Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: TPC9R/I+02X7UCG0MwXOAh3E3V7YOJHNMNHdOdrLNCs=
Subject key identifier: 55:42:4E:96:43:62:CB:9F:1A:A8:8C:D9:ED:20:6A:3A:4A:33:F8:8E
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 019D27E0488BF784928E13F20286FCAC96CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 1588
Signing time: Thu 26 Mar 2026 02:01:43 +0000
Manifest this update: Thu 26 Mar 2026 02:01:43 +0000
Manifest next update: Fri 27 Mar 2026 02:01:43 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: UwxT6rRKD4iJm7A1GyW/v3buMBgpkiE8SzYNyJdGGzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:48:8b:f7:84:92:8e:13:f2:02:86:fc:ac:96:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Mar 26 02:01:43 2026 GMT
Not After : Mar 27 02:01:43 2026 GMT
Subject: CN=55424e964362cb9f1aa88cd9ed206a3a4a33f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:fe:bb:49:9d:5d:cb:1a:34:1f:ee:cf:ce:
1d:ea:f7:70:22:bf:a1:16:13:72:43:57:09:11:0b:
05:7b:0d:32:10:e6:ba:f8:34:0e:4b:da:d2:a3:0e:
79:4b:ff:f1:68:c5:45:b5:c7:a1:d6:f1:22:35:e3:
15:fe:e9:28:8c:17:2d:a5:8e:9c:39:ff:e0:7f:dc:
ef:70:bc:c4:99:db:fb:18:6d:0e:22:e8:a8:98:49:
ef:97:10:72:2c:17:e0:64:40:b8:d0:34:a6:50:fa:
bf:81:ad:5c:4d:67:93:01:35:49:84:df:df:67:8b:
ac:2a:75:3b:bd:0e:47:63:e6:a6:bb:56:a6:3c:7a:
fd:d3:be:9a:93:bd:c6:36:9f:0a:c1:b0:9a:d6:c3:
4f:56:24:2b:83:7d:51:66:4d:55:d5:42:4e:2a:9b:
c0:2f:80:5a:98:c1:37:4b:23:86:19:0a:ba:2a:63:
33:8f:ee:ad:5f:1a:df:0f:cf:4b:9b:5b:64:6f:3a:
54:58:8e:d4:47:70:3a:c6:a6:9e:f5:9d:c8:73:22:
e2:ef:32:4f:59:14:b0:1b:2a:94:76:45:c0:70:31:
a6:7e:98:9e:88:19:c6:83:35:71:1d:e2:eb:44:7b:
df:5f:d5:ae:eb:c5:72:21:00:e3:38:10:22:9e:70:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:4E:96:43:62:CB:9F:1A:A8:8C:D9:ED:20:6A:3A:4A:33:F8:8E
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:98:5c:6c:96:56:29:8e:cc:1b:cc:73:7e:1e:04:4d:89:2d:
7b:c4:1e:56:d0:e8:2c:53:69:ff:11:24:c2:1f:d6:7c:9a:6b:
14:71:dc:da:56:38:a6:b0:66:28:92:09:8e:f9:23:ef:9b:63:
6c:7d:21:07:fe:95:33:ac:05:99:5f:78:1f:53:cc:79:b9:1a:
7e:48:c5:c2:92:f5:29:71:cf:b9:fb:8c:93:dc:e7:44:74:8c:
08:2c:a4:77:c2:f6:60:b6:24:b2:0c:9f:33:52:1c:dd:9b:7a:
63:62:65:dd:2b:6c:e0:96:cf:e9:6e:7a:a8:cf:09:c0:08:35:
3c:75:5f:c2:ad:71:8a:31:c1:8f:a3:36:8b:8d:13:cd:63:8f:
0b:22:b0:a9:a2:e2:9c:7a:16:9e:7d:0f:61:fc:bc:64:04:72:
9e:37:66:8f:75:86:32:57:51:32:21:4e:55:3a:ad:1b:f7:09:
b8:c1:05:23:e6:99:7c:b5:03:f4:e1:2f:7f:49:66:22:96:56:
39:d2:aa:13:c2:f4:26:bc:c9:f8:60:b6:3d:a4:32:4a:8c:af:
78:48:b4:94:bd:8e:0d:73:bb:09:6e:ec:6a:64:09:b1:29:62:
37:f4:dc:4d:2d:f4:c5:92:3d:13:15:4d:4e:4e:aa:3a:7d:6a:
cf:e2:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:46 2026 by rpki-client