Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File: kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier: p/fD282LeOUQEksAhe8hZbMDvcLhYkq81TQbo0RoYd4=
Subject key identifier: 45:C9:69:01:D9:9E:67:82:88:DF:3D:EA:C2:A4:BD:30:41:9E:88:08
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer: /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial: 019D2CCEC761BD96E9933D2F4C7286A3D2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number: 0F6E
Signing time: Fri 27 Mar 2026 01:00:41 +0000
Manifest this update: Fri 27 Mar 2026 01:00:41 +0000
Manifest next update: Sat 28 Mar 2026 01:00:41 +0000
Files and hashes: 1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: 5vAdfq8xpK0R9kG+Ezc+Iv2z5dsGiyS2iv5cTIGlfFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:ce:c7:61:bd:96:e9:93:3d:2f:4c:72:86:a3:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Validity
Not Before: Mar 27 01:00:41 2026 GMT
Not After : Mar 28 01:00:41 2026 GMT
Subject: CN=45c96901d99e678288df3deac2a4bd30419e8808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:3c:b9:47:ed:e7:ee:aa:a0:1c:6e:ab:a5:
8b:e6:cc:e2:19:67:c9:55:26:56:56:51:41:6b:93:
6e:6e:58:42:33:91:08:75:64:ae:3c:53:ae:a2:9c:
fb:25:bc:60:44:5d:b2:1e:82:4b:4b:d4:19:9d:32:
bf:ad:bb:7a:77:c2:63:9c:a4:32:91:3f:ab:81:5a:
ae:6d:09:9e:b4:b0:63:1b:77:0f:84:66:d6:b8:ca:
59:2d:da:c0:31:d6:97:5e:4f:40:63:76:c5:34:c2:
7e:82:fc:aa:e7:58:e3:2b:c4:7c:f9:6a:f7:50:b2:
ee:90:f9:8b:12:e6:de:dd:81:39:70:27:f5:cb:eb:
e4:1a:51:59:3b:41:92:52:5d:af:e0:79:a1:0a:3d:
96:db:ba:8a:d0:50:e6:68:ca:a4:6a:6e:14:b0:de:
b4:39:0d:14:ec:48:6a:fc:e5:0b:aa:e8:8a:83:ec:
ce:6d:53:e5:29:b7:6a:97:52:2b:17:85:3a:f6:7d:
6d:dd:be:04:db:bf:71:a6:5e:c5:a9:e9:6b:15:55:
b1:7b:b6:a0:72:4b:50:c2:50:b2:95:5e:35:e8:1f:
25:20:32:ea:e5:04:b3:77:29:60:e7:44:73:58:88:
4f:01:1f:b5:b3:76:86:26:16:c9:07:b7:d0:40:8f:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:69:01:D9:9E:67:82:88:DF:3D:EA:C2:A4:BD:30:41:9E:88:08
X509v3 Authority Key Identifier:
keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:88:10:8e:a4:67:5b:e2:88:3c:a8:95:23:09:8f:8b:f4:8b:
43:30:ed:0d:d6:72:dc:65:a8:be:e4:d2:fd:03:71:68:11:20:
f9:bd:cf:b1:21:2e:90:66:14:ee:b5:14:19:5b:87:85:da:f3:
76:98:a8:d0:1e:93:83:22:44:de:81:e7:f8:e8:e4:a5:70:2d:
d2:f7:59:71:3d:68:37:37:65:9a:c6:30:12:52:06:1d:44:42:
5c:da:4c:80:7b:79:e6:fc:af:88:27:84:f6:59:5c:fe:35:d4:
fd:69:7e:4f:e5:74:5c:61:0a:6b:15:65:6b:6f:ca:54:58:1e:
04:13:91:41:32:b1:3c:08:f7:db:f5:ee:4c:92:59:44:b6:6a:
51:a0:d1:86:ae:7f:b1:73:76:a6:c0:d3:c9:3f:ef:b7:9e:5b:
49:b8:9d:85:fd:c3:15:28:91:11:df:ce:8f:83:5e:c2:c3:a8:
4a:1b:cc:25:6e:46:11:67:27:f4:a6:99:ea:7a:3f:fa:bc:13:
92:73:87:8a:8f:ef:19:a6:7f:0a:ea:58:96:b4:cb:ee:84:87:
10:86:8a:52:18:97:82:a9:95:60:7c:9d:71:59:ce:0c:af:83:
b5:74:01:79:b6:56:af:ce:de:de:85:55:28:79:35:70:1c:30:
a0:87:fb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:20 2026 by rpki-client