Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
File: UdspKXLBDGn5fs0k8vtptPZ3beg.mft (raw, json)
Hash identifier: hRNbvWoTvLMvwFBY5WFtvEucbDT6JPv331V2JkMh9d4=
Subject key identifier: B4:BC:D7:37:58:35:6B:97:AF:DB:22:A2:D9:4B:76:B1:C6:D1:6D:2A
Authority key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Certificate issuer: /CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Certificate serial: 019D3865BEEC6CBC9E58C49235BC1AF25B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: UdspKXLBDGn5fs0k8vtptPZ3beg.crl (hash: Ru8rhn4vNOQrn25mBV51QAnDKOpQSwDNk/icuKQObe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:be:ec:6c:bc:9e:58:c4:92:35:bc:1a:f2:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=b4bcd73758356b97afdb22a2d94b76b1c6d16d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:bb:b8:19:5e:ca:52:97:bf:62:58:83:f1:
3c:78:2b:b6:f2:69:08:67:78:37:a8:dd:43:c0:62:
26:4e:5e:71:83:88:03:1c:a1:fd:3b:da:53:ca:d2:
9d:33:7a:42:11:19:c9:20:dc:d2:5c:27:b2:3a:4a:
e8:19:3b:06:1c:b5:b7:a6:84:ff:37:df:ca:1c:52:
81:6d:9f:eb:e5:d2:f9:b5:59:3a:27:f0:5b:38:72:
dd:35:33:6d:97:f7:cc:8c:e1:30:33:d3:b8:55:df:
bd:49:f2:0a:b0:59:2a:4f:17:96:16:22:b9:f9:79:
40:21:26:28:d5:1f:22:93:bf:ea:2e:cb:ec:26:a6:
58:9b:7e:06:7d:b7:a5:0b:4b:4e:04:bb:57:b1:bb:
c4:4d:b9:b9:72:e9:ac:61:c4:db:30:05:df:dc:31:
2c:7d:a6:82:07:95:c8:0f:1d:fc:1c:c5:93:98:0f:
1c:89:18:0f:95:10:60:ab:92:b8:ab:13:cc:07:a1:
15:72:3b:b8:f3:66:be:f0:43:42:76:50:ed:32:76:
30:e0:68:d0:1e:1e:90:25:6c:62:d0:95:06:a5:5a:
06:e5:ae:12:f5:b0:5d:d4:a4:d1:a0:39:b8:fb:53:
70:92:3d:e9:7c:fc:97:87:44:b1:02:08:28:88:4d:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:D7:37:58:35:6B:97:AF:DB:22:A2:D9:4B:76:B1:C6:D1:6D:2A
X509v3 Authority Key Identifier:
keyid:51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:10:82:60:de:a0:7a:61:34:77:47:bf:75:c2:38:3d:3f:10:
dd:44:80:51:5e:7d:a0:be:53:cd:5b:11:28:11:4a:5c:b7:04:
37:0f:09:5c:43:33:46:04:3a:9e:f5:7b:d4:c1:93:c8:c9:a4:
2a:00:87:48:35:49:62:54:92:01:b3:aa:01:c4:24:d5:c9:ff:
26:26:6d:8d:94:85:fb:8a:7c:62:20:86:71:cc:95:3a:c6:5e:
e3:a8:f5:fd:33:5f:28:d4:45:54:46:23:05:b0:cd:79:f7:ca:
c7:89:28:5a:ea:87:b4:ce:1a:59:8e:d9:fd:c7:14:0a:d1:d2:
7d:f5:f4:a4:6a:95:22:33:00:6e:44:ba:3e:a0:86:2f:78:ae:
73:66:f6:ec:63:5b:ae:44:44:19:f9:25:74:74:df:a7:4b:5b:
ff:be:58:b6:cf:bf:76:01:e5:f2:07:e8:4f:25:65:0e:10:65:
05:98:45:71:56:fd:8c:54:a3:5c:bc:26:b6:a4:52:6c:5b:6d:
47:fd:71:ef:70:01:09:bb:38:23:85:ec:e4:77:ab:7c:bb:bf:
4c:a0:a9:94:fa:bb:ce:44:4d:82:32:d6:6a:d4:fb:b5:fe:54:
74:80:6b:41:95:f1:89:fb:f5:22:65:64:36:67:68:a2:33:a4:
e3:94:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:45 2026 by rpki-client