Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
File: UZp1yrw_m8vraCB5f_1zzvwb-X8.mft (raw, json)
Hash identifier: UwbZF7a/RbUHMDEgcjmdagIqW+6ZSOA0vCfIFYNecx4=
Subject key identifier: BA:FC:4B:1F:79:6E:27:AE:34:AE:5C:38:B5:1F:19:6F:D7:D3:6B:66
Authority key identifier: 51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
Certificate issuer: /CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Certificate serial: 019D24DE7F9A4DB1B1ADADFA763CBBC48C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
Manifest number: 99
Signing time: Wed 25 Mar 2026 12:00:54 +0000
Manifest this update: Wed 25 Mar 2026 12:00:54 +0000
Manifest next update: Thu 26 Mar 2026 12:00:54 +0000
Files and hashes: 1: UZp1yrw_m8vraCB5f_1zzvwb-X8.crl (hash: pazjCFYdQJXqUs3Z2d96EidY8Bz++dAxDhJJrayTDL0=)
2: u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa (hash: D6JOFCXQmCbms2DaHL0CRRDHnlHYcP1xLAqC2NoBZd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:7f:9a:4d:b1:b1:ad:ad:fa:76:3c:bb:c4:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Validity
Not Before: Mar 25 12:00:54 2026 GMT
Not After : Mar 26 12:00:54 2026 GMT
Subject: CN=bafc4b1f796e27ae34ae5c38b51f196fd7d36b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:8a:37:1c:4f:e3:46:b6:db:84:25:9d:63:
98:af:63:2d:a0:d0:11:6a:be:34:3d:5f:2b:7b:58:
98:d5:ee:82:d2:33:07:e5:cd:1d:2c:36:af:69:2a:
fc:00:9b:80:f4:bf:b8:25:5f:20:59:e9:d5:15:45:
bd:40:44:43:35:d5:72:56:3a:5b:a9:8d:b1:88:77:
9c:19:17:e6:2f:2f:b7:14:27:92:fc:67:9e:89:13:
44:37:c5:94:12:ab:51:7f:7c:c5:b2:bc:bc:45:c9:
d5:61:98:f4:eb:95:6e:56:f9:ef:57:98:3e:db:3a:
24:34:6e:49:a7:fb:4e:ae:59:2f:e3:8a:22:e7:31:
da:2b:81:31:24:8b:b7:6d:75:ce:68:ec:67:16:a2:
93:2f:ff:cf:56:8c:0e:df:3c:0c:84:0f:1b:03:c5:
ff:49:e0:ad:55:af:c9:eb:d9:9c:90:66:03:8b:ff:
41:e4:86:fa:90:61:54:b3:35:2e:37:b3:cc:7f:3b:
76:72:b5:5e:8c:3d:77:33:40:9c:86:89:a8:92:f7:
c7:86:b4:e4:04:6d:4c:f6:ee:c9:88:fa:4b:a4:f3:
41:a8:0f:ba:a5:4e:a4:e6:81:c4:fa:f4:10:9b:c5:
d0:33:57:79:88:2d:42:d6:be:a6:de:03:bb:2b:4b:
13:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FC:4B:1F:79:6E:27:AE:34:AE:5C:38:B5:1F:19:6F:D7:D3:6B:66
X509v3 Authority Key Identifier:
keyid:51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:53:8a:a5:7f:c0:5e:e2:80:bc:e1:7b:cc:cf:ad:dc:c4:
91:62:64:78:54:a7:30:ef:f1:c5:af:f0:69:70:ea:c7:bb:6d:
03:21:60:71:58:ea:2c:bb:8e:8a:fd:43:9e:37:cf:14:46:cf:
96:33:a8:70:92:8b:a4:a9:af:46:c6:37:fe:ea:b2:c7:b0:5e:
58:a5:0c:d5:ed:e3:ac:4e:48:0a:26:b1:3d:a5:bf:4b:3e:43:
f3:3a:4f:b4:1f:be:2e:c1:ac:b4:1d:4f:ae:99:ec:57:32:b4:
e5:b4:00:a6:91:d0:3d:6a:e4:0a:94:79:33:b3:6f:95:8c:db:
9c:74:90:53:12:93:26:1c:1c:c4:56:49:83:7c:7c:cd:6b:b1:
af:ba:ca:92:bd:7f:6b:50:66:90:2b:60:4b:ec:1a:1d:8f:c0:
44:db:06:df:d5:5b:b6:ba:9e:0b:17:1d:ad:a4:2e:24:32:25:
00:f9:5c:66:bb:5f:36:af:b6:5f:fa:49:e9:79:bf:ae:2d:fb:
35:85:03:73:f6:73:cc:52:fa:68:e8:ef:59:23:86:34:26:1a:
6a:66:69:c2:57:8f:58:bd:a0:1d:25:ae:90:58:f8:d2:90:d7:
c5:d6:81:34:e3:e5:94:9c:ba:8c:fc:ea:ca:be:fe:7f:01:4d:
16:df:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:45 2026 by rpki-client