Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: u/uTW0FSHpP0uUqlJN5KPgVYCga0Z7GF0+8V3WxyZQk=
Subject key identifier: AD:75:64:24:CA:FB:13:10:CF:C1:80:4B:A1:20:DD:46:BC:6E:C0:23
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019D2704C63447CBA0CC9A3542B1042AD553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 1880
Signing time: Wed 25 Mar 2026 22:01:57 +0000
Manifest this update: Wed 25 Mar 2026 22:01:57 +0000
Manifest next update: Thu 26 Mar 2026 22:01:57 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: KqRfWPFY6UQvpoHPLPaXtsR0KtJ49+tNGj2Mx7ygUwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c6:34:47:cb:a0:cc:9a:35:42:b1:04:2a:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Mar 25 22:01:57 2026 GMT
Not After : Mar 26 22:01:57 2026 GMT
Subject: CN=ad756424cafb1310cfc1804ba120dd46bc6ec023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:ab:57:9e:a9:0c:f4:94:5d:a1:eb:ee:a6:
05:36:f5:d9:71:7d:ec:68:6c:ca:94:82:3a:8e:a0:
bc:9b:cb:00:f0:10:0a:4d:9d:8b:9f:22:01:29:1d:
fb:cc:03:91:31:20:bd:13:de:b5:b7:4b:44:6e:f6:
36:17:c5:d8:7e:40:19:c8:33:81:57:a9:e8:a1:0e:
03:b0:08:f5:97:d7:cd:0f:1c:5b:39:12:9d:e4:2a:
38:90:c6:5e:2f:e0:11:19:a0:86:8b:ec:ba:f8:7b:
32:4d:51:e1:37:d9:9a:59:3e:82:54:07:9e:63:a0:
ca:05:e0:7a:e0:9e:c0:7c:ac:d8:de:db:04:9a:c5:
2b:27:cf:f1:fe:a5:d7:3f:5a:9d:12:82:66:af:a4:
1a:20:3a:35:a8:a7:89:22:a9:55:8c:17:70:bb:74:
ba:7e:cf:d1:cf:d0:f3:60:ed:9e:25:f3:5b:e5:eb:
b9:a0:6e:be:ef:35:e9:c9:1d:d7:41:03:dd:64:40:
95:a9:f4:8b:a3:61:92:fe:a0:ed:a9:25:93:32:72:
23:3c:e7:4b:40:65:02:68:9c:9f:41:11:9b:e8:e2:
cc:e5:f3:7f:c3:36:d2:6a:3c:e3:08:7e:cd:e8:12:
d9:8f:7d:f3:13:8b:28:30:ee:b1:f3:87:53:8f:43:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:75:64:24:CA:FB:13:10:CF:C1:80:4B:A1:20:DD:46:BC:6E:C0:23
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2d:cd:08:89:38:39:b1:53:70:e5:78:e7:48:4f:df:35:9d:
0b:68:fb:a9:f5:25:6b:bc:4b:f3:98:0b:5d:d4:5d:4b:31:81:
df:0e:ef:e1:7d:87:f8:62:ac:58:46:bf:e7:10:0c:95:f7:03:
37:0c:77:b0:64:7c:bd:65:2d:92:af:26:30:b8:f6:1e:3c:65:
81:e6:67:b8:ad:8e:6b:04:17:78:fb:79:93:5a:e3:47:44:33:
6d:b6:3d:e6:b9:90:1a:cd:1e:46:13:c3:b7:d7:a3:41:97:dd:
4c:12:91:93:8b:60:5e:06:da:e7:b3:10:ff:05:cc:87:c2:9f:
cd:89:db:a0:1e:6d:04:e5:e7:13:32:ec:60:85:4c:35:d1:21:
a7:24:20:04:af:7d:4d:de:31:65:1d:c6:64:0d:76:79:9c:81:
15:2c:83:00:3a:f3:d7:d7:87:f2:5f:c5:e4:9b:e3:29:e0:c0:
ca:97:59:39:89:5a:43:1e:b5:12:d9:9c:ed:8a:c5:82:33:f9:
33:a7:e4:32:ad:56:d4:f7:d9:4a:7d:3c:47:5a:57:03:7c:fb:
4e:69:fb:a8:67:90:d4:09:eb:40:3f:bd:c5:6a:38:20:92:d7:
76:77:dc:d9:07:2a:62:56:19:3f:8f:9a:94:7d:b6:13:0b:c4:
8b:c6:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:20 2026 by rpki-client