Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: PhAp8SBPYHlPFCYTpySrckiSb/kJ1RWJOIH8mupicA0=
Subject key identifier: 72:31:64:EA:C2:E4:E0:94:7A:94:DC:D8:59:46:F8:44:23:C9:D1:52
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 019D284D61057F78FC43997332B7C5593A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0DA7
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: J09f8AU5QevWrKwUSZ24CXUTOzw0cJLm17uYJaBIbp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:61:05:7f:78:fc:43:99:73:32:b7:c5:59:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=723164eac2e4e0947a94dcd85946f84423c9d152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:9e:43:51:68:d0:b6:f3:8c:f3:1f:32:e8:
9b:d3:85:b5:a7:02:39:a3:ef:15:ca:ac:78:e9:c6:
05:9b:ff:2d:31:8d:e1:bf:d9:21:af:cf:f7:70:8b:
22:14:60:01:5d:06:3c:28:f3:91:01:b8:d1:99:7e:
11:ee:33:37:42:9d:39:2a:69:21:03:d7:a4:e2:9a:
0a:13:8f:30:7a:66:1e:32:d5:e8:9d:26:9a:a8:c8:
7b:ce:63:f7:b9:95:b9:f9:0e:ba:67:69:17:23:a4:
4b:02:da:0e:87:ac:29:b1:39:64:24:f0:1d:55:88:
94:a9:3a:bd:f5:f5:e8:f9:78:36:c4:2f:0c:f8:28:
80:64:a1:f7:48:9e:13:b9:ef:67:54:21:d8:e3:21:
06:8f:e8:3c:d2:fb:cd:5b:61:d3:e1:9a:f5:fb:dc:
f6:17:44:e4:73:cb:ae:5c:b6:5c:13:45:e3:14:05:
1e:50:0b:25:53:00:79:f4:ff:cd:84:d1:d2:cd:a2:
b4:e0:f2:88:85:c5:26:d6:c1:66:96:2b:96:b5:cf:
87:a7:01:84:8a:fb:64:9a:d0:fb:a0:ec:36:19:86:
31:8c:d3:a1:80:24:00:aa:2c:16:4c:87:82:c6:ea:
c5:d2:4c:32:84:e8:ba:e7:4e:b4:2d:a1:4f:21:59:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:64:EA:C2:E4:E0:94:7A:94:DC:D8:59:46:F8:44:23:C9:D1:52
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:08:81:83:3c:96:81:40:bd:16:42:dc:6a:80:98:70:21:
a4:21:1a:58:46:d3:01:22:f0:b7:68:c9:52:96:a1:11:92:10:
ed:a7:c6:d1:e1:52:bc:3e:ec:e4:b3:fe:61:8d:21:87:3d:35:
65:13:2c:e3:f6:50:b5:d2:3f:45:58:95:eb:4f:d5:30:a9:b6:
47:ac:18:e9:6a:1e:08:42:43:e5:a9:2c:29:d7:6c:ea:54:cc:
3c:12:5f:67:58:27:17:eb:d5:67:d3:d9:e9:12:4a:7b:58:d2:
41:72:cd:35:40:23:f7:8f:60:5b:f1:4c:52:30:32:92:fe:ec:
5f:d9:d2:20:e4:4e:26:4a:d0:7e:2e:cb:dd:e1:8f:97:2b:bd:
5f:8b:ae:df:31:93:02:9d:40:1d:bf:8f:97:e6:8a:89:0f:4f:
88:96:be:fd:a8:07:00:fc:69:93:84:c7:8b:7a:f0:73:8e:38:
01:a8:22:5b:4e:b4:be:39:2f:df:bd:37:36:be:60:66:80:30:
df:4a:29:db:33:42:06:77:a7:04:6d:95:18:d8:5a:b3:1d:19:
34:11:de:86:9b:bc:2a:0d:1e:19:45:a0:0a:62:36:8f:39:a3:
30:50:3e:f4:1b:a2:74:d1:64:f1:c2:ee:84:d3:e0:69:89:48:
6f:3a:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:07 2026 by rpki-client