Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: 6Z38QweGH6+ZEi6rsmIjYZSFJ4whmYVfwJ176DKaz1k=
Subject key identifier: 71:22:16:13:FE:AB:2C:32:2E:72:32:91:87:07:19:30:2F:EB:EC:61
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 019D3909CB6F91484F7286A386BCD467E65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 1128
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: yyq7MMKcNdoS/fQkYk1T+Z9PRrimnCXYV1Wis+35fPk=)
2: v-ipIT8yr4AG7JC_OJEOS1gcpDo.roa (hash: GHUlrgQfUHa7TIwzSErf9EB2ikM0OJVY/nwHMqCmoVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cb:6f:91:48:4f:72:86:a3:86:bc:d4:67:e6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=71221613feab2c322e723291870719302febec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:22:77:14:99:96:79:49:67:59:52:74:78:
55:32:96:94:18:43:fe:60:c5:d4:4d:26:69:3d:78:
a6:1e:58:03:cb:8a:63:c6:39:09:16:b0:a1:15:38:
b7:26:2b:ae:d1:d0:eb:a8:50:6c:25:ee:6c:a0:f2:
c9:6d:42:73:d2:ec:93:54:fd:b2:23:c4:8c:d5:bd:
dd:0d:e1:6e:24:4b:4c:9a:77:bf:08:d2:ef:1e:29:
e4:12:5c:30:06:66:c7:e8:28:3a:c2:db:65:f3:52:
59:e0:c3:5c:66:ec:af:4b:d5:9f:b1:30:fe:9e:75:
67:89:ff:20:4d:ad:2c:29:78:cd:2a:8d:9b:29:9e:
88:47:f3:5d:2f:3b:e1:fc:be:da:7b:16:be:b7:58:
6c:70:d3:0c:9b:1e:b4:95:2a:0c:6e:f0:40:1d:23:
92:78:d3:4d:99:a9:58:07:a1:f7:1d:65:82:ad:d3:
92:2a:32:70:86:d9:e7:b6:76:9f:12:c7:64:c6:3e:
a7:d9:e3:51:3c:92:70:12:37:44:49:b2:c2:de:fd:
1f:eb:a5:ed:18:ad:ea:d8:7e:46:38:45:f3:c2:7b:
15:13:d8:8b:7c:d8:90:34:fd:25:bc:48:78:77:ba:
20:f5:f0:66:63:27:00:3b:1a:44:36:78:12:db:ac:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:16:13:FE:AB:2C:32:2E:72:32:91:87:07:19:30:2F:EB:EC:61
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b8:47:5e:6a:d7:f9:c2:ac:3e:49:b0:1a:7d:5d:be:59:cd:
68:57:d3:ab:2b:28:07:5b:d9:b7:12:f9:ec:78:3e:d5:0a:e6:
93:3e:f5:e6:ce:87:9e:e3:29:d1:0b:f3:69:15:7c:f2:85:3d:
10:d1:d3:48:e1:c4:99:ed:ba:d2:2e:bc:2d:13:1e:eb:a5:da:
58:42:bf:3e:3d:05:05:16:fa:e6:4d:99:c6:bf:3d:3d:62:99:
29:fe:ba:45:eb:c1:48:0e:ab:5d:32:48:03:d3:85:26:b0:83:
0d:f4:27:0d:ee:d5:ba:f5:f5:ce:ad:19:ed:7b:2f:24:ab:5c:
60:11:74:d1:9c:6a:18:46:54:ea:c8:f9:0e:ac:2c:60:ba:c6:
7a:8d:0a:ad:58:45:03:1c:fe:86:b4:99:5e:2a:fc:0a:78:df:
06:ff:d8:66:13:5a:33:0d:ea:1c:13:99:ba:e7:9b:f6:c6:6d:
57:89:8c:c3:2d:cd:46:a2:51:91:b2:17:b0:af:19:1d:76:0e:
fb:86:8e:3c:dd:d9:bd:24:a6:5c:0b:86:25:f1:3a:6d:11:e9:
09:38:b7:50:93:50:b1:36:e2:bf:7c:b8:c8:c2:75:7a:ba:26:
52:62:c9:71:91:55:69:a5:6b:6f:40:dc:ac:a1:c3:3a:03:2f:
22:c8:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:15 2026 by rpki-client