Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: wTKLb2/rvwREji2GWUDZETjpfiLz6mNm9KOqgsnWW2k=
Subject key identifier: 94:33:59:12:C1:89:3F:94:15:82:3A:08:2A:A8:1E:24:1D:6C:47:0B
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019CC8D19A3E46E15BF85AF0304BE928D45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 10D4
Signing time: Sat 07 Mar 2026 15:01:45 +0000
Manifest this update: Sat 07 Mar 2026 15:01:45 +0000
Manifest next update: Sun 08 Mar 2026 15:01:45 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: nNUr45y1oD8vawvT+WIE3OlnXy2dno+uVCe3M8vzgkw=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:d1:9a:3e:46:e1:5b:f8:5a:f0:30:4b:e9:28:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Mar 7 15:01:45 2026 GMT
Not After : Mar 8 15:01:45 2026 GMT
Subject: CN=94335912c1893f9415823a082aa81e241d6c470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:11:ab:12:44:9a:9a:57:ae:f0:28:e0:91:
79:d1:5c:16:cf:77:30:a6:19:47:84:27:0f:a3:93:
ac:4d:8e:1d:96:fa:f4:75:22:ad:66:fa:88:4b:69:
43:a7:1a:11:f5:d6:ac:5b:aa:65:9b:6c:1f:ff:21:
cd:18:69:be:83:07:19:76:1b:34:4b:1d:94:87:75:
b0:28:f1:56:14:75:a4:88:e5:b2:f8:c3:6b:2d:6a:
ff:8e:38:ca:40:ad:e2:11:47:5b:c2:b6:8b:fd:c4:
6e:30:63:4f:68:d9:17:dd:f2:3c:a9:7c:fb:0f:6d:
22:03:f5:59:b6:b8:60:d2:cc:ce:d9:8e:2d:0a:f5:
c8:5f:aa:65:8f:fc:1d:80:09:a9:35:71:c7:d1:8d:
39:0f:7f:d5:35:8b:42:e0:92:97:01:98:f7:08:8a:
42:1b:ea:6f:67:ee:9c:0d:f6:46:26:b5:44:f4:de:
62:ce:6b:53:e4:28:35:6b:0b:e0:bd:ba:1f:f4:97:
48:57:5d:7b:bc:fa:e1:03:53:c0:aa:69:85:a3:49:
9b:9e:4f:11:20:2d:43:3a:19:cc:ec:39:59:93:01:
d9:60:5b:2e:4d:28:1f:05:8b:6d:7c:e5:7d:dd:79:
1e:57:19:99:e3:cc:14:7f:db:cb:9b:92:9f:f0:b2:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:33:59:12:C1:89:3F:94:15:82:3A:08:2A:A8:1E:24:1D:6C:47:0B
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ec:a3:3c:60:14:fd:e8:26:d0:81:85:8b:44:fe:cf:b9:6b:
66:59:c1:c0:1a:9c:7c:44:d3:ff:d3:38:6e:20:4b:71:79:0d:
81:06:ef:39:a0:0b:88:4a:3f:15:31:0a:b6:14:7d:d9:68:34:
3c:25:f3:48:4d:34:55:52:88:79:e8:18:92:5d:79:ff:5f:af:
f9:99:db:17:41:41:8a:10:a7:58:8f:73:f8:5f:b1:22:53:73:
f6:a0:dc:16:91:7a:60:11:34:17:1a:9c:3f:6f:d8:16:8f:20:
da:af:99:46:d2:4a:95:78:a6:65:a6:90:2a:0e:c7:cf:1c:bd:
99:1a:6b:d0:03:83:f0:07:19:e3:a4:a8:ca:e9:5a:0e:81:0e:
30:e3:50:8f:90:62:85:a3:4b:21:0a:52:2d:5f:a0:a1:31:6a:
ad:fb:81:c7:33:84:7b:ed:5e:07:d1:5c:03:6a:90:e8:b6:eb:
7b:f5:52:16:d8:92:6d:5a:df:f8:ae:fc:f6:b2:c1:84:f2:af:
42:28:73:fd:18:8f:5c:be:aa:c0:a5:7a:76:2f:5c:0c:6c:ab:
b7:17:2f:ea:c1:5f:e8:eb:87:33:38:4f:90:d0:cb:3c:4b:60:
f4:a4:aa:1e:cf:0f:f3:52:95:2f:38:71:ad:88:83:8b:dc:ad:
55:6b:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 02:10:27 2026 by rpki-client