
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: 6E13LdUuSmff0iIKxjkUXLhOyPSHDihwe2dSEnKZrVs=
Subject key identifier: C8:9F:79:15:6C:95:CD:19:E7:41:B8:60:AB:F4:5A:5D:22:71:41:45
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 019D371B6D5EA37C4D1483DC0D2DE1DA8DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 0286
Signing time: Sun 29 Mar 2026 01:00:37 +0000
Manifest this update: Sun 29 Mar 2026 01:00:37 +0000
Manifest next update: Mon 30 Mar 2026 01:00:37 +0000
Files and hashes: 1: GfOZEhgtw2JHT--DTWaI1Zya79A.asa (hash: F0GiB79s0VZ9SWMMCR6FQapZt3igQN3cUd1ttOisAFs=)
2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: QIiFjfsmxuft5CqH8PiJNpW3GGToB8EisJ55MsXlRSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:6d:5e:a3:7c:4d:14:83:dc:0d:2d:e1:da:8d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Mar 29 01:00:37 2026 GMT
Not After : Mar 30 01:00:37 2026 GMT
Subject: CN=c89f79156c95cd19e741b860abf45a5d22714145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:80:e5:f6:d3:55:7e:09:d6:49:3f:1a:8d:
4a:da:04:40:fd:64:c4:d3:7d:5b:d2:bf:e3:cd:99:
f2:00:88:10:d4:2e:29:08:35:cd:1e:c0:31:ea:04:
6b:24:74:b1:c1:1b:12:8c:61:ef:c9:b0:8d:5c:4e:
e1:17:31:38:89:20:45:0c:73:b2:ea:dd:f2:b8:40:
ba:26:3c:01:5f:bb:3f:91:aa:aa:20:52:6e:0a:e5:
c3:54:b3:ef:23:28:50:90:2a:cf:f5:14:ed:14:6e:
89:c6:89:8c:2d:84:1a:26:88:bc:ba:13:c1:86:b6:
7d:b5:4e:a9:46:30:df:fb:f2:bc:d7:28:6a:8d:6f:
25:1b:92:45:ba:01:e9:43:fc:08:0b:f0:d7:64:94:
e6:3d:6b:13:cd:b6:f3:1a:c5:1d:cc:9a:0b:1b:72:
89:29:77:58:1c:71:aa:c5:a6:a5:3c:29:15:46:c2:
8b:2c:ea:67:ac:76:d3:2b:49:52:5b:3d:b0:b6:03:
32:69:5c:d1:fd:aa:e0:68:42:d9:f5:fd:8f:c4:a3:
02:98:d1:ea:2e:24:60:15:af:4b:ab:2d:74:10:50:
f8:bf:dc:17:9a:fc:c9:4c:ee:ff:69:63:2e:09:2d:
07:59:45:31:92:59:4d:6f:96:66:b7:95:c6:21:e5:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:79:15:6C:95:CD:19:E7:41:B8:60:AB:F4:5A:5D:22:71:41:45
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:8d:e0:34:f7:6d:d2:b6:f2:f0:a0:5a:b0:ea:de:30:b7:
55:d6:89:6a:00:a7:37:4a:ea:2d:7f:de:c1:08:a1:a8:d2:f3:
d7:9c:f0:ad:6a:d4:58:4e:c4:df:e7:49:fa:1b:08:aa:a0:c4:
57:e2:23:b5:c3:6b:71:26:dc:1c:dc:4e:8d:90:04:3b:35:e4:
1e:40:c2:e2:f3:51:ac:f9:9e:c1:90:fa:7a:81:53:d8:50:69:
66:14:dd:49:33:ef:7b:53:25:67:f4:6d:cd:30:fa:3f:d2:3d:
65:ed:7a:b1:3e:81:0b:c0:ab:fd:fc:8e:cb:a3:1e:65:0a:c9:
b1:81:d7:43:69:e4:9b:dc:db:20:e8:05:30:2d:67:c7:c3:c6:
13:0f:33:07:2d:f1:ba:3e:c5:9f:5e:c0:1a:00:14:16:f6:5c:
0d:f7:17:a2:64:5b:c1:10:c5:cc:95:da:ed:9b:40:d1:01:6d:
08:58:0f:7c:df:28:99:3e:24:f8:0d:2c:b1:dd:42:59:d2:04:
f7:b8:43:75:01:42:9e:88:85:98:f2:f2:45:6f:88:ed:e8:52:
98:3b:a8:c1:d8:e3:35:80:1e:99:05:2d:b0:5f:b8:5e:c8:e8:
c3:6c:21:08:9f:f4:93:69:c7:e3:4b:c1:b7:4d:76:15:b5:93:
c2:e0:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:27 2026 by rpki-client