Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
File: ufdKR6bRoL9MIW5fq02R-xKd89Y.mft (raw, json)
Hash identifier: GYyyJbd51BFC/4cxTtVCDDP9M7U7a+9WllOcCm1KhgA=
Subject key identifier: 5C:BF:05:99:1E:17:1E:01:14:A8:16:DD:D4:80:87:CB:33:7D:C6:6B
Authority key identifier: B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
Certificate issuer: /CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Certificate serial: 019D37C08801754F1EA2CA4B68CBEE299BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
Manifest number: 0DC5
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: ufdKR6bRoL9MIW5fq02R-xKd89Y.crl (hash: 9WaBDSiMLYOsWaTLYzTorbcdLzi7nSg/qwNnqAjpRCQ=)
2: xthXgiM7QFg5g-QceY1y5f74Rds.roa (hash: ov8Kweo+Ul8Z/hCjsozR/vUEJ009cmFNJtAjb/mVhe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:88:01:75:4f:1e:a2:ca:4b:68:cb:ee:29:9b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f74a47a6d1a0bf4c216e5fab4d91fb129df3d6
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=5cbf05991e171e0114a816ddd48087cb337dc66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:5f:67:24:aa:2d:80:11:05:24:46:93:19:
37:2a:aa:b9:6f:45:99:78:bd:81:d0:4d:20:b3:dc:
53:b9:c4:f7:dd:92:ed:0b:5b:57:ab:91:4b:4f:82:
6c:ba:8c:9a:45:99:2b:51:ac:3d:11:3e:20:34:97:
82:d7:b0:4f:d5:a3:91:21:09:fd:58:e6:81:d8:16:
04:35:9a:33:8e:9f:af:da:79:5a:24:86:f6:16:51:
7b:a0:14:2a:fb:ea:d5:7e:9d:3f:29:63:f9:ff:f8:
4e:4d:0f:32:2d:23:dd:40:bb:41:ba:21:8f:6c:5b:
46:6c:4b:59:24:b1:8a:7b:45:1c:29:09:66:c5:87:
bc:0d:c0:f1:a9:a6:1e:e3:3e:41:95:5e:63:52:63:
3e:f9:3e:e4:2b:c0:99:8b:72:9c:e2:6e:31:53:61:
58:81:d7:db:80:ed:de:b7:35:1d:e9:46:53:45:78:
48:fb:a2:0d:1a:f3:f1:1d:a7:8f:d0:d9:16:ab:5e:
38:6c:84:a0:d6:5a:b3:13:a6:9d:cc:ff:98:cd:00:
dd:45:32:cd:e6:3c:a3:ba:31:51:40:9d:e5:3e:e9:
dd:38:91:a1:2b:43:0b:14:2f:f9:97:b4:fe:9b:22:
33:7e:be:a9:5d:a6:e6:b8:ec:e1:81:8a:76:7c:dc:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:05:99:1E:17:1E:01:14:A8:16:DD:D4:80:87:CB:33:7D:C6:6B
X509v3 Authority Key Identifier:
keyid:B9:F7:4A:47:A6:D1:A0:BF:4C:21:6E:5F:AB:4D:91:FB:12:9D:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdKR6bRoL9MIW5fq02R-xKd89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24a0bd-0838-4c95-9ccd-30f608ade48d/1/ufdKR6bRoL9MIW5fq02R-xKd89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:dc:ef:60:d7:5e:c5:c0:0a:70:b4:04:4e:e3:35:e0:88:
85:d2:38:77:f8:f8:5a:21:2b:c0:74:52:cb:7c:af:bd:ec:8a:
16:1f:77:a2:49:34:5f:37:4a:01:13:35:5f:76:94:a8:75:f6:
06:3c:fe:af:34:9e:a6:81:e1:4c:02:47:d3:7b:6f:a0:7d:bd:
67:ec:21:82:43:c0:f0:e3:fa:98:1f:a0:ba:0d:6f:5c:e8:73:
31:b8:62:c4:76:b2:14:ff:30:68:c2:5f:a3:70:84:74:a6:ca:
79:3f:26:69:a2:2f:b9:c7:fe:0f:a6:14:f1:83:35:4a:df:e2:
c4:c4:b2:5a:0b:9b:27:18:04:8a:56:67:70:3d:bc:15:19:1a:
3e:9a:8d:f4:f6:a9:87:52:60:c7:1c:a7:c4:c0:a0:b4:9a:ba:
3b:cf:de:19:06:88:71:df:fb:18:e4:26:43:b2:6e:f7:43:c1:
fc:f7:72:03:e6:9a:17:a2:d8:7d:2b:32:f4:3f:a9:fd:95:5a:
2b:d6:b4:96:99:df:ed:7a:b6:1d:2b:1d:e4:1e:94:57:3f:8f:
a8:6f:e1:be:e4:9e:5f:df:e5:a4:44:c7:d7:15:f4:46:3b:a7:
fa:1f:53:a6:26:c4:12:54:90:78:73:b2:40:76:0e:89:15:b2:
a1:cd:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:29 2026 by rpki-client