Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
File: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft (raw, json)
Hash identifier: 5TZYHlgTnWJG53QSIeZXdEOaYZUjmQwggfe/MZ8N2Ys=
Subject key identifier: 80:85:F6:2D:1B:E4:9F:01:95:1C:99:3B:91:65:36:F2:8C:26:FF:BA
Authority key identifier: 50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
Certificate issuer: /CN=50097fb58c6f6a441d8ed75000773b4d09856746
Certificate serial: 019D28170493F5FB3611156A34D2D8F85C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
Manifest number: 0CA8
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl (hash: 7K7FGzXNsx47Huvv9+A24GEhyX8ZKzqsxrc/MbWzNB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:04:93:f5:fb:36:11:15:6a:34:d2:d8:f8:5c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50097fb58c6f6a441d8ed75000773b4d09856746
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=8085f62d1be49f01951c993b916536f28c26ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:3c:7e:42:6c:e3:3a:7e:3e:34:45:f4:bf:
c3:a7:5a:95:99:b6:a6:ba:96:f7:c7:30:5b:a3:4d:
87:8b:6b:e8:6e:f9:db:32:b5:b6:db:75:2a:dc:ba:
41:dc:91:8b:5f:73:2a:3b:aa:5a:91:17:0b:af:eb:
8f:59:5f:d8:02:4f:1d:38:91:e9:85:50:c8:ee:68:
c1:c8:fb:37:bc:cd:0e:31:16:66:30:8b:84:d7:71:
33:dc:29:34:50:7a:48:f3:99:4b:bc:f3:a4:6f:99:
e6:9a:40:42:b9:c1:cc:19:b2:f2:9f:56:c4:1c:a8:
0d:45:52:82:ee:cb:6c:68:65:87:9f:6d:9c:b3:ff:
21:93:11:66:d7:7f:1e:38:a5:61:d7:40:88:a5:85:
fa:15:d7:d0:36:29:95:2c:59:04:4c:eb:dc:48:f1:
2a:07:f9:bf:9c:ac:67:33:6e:dc:ea:81:35:8a:a2:
5d:43:73:c6:fb:e7:f0:b9:ae:fc:80:7c:57:fb:08:
8b:c7:8f:9d:aa:f5:13:77:33:bf:6a:38:db:ff:0c:
7c:46:16:b0:ee:65:81:33:81:87:64:b1:d1:5c:89:
96:ee:6b:a6:07:b4:c4:84:22:da:c4:89:e9:17:44:
41:e2:b7:74:7b:3c:88:2d:ec:22:fd:6e:85:d4:f3:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:F6:2D:1B:E4:9F:01:95:1C:99:3B:91:65:36:F2:8C:26:FF:BA
X509v3 Authority Key Identifier:
keyid:50:09:7F:B5:8C:6F:6A:44:1D:8E:D7:50:00:77:3B:4D:09:85:67:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/05f41e-e14b-4099-acac-22dc636b2488/1/UAl_tYxvakQdjtdQAHc7TQmFZ0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:15:bd:18:ea:76:be:be:6a:49:71:59:fe:7a:a0:b6:24:
77:38:c7:af:c9:f5:1d:41:71:7f:b6:5b:6c:f0:d7:94:a8:35:
62:ed:f0:f7:27:33:cf:fd:a4:e9:c1:15:83:3a:15:f4:1d:83:
a4:e2:c7:2c:49:bb:a1:9f:ab:83:e0:02:96:59:eb:73:3d:96:
e5:d5:7b:0f:f6:ab:ca:cc:c1:90:d3:7d:35:09:16:84:33:ba:
88:e8:39:6d:3e:12:59:53:54:9b:dd:9e:1b:27:89:4d:f2:60:
9e:43:e0:e1:6e:62:be:55:bd:d6:43:b6:9a:df:e1:f7:93:63:
d5:99:5f:49:b5:ac:43:0d:39:9d:08:c3:0e:3a:cb:21:18:71:
d7:9b:dd:c1:fa:b0:d5:3c:a8:2a:9a:d4:e2:d1:8c:a4:b9:94:
fa:de:25:b5:2d:14:87:3e:3f:bd:dd:46:b9:99:19:fb:fa:1d:
3e:75:62:e0:a3:b5:65:3d:61:b4:6e:6d:c5:1b:27:6c:d0:8a:
0d:b8:ad:33:2f:2f:1c:d6:50:d6:39:2c:bb:3a:d5:ed:2f:88:
ce:86:ea:63:c8:0e:00:e2:ad:12:2d:7e:45:15:b5:48:59:34:
19:44:8a:0d:0d:5f:88:51:9d:78:e1:fe:56:39:ab:d7:2c:9c:
36:5a:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:09 2026 by rpki-client