Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier: 9y7NAAA/IIVXEM6k/aV5S+5AxHEqHPhiNHpb0Sb2nh4=
Subject key identifier: ED:37:59:ED:AF:12:50:A6:38:1D:6F:46:A7:C4:B7:8C:3B:46:B2:84
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial: 019D28F25584144F820A754839774535F790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number: 0AC9
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: /JP6IobJWDtYQNVJG44phlBOF009nGetbaRd/6viLhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:55:84:14:4f:82:0a:75:48:39:77:45:35:f7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=ed3759edaf1250a6381d6f46a7c4b78c3b46b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:75:a9:c9:9d:03:13:4d:d6:f2:94:ec:29:
c5:47:12:f6:fa:f4:bd:56:f8:97:5f:78:41:8f:54:
e3:bc:60:73:5e:72:1d:b6:ba:eb:fb:91:23:38:5e:
86:10:04:3b:d1:9a:ee:9a:90:8a:67:fc:c3:28:02:
50:da:95:e8:a5:bd:6d:0f:bf:44:4f:a3:69:e7:6b:
a8:ef:0f:ce:f2:ad:fc:e2:6f:a1:18:04:0b:01:00:
3f:ae:82:30:5a:35:fe:85:a1:5d:ff:a5:52:71:e5:
0d:df:d2:fc:65:37:81:e8:a6:97:71:7a:52:9f:8a:
db:88:89:74:72:a2:cf:29:45:96:6d:3d:7c:43:43:
be:7e:57:27:ee:e1:be:d9:d3:a0:7c:83:79:bf:3f:
c7:54:3c:10:f7:ee:83:d0:5d:a5:de:6a:3f:89:03:
42:c0:9c:76:77:ba:3f:86:38:04:63:c7:5d:b1:b0:
43:0d:45:de:e0:cd:60:1b:27:5a:8f:f5:7f:92:2f:
02:e8:23:58:5c:cc:a4:8e:1c:9d:7e:3e:e8:c4:3e:
70:d7:b5:87:f4:2b:9c:ca:32:90:8d:8d:34:13:13:
a2:66:64:a7:19:38:93:b6:12:2b:5e:ba:d2:f2:ff:
c9:2f:2e:d1:e8:c9:97:74:8c:5a:a0:d4:d5:81:bd:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:37:59:ED:AF:12:50:A6:38:1D:6F:46:A7:C4:B7:8C:3B:46:B2:84
X509v3 Authority Key Identifier:
keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:89:1a:9c:7c:4e:5b:9d:2f:eb:fe:d3:f4:9e:c0:37:fc:b7:
1f:70:fe:86:04:a2:3b:f1:84:14:1f:9c:7a:c1:cd:67:12:b4:
fb:93:42:5e:7b:cf:cb:62:14:8a:b8:16:aa:a1:88:94:a5:c6:
76:58:b0:f0:89:fb:f2:98:03:23:4d:1d:b6:ba:bf:af:1a:82:
2c:64:1c:46:d5:51:47:f4:3d:48:df:85:91:05:89:53:ad:2c:
42:32:cb:87:ea:8b:1a:db:19:84:e7:ac:e4:91:00:a8:b7:76:
73:a8:35:80:81:8b:32:1f:9d:22:b4:53:d8:a7:80:ea:e9:89:
08:d9:8f:ca:c1:2d:8c:f3:18:ce:42:cc:18:54:23:95:c3:81:
0f:5a:13:1a:05:c7:c8:6d:e7:83:f4:04:eb:48:c8:8a:9b:9a:
70:40:a8:05:aa:c8:2d:f2:8d:a0:09:b0:96:57:38:e4:58:97:
0f:dd:fe:ef:4a:b9:4f:0a:3b:b5:4d:fa:c1:0e:ed:d8:22:1a:
f1:04:11:d3:29:1a:8a:15:13:d4:c3:50:ee:2c:c9:be:4c:b8:
0a:95:28:bb:f4:1b:e1:de:b9:7b:8c:20:29:a9:21:b4:56:2e:
5a:98:4c:bd:1c:6a:7e:0a:a7:b3:ae:7a:07:04:84:57:56:95:
9a:4d:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:58 2026 by rpki-client