Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: hnwd/0lMZmUTRRlb5xZWyp7RsCnBcod/d1mMJHRF26c=
Subject key identifier: 7F:8E:2D:A1:6C:D5:80:76:55:33:FB:F4:49:A8:2C:E4:C9:2E:50:98
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 019D2703EC887D59A52B1F05E2540E371DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0E1A
Signing time: Wed 25 Mar 2026 22:01:01 +0000
Manifest this update: Wed 25 Mar 2026 22:01:01 +0000
Manifest next update: Thu 26 Mar 2026 22:01:01 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: hemKy6AJBaOqcp+MsUHdNyEq+1+6o6A4L8ehEkgQlac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ec:88:7d:59:a5:2b:1f:05:e2:54:0e:37:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Mar 25 22:01:01 2026 GMT
Not After : Mar 26 22:01:01 2026 GMT
Subject: CN=7f8e2da16cd580765533fbf449a82ce4c92e5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:a5:69:37:4a:c1:e4:f4:05:33:df:ce:3e:
fb:7a:b5:4c:91:56:37:b0:89:1c:08:38:d1:97:ce:
7a:53:1e:19:0d:bc:61:33:78:9a:45:37:f9:ee:67:
83:59:ce:fd:22:26:58:c6:59:7f:62:1f:53:02:89:
9a:89:1b:10:bc:ae:5d:df:c6:1d:06:69:f7:1e:2f:
74:a1:7c:b0:be:f7:94:33:b7:68:9c:27:09:3c:35:
33:aa:be:7e:1c:a3:fd:80:17:2b:b6:46:11:48:4f:
f6:5d:20:1a:51:51:fb:47:93:16:f4:e2:73:78:88:
6f:9a:20:3f:5f:2b:ce:3d:c6:45:3d:32:cb:60:71:
88:91:65:b0:8b:8b:12:a6:d5:0e:be:4e:a6:1b:61:
b3:39:21:cc:80:91:e4:17:03:a1:a2:be:27:71:cf:
b6:22:fc:ef:5d:f6:97:65:b8:a3:7f:79:56:6a:aa:
c0:18:d8:4b:7f:2d:6c:cc:a9:97:e9:18:de:e8:af:
7c:7c:e4:7c:0e:40:b7:b0:9c:c0:0b:67:c9:81:0e:
76:d5:90:e6:06:84:3d:f7:4b:06:5d:b9:c4:5a:13:
b7:1d:5c:49:03:f9:1c:03:52:72:35:75:d0:11:38:
c5:6a:4b:ad:b5:39:8e:ac:30:72:c1:e3:b3:7d:af:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:2D:A1:6C:D5:80:76:55:33:FB:F4:49:A8:2C:E4:C9:2E:50:98
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:59:54:77:22:ea:9c:ba:e9:7e:1d:42:f9:76:62:66:89:2c:
8d:f0:3f:6c:50:01:ad:f1:3e:32:b6:c0:52:08:e9:ed:6a:34:
f0:75:94:2a:0b:12:ed:e1:0e:30:13:04:ad:2b:40:43:66:b5:
74:e9:88:80:ed:92:2d:75:51:ce:c1:54:fb:d6:a7:49:13:d3:
73:52:cf:0d:f9:2a:e8:bd:e3:c0:18:af:52:cd:b6:76:82:07:
d7:4c:14:6c:02:59:ab:c2:95:1c:1b:60:a6:1f:c7:ff:4c:c1:
29:95:f0:37:3d:e7:19:39:63:4f:67:9d:80:93:fe:43:17:3a:
a9:4b:88:b3:57:81:36:5f:df:48:36:fc:4b:02:01:a4:2e:e0:
da:7e:7d:71:0d:a9:44:fa:af:71:5c:a0:fb:9a:ea:e0:6e:a6:
f3:c2:80:42:93:95:85:11:91:16:46:e1:6c:66:1c:e5:07:4c:
ce:e0:dd:a6:f0:4c:37:35:d9:56:56:a8:1b:94:e8:94:65:df:
85:75:aa:d9:b3:a4:d7:c0:2d:16:7d:11:f7:3b:c6:f2:84:77:
59:b0:b8:f5:c2:c0:06:7b:2d:2a:65:89:c5:79:00:3d:e6:a8:
27:2d:88:29:b0:1a:98:3f:0e:4c:b4:6c:7b:70:96:65:cb:fb:
a5:2a:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:44 2026 by rpki-client