Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier: cW1gKN7UaNlKqU+k70iI2+I6fFJJ+x9EM2u5XT0OyVY=
Subject key identifier: 1C:95:1B:8F:18:D3:D9:C0:2B:66:37:3A:94:72:77:97:91:E2:BB:0B
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer: /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial: 019D27049C3936720352157E81722F51798D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number: 1139
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: YPBhZjYmFHb+e681ErQf1iAvFljuNKc5vBDvNfe/XiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9c:39:36:72:03:52:15:7e:81:72:2f:51:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=1c951b8f18d3d9c02b66373a9472779791e2bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:a4:5c:36:cf:d6:22:59:0c:f7:71:ac:10:
0f:e3:3a:31:38:5e:3d:79:14:26:d0:fe:2a:b5:5f:
94:dd:db:48:c7:57:17:66:20:ec:2c:ef:47:f0:b2:
8c:72:c4:0c:54:7f:52:d8:a6:9c:d0:e1:38:2e:d4:
d7:c3:10:51:f7:f6:5a:c7:6a:22:66:83:59:a0:96:
18:51:03:4e:74:24:37:4d:55:dc:ee:d2:80:a1:f3:
2e:af:8b:7f:fc:58:38:38:f4:14:1d:66:d2:a6:26:
a4:da:4b:ba:59:72:c2:e6:97:e4:ec:e3:d5:1f:f9:
62:a3:a0:44:29:3a:fa:70:f4:6a:0f:ae:70:5a:d9:
65:5e:c4:73:06:c8:2f:c2:e2:a7:c1:31:a6:ac:aa:
a6:a3:c4:18:3b:77:ab:75:d9:59:6f:3a:81:99:66:
2c:8c:3b:30:11:57:c1:36:f0:f5:94:46:3c:cf:ea:
e9:a5:01:c9:82:9f:43:a8:f2:e0:ad:f5:f8:6b:b5:
70:59:8d:71:64:68:28:46:12:ab:5c:13:d4:62:52:
ec:ba:17:cf:7d:01:40:9f:bc:ea:2e:80:1d:e1:d3:
07:a7:03:52:d0:0f:24:a9:cd:11:cf:cc:b5:bd:da:
f9:05:2f:3d:b9:b8:4b:1e:5a:92:68:77:43:b2:16:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:1B:8F:18:D3:D9:C0:2B:66:37:3A:94:72:77:97:91:E2:BB:0B
X509v3 Authority Key Identifier:
keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:eb:00:31:0c:73:e6:47:25:94:ae:c5:dd:b4:89:89:aa:
a9:4b:28:ee:30:1c:ee:0f:2d:bd:f0:56:04:4d:f9:38:c1:1b:
74:24:c2:6e:c3:79:37:23:0f:5e:99:f2:5c:50:6d:dc:62:f6:
56:0d:92:29:2e:9f:fa:25:02:78:81:ed:59:b7:28:ba:5a:a5:
9b:ef:25:78:b2:a3:9b:80:53:f3:ad:94:4d:95:02:72:e7:ec:
66:0c:b6:23:d7:f2:0d:64:76:01:cc:11:93:21:21:f2:21:41:
bf:e8:cf:a3:75:02:ff:38:77:4b:3d:d2:af:02:79:78:24:04:
c8:1c:f8:fb:70:c4:61:0f:25:7e:bc:3a:b3:0a:4d:a1:7f:9d:
24:ef:ec:8a:e1:e4:a9:44:32:9b:08:ff:ae:65:c7:b2:22:ab:
3f:de:7a:d3:15:68:b8:b1:1b:a5:9f:f9:12:3b:34:27:66:e6:
e4:df:e2:40:bb:83:31:9c:05:28:38:0f:a9:4e:33:c3:1f:2f:
71:fc:57:38:08:6b:72:ed:73:66:37:54:ec:ad:ea:14:97:af:
10:74:cc:68:86:9f:2d:72:8b:b8:2d:0a:9f:79:91:eb:ee:33:
34:58:3d:84:ed:20:52:5a:41:9c:79:67:7c:e4:cb:51:e1:ec:
3e:32:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:59 2026 by rpki-client