Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
File: UDYBHjSAnkd01MnJ8W_KaL24f6o.mft (raw, json)
Hash identifier: 3N3Z71xC+v7dLyquvWPbDxAl4UGoWEmTYljZITZ3c7M=
Subject key identifier: 5A:7C:2F:9C:89:D6:AF:29:CD:30:E7:C6:07:A4:DC:24:A9:00:5C:ED
Authority key identifier: 50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
Certificate issuer: /CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Certificate serial: 019F85D65949B870C11B9CDFFA0B992B68B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:44 +0000
Manifest this update: Tue 21 Jul 2026 18:00:44 +0000
Manifest next update: Wed 22 Jul 2026 18:00:44 +0000
Files and hashes: 1: UDYBHjSAnkd01MnJ8W_KaL24f6o.crl (hash: 3QIgHfYPPFBLEOManpB3R+tzJQKRV1Sko84rKL4p+jg=)
2: bEKO1xFyFydQ-qhcqaJLpw9igyY.asa (hash: jR7DlDJeCnwaCJJNmvyvwR2xMQOi7n5oqyxgiOsySVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:59:49:b8:70:c1:1b:9c:df:fa:0b:99:2b:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5036011e34809e4774d4c9c9f16fca68bdb87faa
Validity
Not Before: Jul 21 18:00:44 2026 GMT
Not After : Jul 22 18:00:44 2026 GMT
Subject: CN=5a7c2f9c89d6af29cd30e7c607a4dc24a9005ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:54:5a:04:28:e1:c2:4f:fc:7d:81:16:a5:
89:16:e6:c1:b5:46:83:3a:8e:f6:b6:d9:29:cb:4a:
ef:c7:60:6f:db:38:47:11:0f:15:c0:8a:2a:0d:a7:
02:83:1f:0b:bb:c5:65:34:0b:9a:d1:a7:12:ea:0e:
ad:20:1c:4a:0b:80:47:45:bf:1a:cb:2c:2a:30:89:
ff:32:f1:30:70:6b:53:4a:6a:7c:5f:3c:8a:a3:02:
2c:db:a5:f9:66:82:5e:6e:54:52:40:f1:5d:c0:6f:
87:f8:85:cb:6b:ee:fe:27:36:bf:5c:e0:bb:ca:29:
3c:ca:49:ba:95:9a:d4:f9:8d:90:28:fc:84:fc:43:
e6:9d:f5:03:7d:7e:76:e1:0a:ec:da:89:28:f2:30:
06:7c:c5:7f:06:c8:a7:87:58:4f:aa:fd:cd:58:e4:
43:40:18:3d:d6:47:91:58:8d:bc:d0:0e:83:c9:e7:
29:f4:b0:17:a4:76:1e:68:38:f8:7c:71:09:99:d3:
2e:d7:59:17:33:fc:3f:79:52:8a:46:51:15:63:87:
29:62:3d:e7:b9:89:b9:85:91:a8:f1:0b:b4:21:86:
6a:02:11:aa:6f:2d:f6:2d:35:66:f9:2c:1e:cf:cb:
9e:dc:e1:1f:74:41:85:22:99:02:e5:17:62:d2:19:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:2F:9C:89:D6:AF:29:CD:30:E7:C6:07:A4:DC:24:A9:00:5C:ED
X509v3 Authority Key Identifier:
keyid:50:36:01:1E:34:80:9E:47:74:D4:C9:C9:F1:6F:CA:68:BD:B8:7F:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDYBHjSAnkd01MnJ8W_KaL24f6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/UDYBHjSAnkd01MnJ8W_KaL24f6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:03:1e:b0:40:fb:f8:e1:17:1c:4c:c0:44:ad:e7:82:68:
4c:a8:77:b1:5a:c0:96:20:26:e8:d6:28:ea:1e:5f:63:25:52:
3b:85:2e:15:0e:17:5b:01:80:20:7f:61:38:fd:9f:40:36:7d:
bd:bd:83:21:1e:a6:c4:4d:04:18:f3:0f:30:4c:1a:ad:81:75:
c0:2e:85:4d:17:c7:31:8e:e5:ea:f5:0a:54:c1:ad:3f:9e:8e:
9c:17:df:b9:00:ca:1d:71:0a:53:6e:fb:f1:4c:ba:d0:64:3f:
9d:40:91:18:30:46:05:4f:0d:9c:ac:cd:ae:da:fe:9e:cd:8b:
8d:90:da:60:1a:29:07:18:42:92:6b:34:a6:45:98:2f:37:ce:
30:fa:53:91:3a:24:fb:6c:21:1e:24:5e:ba:f7:d2:8f:c8:e0:
1e:48:85:d8:7d:4e:26:3e:60:28:c4:cc:a7:29:8f:ba:67:73:
19:ae:7c:2c:a4:dd:b4:8b:d3:c6:6c:6e:e1:b0:5d:5f:70:97:
4b:aa:e6:01:70:1e:bc:0d:18:f8:39:51:ec:21:6c:98:bf:a4:
80:93:42:1e:40:b2:3c:07:93:31:9d:57:bd:17:f1:ec:77:56:
79:dd:5f:7d:fb:72:e1:1e:a6:61:7f:5d:0f:78:da:fe:f5:33:
2b:23:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:30 2026 by rpki-client