Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: B7vFBNDIyAnamB7dbxnxGfeapvtClVQ1DZvmt5aJXoY=
Subject key identifier: 09:91:CE:C9:4E:BE:4C:09:D5:51:C2:5D:9D:13:C3:AA:70:34:4B:A4
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019D265F21DD1B30F186126D1C1A0737B105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 15D8
Signing time: Wed 25 Mar 2026 19:01:01 +0000
Manifest this update: Wed 25 Mar 2026 19:01:01 +0000
Manifest next update: Thu 26 Mar 2026 19:01:01 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: 4jrd0ZeSUxPKd66qlDMs5ZdyQqTRh8MoC6medd7ArG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:21:dd:1b:30:f1:86:12:6d:1c:1a:07:37:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Mar 25 19:01:01 2026 GMT
Not After : Mar 26 19:01:01 2026 GMT
Subject: CN=0991cec94ebe4c09d551c25d9d13c3aa70344ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:97:4c:3d:68:c2:e3:ad:c2:f1:ce:60:89:
d0:1e:34:57:a6:8f:c3:a4:f6:d5:90:c4:30:a0:0c:
44:f9:34:6d:81:6a:10:b3:64:fc:c9:00:c9:bf:0d:
3c:9f:8b:29:91:3f:82:61:ef:07:43:c9:71:31:f4:
9d:cc:a6:5d:ef:e7:79:31:58:ce:a6:e0:49:c8:05:
d2:c2:1e:02:28:77:82:ae:82:d9:1c:15:f0:27:39:
c2:e8:78:ee:fc:66:ee:b0:8d:ac:9f:2a:a7:bb:82:
36:99:3b:01:60:84:71:2a:46:7e:f1:cf:fe:14:2a:
08:d2:96:ae:e0:3b:2f:bc:51:f6:1a:9c:d9:9b:2d:
7e:d4:e2:79:6c:3b:3d:1d:e5:be:18:b7:6c:3b:69:
f7:01:d2:c7:7e:23:bd:fc:c9:31:b0:02:3b:5e:32:
3b:c6:30:ea:37:b1:b8:ce:8d:f6:72:0b:64:b6:33:
22:23:21:04:57:10:f1:90:9c:ba:8f:ba:75:91:3e:
f8:0c:cb:91:a4:5b:1a:ab:39:da:cc:1e:76:0e:bf:
5c:cc:52:ca:b5:7d:89:1b:66:59:55:e0:41:05:d2:
35:2c:42:bd:6f:d4:3f:b5:a7:0e:63:3a:28:53:04:
c6:72:59:84:88:2c:da:72:64:3e:1f:08:27:33:46:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:CE:C9:4E:BE:4C:09:D5:51:C2:5D:9D:13:C3:AA:70:34:4B:A4
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:36:ec:a0:8a:24:79:73:ba:d5:ee:26:05:1c:d3:ad:2e:0d:
ed:c8:14:26:9a:63:cc:2e:84:74:c4:b9:e4:12:3e:65:f1:9e:
92:0a:f8:fa:ae:0f:20:90:0b:09:28:b0:59:41:b5:c9:76:54:
3b:95:6d:0b:db:74:fa:4f:94:ec:f6:ed:b8:7c:10:e3:aa:d8:
0d:50:a2:95:32:f4:6b:0a:33:22:f6:71:bf:ec:2b:ab:8c:e2:
a1:69:d5:43:aa:2a:e1:69:e7:5b:bd:e2:37:55:e1:ac:e3:35:
88:c2:29:b7:0f:d2:10:fa:ac:19:7b:6c:ff:5b:94:7f:74:f8:
73:eb:86:12:22:87:cb:88:75:d0:15:93:b4:2a:6a:43:55:9a:
9c:b9:23:c7:70:8e:81:be:d5:3f:0c:3e:0d:d6:d3:02:71:9a:
b0:71:8b:a1:5e:80:f8:42:27:40:7e:c9:dd:e7:e5:55:0b:10:
4a:ab:4c:ba:6e:89:45:08:22:63:12:3f:0b:ee:61:80:81:3d:
56:24:93:c2:04:6f:bc:5a:ab:62:6f:4a:13:74:88:de:8a:f0:
3f:61:b6:57:80:f3:f6:a0:6e:ee:90:73:69:ee:2b:be:ac:fc:
ef:bd:31:91:8a:4b:06:60:97:c8:3a:cc:9d:04:b5:00:e1:6b:
0c:f2:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:59 2026 by rpki-client