:ad:dc:51:fa:8c:96:a9:1f:
fb:c0:8c:77:96:d9:59:04:f8:8f:71:de:df:ea:6a:
da:5f:22:f5:dd:fc:8e:06:04:bb:cf:18:9f:44:89:
02:f6:14:15:ef:4b:cc:72:34:92:0c:82:a5:20:5d:
be:34:14:41:a7:cc:6c:8f:f6:ce:71:cc:c2:0e:c9:
c4:8e:d0:d5:8f:7f:ac:30:ab:da:6d:81:d2:99:74:
c2:48:e1:33:d0:64:e2:d7:cd:83:20:cf:e1:f0:2c:
9f:5b:5b:83:2c:21:56:ba:65:c8:c0:50:ae:fc:6a:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:12:AF:23:A4:3E:96:35:1F:38:AD:B1:7A:37:1B:CB:1D:08:7F:79
X509v3 Authority Key Identifier:
keyid:50:30:A6:96:98:68:56:DE:75:B8:22:D6:AE:95:FE:01:31:38:20:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDCmlphoVt51uCLWrpX-ATE4IK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a31884-2952-4647-815e-e52525db12db/1/UDCmlphoVt51uCLWrpX-ATE4IK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:6d:d0:42:4b:c5:c1:3d:4a:19:92:19:51:bd:71:d4:4b:
86:46:c1:b1:af:05:38:b9:56:70:b6:32:4e:53:79:86:0f:fa:
27:65:1a:ce:9f:65:d3:41:df:88:1c:b7:88:d3:73:5f:5c:d0:
3f:69:1e:80:36:65:37:d0:6e:32:16:0f:c3:23:0c:d7:f5:ed:
34:24:8c:a9:08:be:aa:ae:a2:89:bc:fc:d4:ef:52:09:0d:e0:
46:e9:51:45:d8:f6:97:87:d5:a6:72:f2:8d:56:59:57:cd:ef:
c7:a9:94:a3:01:02:f5:ac:82:ab:14:4f:38:4c:c1:9d:55:e0:
64:bd:6a:84:50:28:67:7d:1f:02:09:2e:84:7b:3d:22:f1:5d:
3f:2f:0b:3a:b3:59:09:a9:99:20:32:5c:da:00:38:34:66:60:
2a:52:5e:9b:76:0a:25:a2:1f:42:bc:95:2d:94:63:41:3e:c3:
0b:62:50:b7:f2:c7:05:f9:68:6c:91:7c:4c:02:0c:f8:e2:94:
22:f9:91:45:47:dd:19:58:1b:fd:dc:c4:78:d2:fd:f9:0a:4e:
bb:6d:05:ac:37:40:2b:cb:25:3d:bf:74:e9:8f:a9:8c:37:ee:
5f:1f:0c:ab:78:c1:d2:68:50:e3:69:09:bf:8d:c9:bb:ba:e2:
b5:83:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:25 2026 by rpki-client