Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
File: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft (raw, json)
Hash identifier: pbkQXJcGB8IjOMbeByQv51IhPFyD4snNkTH8Gh+EfM0=
Subject key identifier: 4F:FB:8B:B8:7A:09:71:39:F8:21:0D:F3:47:6D:5B:74:D8:C3:20:C1
Authority key identifier: 53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
Certificate issuer: /CN=531484d0de039f665e1f92cab311cfebc592b7a7
Certificate serial: 019D2A049016535A8608B01DF585A949C8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
Manifest number: 029F
Signing time: Thu 26 Mar 2026 12:00:35 +0000
Manifest this update: Thu 26 Mar 2026 12:00:35 +0000
Manifest next update: Fri 27 Mar 2026 12:00:35 +0000
Files and hashes: 1: UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl (hash: eimfoe40xNj656E00lPiV2B1vYzW86bUxyD6K6FkUCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:90:16:53:5a:86:08:b0:1d:f5:85:a9:49:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531484d0de039f665e1f92cab311cfebc592b7a7
Validity
Not Before: Mar 26 12:00:35 2026 GMT
Not After : Mar 27 12:00:35 2026 GMT
Subject: CN=4ffb8bb87a097139f8210df3476d5b74d8c320c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:5f:ce:9f:f3:bf:e6:85:69:42:33:5b:6e:
18:5c:a0:37:d5:31:2c:a6:56:17:9b:58:7a:d9:e8:
d9:aa:c9:63:f7:43:2c:83:75:82:bd:0b:40:f0:e6:
cf:52:8d:fc:12:a5:18:8c:2a:7c:c3:c7:e9:15:a7:
cd:09:3b:08:9e:66:bd:c2:3a:14:0c:35:cc:15:eb:
65:87:64:68:17:ed:0d:ed:83:69:1d:f4:1a:9d:0c:
c8:d5:5d:c5:0b:0d:5b:24:03:f8:bb:87:d9:16:c0:
19:cd:a7:c6:d3:e6:36:01:b1:ab:3b:87:bf:40:bc:
6d:e3:c8:91:a5:b3:38:79:df:94:68:58:c8:0f:0d:
36:09:16:5c:86:da:5a:7c:6c:d3:11:ea:0a:b5:45:
34:77:63:3a:c5:2b:1a:d5:9b:54:1f:d8:06:1b:5c:
e9:a7:d9:fc:a9:ec:a9:19:6f:54:06:24:c5:c1:48:
8f:ea:e8:02:ab:f1:b5:1c:4a:c3:da:22:08:dd:e4:
48:5a:9a:bb:f0:ed:50:3d:bb:13:38:76:ba:11:a1:
10:a8:69:dc:3d:1c:81:a8:87:28:bb:6a:7b:0b:9f:
27:63:2b:a8:17:5e:ac:18:d7:ee:de:e9:2e:c4:d1:
9d:3d:2e:a5:0b:ee:2a:69:b4:79:7d:5f:4b:a2:53:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:8B:B8:7A:09:71:39:F8:21:0D:F3:47:6D:5B:74:D8:C3:20:C1
X509v3 Authority Key Identifier:
keyid:53:14:84:D0:DE:03:9F:66:5E:1F:92:CA:B3:11:CF:EB:C5:92:B7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d69f86-2558-4b2a-86db-93af2573022a/1/UxSE0N4Dn2ZeH5LKsxHP68WSt6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:9f:11:9e:ab:37:ea:8f:d8:77:77:d8:ed:5b:c9:93:a1:
e3:22:13:a9:17:5e:99:1f:05:c5:3e:ba:59:c5:89:4b:0f:f8:
e9:d9:29:24:f7:1e:d3:f0:45:59:ed:38:8c:f6:34:5b:91:4d:
e0:e2:88:2c:6e:31:bb:b7:39:49:ee:bb:65:90:de:be:8a:34:
3d:a5:75:30:b5:aa:5d:08:5d:df:11:b7:fa:c1:58:20:f9:75:
5b:a7:c8:fc:d2:3a:1f:b3:1f:68:7b:db:aa:27:35:77:f4:71:
95:78:7c:be:93:6e:48:49:fe:9d:e3:18:8c:dd:80:b9:29:99:
0e:45:98:3b:20:ea:9d:dd:ed:00:64:04:0c:ae:2e:f5:21:0b:
6d:4f:7d:00:bc:b2:18:44:bf:dd:ff:ed:9b:85:1c:90:31:31:
82:c4:6d:c5:67:7d:11:4b:bb:3c:26:dd:a8:8a:fc:c9:2b:65:
52:78:4c:7e:b6:d5:e3:95:b3:00:d1:e9:17:f8:0c:15:b5:3e:
84:e0:32:d5:b4:0d:40:72:02:f4:74:36:95:f6:35:3b:94:b6:
08:10:08:12:5e:1a:3c:33:3a:35:06:05:2d:96:aa:5b:e3:f9:
a1:4a:6c:c6:2f:fd:b3:ed:32:d2:2f:61:78:ae:35:b6:aa:c7:
5d:8b:7e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBJAWU1qGCLAd9YWpScjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTQ4NGQwZGUwMzlmNjY1ZTFmOTJjYWIzMTFjZmViYzU5
MmI3YTcwHhcNMjYwMzI2MTIwMDM1WhcNMjYwMzI3MTIwMDM1WjAzMTEwLwYDVQQD
Eyg0ZmZiOGJiODdhMDk3MTM5ZjgyMTBkZjM0NzZkNWI3NGQ4YzMyMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHFfzp/zv+aFaUIzW24YXKA31TEs
plYXm1h62ejZqslj90Msg3WCvQtA8ObPUo38EqUYjCp8w8fpFafNCTsInma9wjoU
DDXMFetlh2RoF+0N7YNpHfQanQzI1V3FCw1bJAP4u4fZFsAZzafG0+Y2AbGrO4e/
QLxt48iRpbM4ed+UaFjIDw02CRZchtpafGzTEeoKtUU0d2M6xSsa1ZtUH9gGG1zp
p9n8qeypGW9UBiTFwUiP6ugCq/G1HErD2iII3eRIWpq78O1QPbsTOHa6EaEQqGnc
PRyBqIcou2p7C58nYyuoF16sGNfu3ukuxNGdPS6lC+4qabR5fV9LolNbRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/7i7h6CXE5+CEN80dtW3TYwyDBMB8GA1UdIwQY
MBaAFFMUhNDeA59mXh+SyrMRz+vFkrenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGIt
OTNhZjI1NzMwMjJhLzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kNjlmODYtMjU1OC00YjJhLTg2ZGItOTNhZjI1NzMwMjJh
LzEvVXhTRTBONERuMlplSDVMS3N4SFA2OFdTdDZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxufEZ6r
N+qP2Hd32O1byZOh4yITqRdemR8FxT66WcWJSw/46dkpJPce0/BFWe04jPY0W5FN
4OKILG4xu7c5Se67ZZDevoo0PaV1MLWqXQhd3xG3+sFYIPl1W6fI/NI6H7MfaHvb
qic1d/RxlXh8vpNuSEn+neMYjN2AuSmZDkWYOyDqnd3tAGQEDK4u9SELbU99ALyy
GES/3f/tm4UckDExgsRtxWd9EUu7PCbdqIr8yStlUnhMfrbV45WzANHpF/gMFbU+
hOAy1bQNQHIC9HQ2lfY1O5S2CBAIEl4aPDM6NQYFLZaqW+P5oUpsxi/9s+0y0i9h
eK41tqrHXYt+hw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:28 2026 by rpki-client