Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft (raw, json)
Hash identifier: 8WoClp7jwxotouTIJEu78+IfPoDy61l5BO20IO7Cfgo=
Subject key identifier: 8B:FA:D5:3E:A0:77:96:65:F8:84:B0:F9:CF:18:17:EF:C8:60:69:E9
Authority key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
Certificate issuer: /CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Certificate serial: 019D382DE666110A4CBB102FFED878B1ACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
Manifest number: 1028
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl (hash: jmLHGjVLvaiaF5tK1k2UPKf2+nAJjzFfsw+Ye7CyZbw=)
2: yjBUu69YuQD7TkAxTeMdScZ5Icw.roa (hash: Jeyx52sZn1PD/5iqRvE1v26OMeGY1Wk0jCU3l6YuckQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e6:66:11:0a:4c:bb:10:2f:fe:d8:78:b1:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=8bfad53ea0779665f884b0f9cf1817efc86069e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:67:4b:12:b7:d5:01:ce:89:6f:e5:ba:dd:
47:ee:ae:82:59:52:54:05:67:33:81:4a:76:e3:a3:
b2:86:fa:a6:16:36:fd:aa:4a:d9:a4:3c:63:a4:f9:
1a:5d:15:c3:fe:e7:44:5e:b6:85:97:29:d2:15:41:
5a:40:39:4c:9e:40:e7:cb:2e:49:fc:d8:f4:8a:aa:
c7:3e:c4:28:19:4b:04:4e:41:ac:a8:bd:74:6d:15:
45:16:34:94:af:38:81:48:44:de:29:13:49:35:6c:
2a:81:d0:ce:f1:fb:bc:c6:db:64:cf:c0:89:fb:9e:
95:34:4c:f8:e5:51:0f:67:71:c2:f0:76:93:dd:c7:
0e:4b:8f:07:4b:04:5c:07:0f:54:f6:7b:18:25:04:
ef:bb:4a:67:2e:a1:97:b9:90:b6:41:e3:2a:1d:db:
66:90:c2:70:da:a4:a7:aa:b5:9d:1c:17:0f:c2:55:
fb:31:59:42:a6:ef:5b:1d:ab:28:af:3e:3a:6a:e6:
31:76:99:79:64:e2:1c:19:e6:66:11:35:23:7d:07:
33:ce:22:78:c8:07:42:37:bb:23:aa:64:86:b2:80:
24:d8:61:99:32:c1:46:d7:6b:fd:21:6a:e0:41:5a:
dd:bd:52:e5:5e:a2:7b:46:c3:7f:95:d0:2a:58:80:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FA:D5:3E:A0:77:96:65:F8:84:B0:F9:CF:18:17:EF:C8:60:69:E9
X509v3 Authority Key Identifier:
keyid:51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:5c:57:86:9c:f8:38:e7:13:ce:a1:5a:7f:b3:a0:8e:ef:
29:59:f0:3d:c4:f6:e5:8f:8a:a1:33:0c:20:fc:d1:86:6f:26:
b5:f6:16:98:eb:0c:a6:93:cc:be:c7:25:a6:60:09:09:94:f3:
7f:b7:d9:d1:e8:fd:17:37:97:42:5b:2b:34:c1:23:1a:6f:57:
e4:9b:6b:68:01:19:d7:af:a9:36:4a:a3:a3:f2:c6:bc:4d:35:
5b:73:a0:bd:b3:06:ce:f5:ed:b3:83:b0:e1:10:76:1f:5f:81:
fb:b6:51:e6:8e:4c:57:1c:d5:ac:a7:ee:df:9d:d8:df:73:f2:
65:7f:68:cf:69:a3:ed:83:12:d0:dc:c1:8e:c4:14:8f:d5:e5:
29:b2:c0:8f:89:0d:34:7c:be:1c:90:64:92:90:4b:e0:55:14:
a2:cb:53:6d:29:b1:dc:ca:7c:42:0a:3a:57:90:56:db:5c:cc:
c1:3a:8a:ba:43:db:db:49:71:fb:ea:cc:c4:53:0c:74:95:1e:
85:dd:c8:3f:c4:d1:01:12:12:60:27:d9:c6:19:f0:aa:6b:e0:
a4:2a:f9:86:4b:52:23:e8:c2:36:36:e9:1c:58:5d:16:83:b2:
c2:4a:27:46:2c:0a:36:bd:9b:2b:3a:9c:c6:4a:05:97:f7:24:
78:80:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:13 2026 by rpki-client