Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: d8MJ1f3HcvQn0xB8wJItTqTjaHNA5e+AEV3J+jfNBmk=
Subject key identifier: 72:9E:FC:68:9B:F2:54:88:39:27:B8:35:54:3C:EF:DB:2D:C6:FA:61
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 019D28F2BC9CCF21992B1F600E35D74A074A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 0C0C
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: rKb9zH0A6lX2aWGMJCLL6e1RLjS9juSgURFAi1lttEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bc:9c:cf:21:99:2b:1f:60:0e:35:d7:4a:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=729efc689bf254883927b835543cefdb2dc6fa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:27:34:f9:47:28:06:08:ed:25:87:fa:89:
ea:4a:f1:bd:fe:25:ec:8a:07:db:44:8d:7d:c9:77:
91:3c:4d:dc:c3:56:ee:41:0b:8f:3c:98:80:fc:d5:
61:3f:63:56:f9:2c:de:10:f4:c6:d9:5e:07:d8:27:
74:e2:5b:89:d9:5a:b4:15:92:55:63:72:f7:28:cb:
bb:ac:5f:40:a8:7c:ca:9a:d3:2f:7a:e7:37:8c:94:
5e:42:91:8c:42:11:37:66:ab:f1:b6:74:7a:44:60:
6b:df:a2:13:a8:33:bc:50:20:0d:b2:0e:79:b3:12:
cf:d9:d8:99:1d:37:41:77:51:54:62:71:ae:3b:11:
14:b5:21:b2:13:c9:17:7f:75:35:cd:a9:fe:a7:84:
b2:d6:b0:f4:10:1f:91:cc:58:9d:f1:38:bd:f0:90:
51:9f:53:84:19:66:de:e0:7f:1c:35:41:ac:2c:8a:
c9:6a:de:f3:b4:08:20:55:66:af:10:62:ee:95:f9:
a3:ad:07:d8:f1:14:e6:ad:38:4e:d8:73:89:6e:8e:
ec:4d:66:ba:ba:56:b7:28:7a:08:bf:e1:c1:eb:9e:
89:52:b7:30:0d:37:2d:15:19:32:33:0c:52:99:82:
1a:da:fe:67:6a:28:a2:85:e2:1c:2b:74:fb:26:e6:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:FC:68:9B:F2:54:88:39:27:B8:35:54:3C:EF:DB:2D:C6:FA:61
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5e:1f:2c:2e:6a:a9:ee:00:f6:be:66:c7:9f:ac:23:49:aa:
3a:4e:02:3c:4c:a5:65:ed:53:83:e0:70:d8:9c:e1:35:a1:90:
23:4f:55:05:f8:43:3d:f6:2a:d3:1a:b6:a6:26:19:97:6e:de:
2d:a9:e9:7c:08:87:2e:d6:15:c8:e6:02:09:60:8c:20:30:c9:
93:11:f2:66:2a:ec:e8:be:e5:37:ff:69:4d:c8:6f:90:cf:80:
5f:b9:31:9d:ae:da:31:04:fa:94:64:c2:9c:f1:21:1f:b0:07:
67:a2:41:7d:cc:0f:17:a2:71:3a:0a:b9:89:e2:ab:e0:cf:fe:
dd:ec:14:26:2f:ef:a5:da:e2:f0:63:24:11:f9:54:04:73:bc:
ab:eb:eb:53:e1:c8:1c:30:6d:9b:4a:84:14:39:33:57:98:ae:
17:3d:30:3a:19:ac:83:65:93:70:dc:3f:0c:0e:82:2b:ed:c8:
6c:e5:5a:87:a6:96:eb:89:fa:ae:5e:cf:25:fd:04:f3:18:66:
35:24:cb:9d:02:28:ce:f8:c5:4b:93:77:31:2b:25:0e:ff:36:
dd:91:da:f3:d5:69:14:09:1b:b5:d2:be:42:9e:39:b4:be:1e:
e6:5c:1b:81:d2:55:9e:83:ef:20:0e:14:82:99:df:d1:94:2c:
07:df:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:36:57 2026 by rpki-client