Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: mn4/HOKq+i43+tyzTulwMv1XMRZFtYyQGicgW2Yg72c=
Subject key identifier: 89:52:1E:07:3D:03:6F:D5:DE:1A:2D:8C:A1:16:49:50:8D:E4:79:DF
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 019EFD272617D7ED917762F0AF7A3CE20159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 0372
Signing time: Thu 25 Jun 2026 05:01:01 +0000
Manifest this update: Thu 25 Jun 2026 05:01:01 +0000
Manifest next update: Fri 26 Jun 2026 05:01:01 +0000
Files and hashes: 1: 96UsaTKEjdZ3wGsAHj4Q93Aoh6I.asa (hash: /HHj4PFLDbsQcaDY5XUjTsmz/wfOfGvG+NtQ/eHmb0I=)
2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: VBvtw4pdGXwWP9XgpjByBhIHj6MV0LbF2EGqX4fl+RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:26:17:d7:ed:91:77:62:f0:af:7a:3c:e2:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Jun 25 05:01:01 2026 GMT
Not After : Jun 26 05:01:01 2026 GMT
Subject: CN=89521e073d036fd5de1a2d8ca11649508de479df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:15:9c:c2:cd:15:14:25:ef:6c:d7:1b:2a:
01:72:bd:45:28:c0:31:04:92:66:16:ea:92:ad:15:
8b:67:fc:b3:a6:fb:a2:15:e0:f9:62:1a:7c:48:61:
e1:73:09:72:dc:91:c7:9c:5b:d7:17:e4:6c:7c:7f:
fc:92:48:1b:bf:45:64:df:ea:88:e0:e4:18:af:b2:
22:b7:ab:ba:e5:20:cd:de:d0:1d:84:93:1d:9b:ee:
72:79:51:13:00:82:d1:23:8d:d7:58:2b:12:05:9e:
ea:62:4b:8a:56:b0:f5:27:2e:42:fe:22:15:e8:56:
f3:2d:ff:df:7a:32:df:a5:f8:02:dd:19:7e:a1:63:
92:8e:28:43:8b:fa:f3:c9:7f:da:fb:3d:32:f8:0e:
f1:51:fa:5a:b6:a3:74:4c:8e:87:d7:f4:a8:ed:35:
44:14:55:a5:26:ce:df:5d:eb:b4:4a:69:bc:ae:d2:
71:d3:83:de:a6:d7:b1:af:c6:90:d9:61:86:d0:83:
03:7d:6b:4f:1c:48:97:5e:44:26:fb:89:65:8b:b8:
e9:38:8d:68:fc:b7:b3:18:e6:5e:7a:72:68:b4:dd:
f8:fc:3b:ee:99:1b:40:9a:01:f6:0d:0c:d0:35:e9:
34:4d:44:a7:be:18:25:45:ed:05:63:c7:83:50:45:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:1E:07:3D:03:6F:D5:DE:1A:2D:8C:A1:16:49:50:8D:E4:79:DF
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:be:89:5a:aa:41:9b:b4:9e:9c:6d:b1:3a:c8:e9:e8:ce:
66:d1:6f:d2:d7:51:52:f1:ab:1a:ff:fc:44:21:d8:37:fa:40:
69:cb:41:57:21:ea:72:26:58:d7:59:59:7a:cb:46:f4:ff:42:
71:0f:10:9a:3c:9e:0b:cd:19:04:b8:37:08:62:97:8b:8b:84:
ea:79:5a:fb:55:d4:68:e6:19:3b:84:59:33:0e:4a:97:c4:72:
d7:18:96:81:87:7b:5d:7a:fb:09:d2:c0:43:a9:a3:2d:c8:20:
09:9c:9f:aa:c8:ff:0f:3f:4d:b6:42:de:01:1f:25:c7:7a:1b:
78:83:8c:7e:73:e4:31:ca:28:cf:c8:0f:9b:79:6d:c7:36:11:
03:42:4e:46:0f:98:fb:d4:a7:fe:b9:ff:4c:c6:99:08:40:bc:
d2:ee:6d:ac:10:cd:37:64:44:9b:6e:14:14:df:e8:bb:e2:f0:
ba:d3:85:63:d9:de:6f:ab:76:1c:ef:29:a8:33:c7:c1:17:29:
fb:06:c5:8e:b1:d3:d7:1b:96:8b:19:43:1b:26:ce:c9:c3:92:
89:9e:2c:5c:d7:e3:5d:7f:b2:53:7c:14:39:e4:d4:11:95:9a:
d5:42:93:65:2f:20:25:26:a4:e1:a1:82:fa:ef:dd:e9:5e:fa:
41:82:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:40 2026 by rpki-client