Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: DQXIVbrVHdTpXju9VnXSMkV4dWwkPG4sy+7uYmi3kMI=
Subject key identifier: EC:A3:6A:52:0C:EE:7F:BD:41:1A:57:A4:88:9F:52:69:FC:B2:41:63
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 019D270424F65E9A8FB9BF4C5055EE32FBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 126C
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: hCJOmgy2+Ak07Z/89Fz1hOKECDmna/r075dzComg5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:24:f6:5e:9a:8f:b9:bf:4c:50:55:ee:32:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=eca36a520cee7fbd411a57a4889f5269fcb24163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:c1:44:01:9b:9b:ef:1b:25:92:f5:f2:3b:
ed:24:3f:00:e3:89:22:01:17:05:60:34:a2:20:1b:
19:d4:99:5f:0e:f8:4a:84:61:c8:5b:66:65:27:45:
cc:6f:cf:c1:ad:07:af:77:87:f8:7d:82:d8:37:8c:
b1:25:f8:63:66:5d:7b:da:e7:1d:b8:67:14:30:b2:
80:1c:42:f9:5c:94:20:37:62:66:c0:90:fd:ea:46:
c2:0d:93:ff:23:16:cf:94:81:cf:d1:5a:e5:9c:4a:
70:cd:fe:b0:fd:56:c9:5a:c5:2f:a0:13:22:18:8c:
99:c2:47:80:b4:b4:1c:f7:54:1d:a6:f2:9d:8f:26:
c7:ca:7f:48:93:5d:c0:20:07:e4:55:0b:4f:47:7c:
6d:7f:ce:af:85:d0:e0:2f:94:ef:a2:9b:20:b1:06:
d1:11:b8:57:be:a7:4a:17:3c:08:03:a8:64:76:fa:
a1:85:6c:48:bb:04:ae:dc:64:b4:fc:dc:ed:70:ee:
7d:39:3c:d1:39:ac:34:b4:46:b6:38:d0:14:69:79:
cc:6c:35:2c:75:3a:82:c5:02:f6:4d:8f:54:f2:32:
bc:09:a2:90:46:42:1f:df:b0:50:12:04:c5:34:fd:
bd:af:8d:67:78:ad:b0:09:21:cd:5b:61:42:f3:46:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:6A:52:0C:EE:7F:BD:41:1A:57:A4:88:9F:52:69:FC:B2:41:63
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:49:26:ee:93:1a:27:10:2d:72:0c:f0:7c:36:4d:6e:6f:9b:
22:37:7b:39:82:47:4e:ab:b6:9c:60:e7:a6:fe:dc:22:aa:d2:
d2:70:54:2b:3b:3b:0e:07:0a:b0:d5:95:53:df:a2:30:62:c6:
45:9e:4a:78:72:85:3e:76:f4:85:84:8d:6f:70:af:f9:21:fe:
98:61:d4:43:2a:4c:18:ea:38:cf:b1:65:7e:13:57:bd:8d:30:
a1:5e:05:c7:b6:ac:bd:cf:0e:34:41:db:5b:29:2e:a8:1c:2f:
82:ba:83:b5:6c:3d:b6:d5:88:8b:25:92:1b:6d:cb:4c:1e:0c:
ee:6f:16:21:d8:75:20:21:de:82:dc:1d:12:24:6a:e9:e8:3f:
ba:5f:d6:e5:c8:9d:1c:1e:fa:2f:4d:84:4b:c9:b5:0b:f9:00:
4e:e5:c4:56:75:4d:6b:1c:44:6a:be:f1:e2:07:59:92:91:14:
45:bb:11:54:b7:c8:41:52:a0:eb:56:58:15:80:0e:10:3b:2d:
a2:64:80:25:e1:d0:68:3a:99:03:2a:e7:60:0d:6d:ef:22:e5:
43:f6:11:1b:87:ec:99:c0:25:cb:c1:8f:12:c8:9a:88:9b:82:
0e:34:85:bd:17:53:53:11:a0:9d:f1:0a:3d:86:45:73:f7:ce:
b9:7f:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:10 2026 by rpki-client