Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
File: UZxxlGfHXvlxe8YrftrpALovRiU.mft (raw, json)
Hash identifier: EEM0kFzpu7unpL2D2GJAhLlI/r0laM/tI5poZqcN69M=
Subject key identifier: DF:63:E5:FA:DF:9F:87:10:7A:DD:B0:A1:5E:B9:5F:56:62:B0:4B:BA
Authority key identifier: 51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
Certificate issuer: /CN=519c719467c75ef9717bc62b7edae900ba2f4625
Certificate serial: 019D270467C768C049E51E19166572D87886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
Manifest number: 02BC
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: UZxxlGfHXvlxe8YrftrpALovRiU.crl (hash: Nsr8vjZnTUL9TeFYK3z/oao44JPVa7HenvAF6rkgyHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:67:c7:68:c0:49:e5:1e:19:16:65:72:d8:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519c719467c75ef9717bc62b7edae900ba2f4625
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=df63e5fadf9f87107addb0a15eb95f5662b04bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:51:91:0d:79:22:6f:32:bf:f8:48:7f:b0:
6a:1a:2c:7d:59:1a:49:d2:54:71:db:95:4b:68:58:
c0:f7:08:2b:9b:50:5d:b8:b9:b8:70:d5:1b:79:75:
6f:f1:ff:0d:27:6f:b5:bc:d4:61:8f:a2:0d:8e:f7:
0c:18:ea:b9:2e:65:cf:d0:61:aa:5a:86:46:b4:4a:
ac:90:f7:60:3e:5b:4d:1d:bd:68:46:98:37:5a:f8:
78:15:f8:32:c0:2d:2c:b1:3e:9f:50:1a:aa:da:31:
2d:15:3e:1d:cc:d5:4d:c1:52:26:3b:6a:d6:5d:77:
ab:e5:fa:41:7a:71:88:50:6c:2b:08:7b:68:4e:80:
74:96:d8:0e:66:ba:a8:b7:b6:38:fa:c8:3b:3b:2f:
53:4d:ac:d9:0d:39:85:16:da:bb:bc:b0:47:e2:61:
7f:59:6f:50:cd:8b:c7:81:d9:93:e6:4b:ed:ce:14:
d4:19:6b:df:16:68:f0:a4:2d:d9:95:f3:a9:1a:6d:
75:6f:78:a5:96:c1:15:4f:fe:83:36:d9:b7:80:48:
85:4c:b7:90:da:ce:d2:a8:25:f7:a3:64:1f:48:4d:
3f:f8:82:36:16:f2:f1:c3:39:12:2b:63:78:99:29:
85:44:fd:6d:a6:4d:1e:0f:80:b2:9f:41:8f:b0:d5:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:63:E5:FA:DF:9F:87:10:7A:DD:B0:A1:5E:B9:5F:56:62:B0:4B:BA
X509v3 Authority Key Identifier:
keyid:51:9C:71:94:67:C7:5E:F9:71:7B:C6:2B:7E:DA:E9:00:BA:2F:46:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZxxlGfHXvlxe8YrftrpALovRiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ed209d-37d6-45e4-9ee1-e67e7759f9a0/1/UZxxlGfHXvlxe8YrftrpALovRiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:c8:75:54:e1:48:0b:c2:72:61:6c:02:ce:49:e3:88:c6:
2d:09:f5:ad:17:08:aa:5c:1d:e4:37:b0:91:c1:64:59:a5:12:
bd:77:16:5e:6d:a9:fe:4f:45:43:f3:69:bb:4a:eb:cd:09:04:
2d:86:1e:f1:6d:62:2e:65:08:ab:31:55:90:3c:7e:1a:d7:80:
6c:a9:e9:c6:86:ff:24:1b:6e:0a:29:43:46:ea:f0:26:1f:44:
3a:4c:7e:e2:d9:aa:e8:3c:cc:33:7d:01:73:2a:07:d3:03:38:
ee:96:5c:4b:24:0c:ff:07:51:dd:6f:09:15:cc:e7:a2:b4:88:
91:c6:bc:12:24:69:08:26:1b:48:8d:4c:69:3d:a7:85:5f:f5:
19:0e:d8:b7:dc:82:0b:a4:62:dc:4c:94:9f:26:df:ac:6d:f8:
58:ff:0d:1e:1b:af:44:8f:46:d3:a9:ec:a5:06:1f:17:c6:25:
71:22:af:00:36:6c:26:ee:e2:66:93:c5:d9:9a:e3:5f:ed:a8:
68:2d:3d:67:fc:71:10:b7:d1:ab:c2:4f:95:a3:31:87:73:97:
20:da:66:a9:2b:21:3c:e1:31:b2:9f:55:32:c6:53:41:89:5d:
f6:6a:8f:96:a4:e9:a5:17:5c:27:b3:e7:79:76:5b:56:c2:59:
29:ea:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:27 2026 by rpki-client