Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
File: Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft (raw, json)
Hash identifier: 0MPjZd25cMkacCcDY+9uTpZYjCEMVoH8Ouf7F2FasBA=
Subject key identifier: B1:BE:15:52:99:6F:A2:56:A0:2C:F8:3A:D3:81:86:A5:93:A9:D0:87
Authority key identifier: 53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
Certificate issuer: /CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Certificate serial: 019D2704797A156ABA092BBA63E832541BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl (hash: S0+ZpF9ntHEsnIIrcAGmC3Zp6MVZz+np7+9wcCMeCCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:79:7a:15:6a:ba:09:2b:ba:63:e8:32:54:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532e21c9df6d52fdac4ae3b0c873968ef09eb27c
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=b1be1552996fa256a02cf83ad38186a593a9d087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:83:c6:e2:8f:12:b7:a9:53:bc:1d:80:01:
0c:8a:14:fd:80:1f:85:44:f6:b6:e4:ee:b2:c4:2a:
c4:52:14:30:2e:fe:08:2d:26:0d:59:c0:8f:4a:99:
9a:4c:e9:f8:9c:6c:ed:e3:f6:9c:58:32:b4:8e:79:
a1:47:a0:fc:86:24:da:ba:fa:31:a3:2c:59:44:c6:
6a:3e:68:64:55:2b:f6:6e:ff:35:e0:54:7b:ca:ec:
4c:a6:b6:a3:44:2d:d2:d7:30:5f:3e:54:63:36:06:
e2:65:d2:ed:93:06:91:95:fe:36:ea:74:22:8f:bb:
95:97:1d:c8:a6:8e:95:23:dc:40:d9:cf:44:a9:0a:
c4:81:ff:e3:50:ca:2d:c8:a3:74:47:43:f1:4b:29:
85:d8:c2:5f:65:d8:81:36:d0:be:78:67:5e:9d:c1:
d3:39:6a:6d:4b:1b:e2:e6:ab:44:dd:50:b4:24:3e:
f9:4b:26:b2:4e:ea:f5:17:6c:82:ce:f2:2e:92:38:
30:64:74:ca:87:e3:ef:3f:cc:bc:5f:73:c6:6c:fe:
f7:2d:81:c8:d2:c7:cd:e1:f5:f7:e2:37:43:b7:41:
38:42:2f:44:9b:05:5f:ad:63:f4:b4:fd:db:67:44:
c4:3a:59:ed:ea:c9:76:53:95:d4:eb:73:9f:cd:7a:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:15:52:99:6F:A2:56:A0:2C:F8:3A:D3:81:86:A5:93:A9:D0:87
X509v3 Authority Key Identifier:
keyid:53:2E:21:C9:DF:6D:52:FD:AC:4A:E3:B0:C8:73:96:8E:F0:9E:B2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy4hyd9tUv2sSuOwyHOWjvCesnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3e6d35-df94-430b-a6cb-064e0b0eac3a/1/Uy4hyd9tUv2sSuOwyHOWjvCesnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:36:2c:76:b6:92:60:4e:7a:0a:be:e5:42:b4:7c:1e:c7:
09:17:2b:83:10:1d:63:a7:1a:f8:1f:4c:4e:94:f1:83:1f:a7:
ca:a7:eb:c9:77:68:99:72:89:4d:57:04:f0:7d:c9:0e:e1:df:
fc:e0:9e:99:2b:ea:7e:e6:7b:c6:27:9d:d5:91:6c:d2:51:1d:
91:bf:0b:63:5c:17:9e:9b:f1:89:e9:54:74:0f:03:68:40:45:
d7:7f:31:3e:fc:e8:09:a0:60:96:c9:58:de:e2:e0:48:de:47:
a4:93:8b:cb:38:f6:a6:54:f6:a9:4a:02:86:80:f7:c4:aa:8b:
58:51:a5:e1:1b:b6:6c:ac:cc:85:62:cb:66:b5:7c:3b:94:67:
95:3f:80:ee:b3:44:85:e8:9e:cd:10:cd:eb:10:ea:61:82:22:
a4:a0:bd:2d:11:0d:65:32:79:94:c9:2b:91:d4:e4:68:bf:f7:
94:fc:9e:86:7e:b6:12:46:da:b2:0a:ee:a2:b2:71:78:dc:d9:
63:eb:b2:b2:52:a8:e7:bc:e3:de:29:1d:8a:20:a6:2f:db:aa:
25:6c:ad:4e:3d:2e:57:e6:f0:a0:74:58:d3:30:1a:f7:2f:54:
2b:04:a8:dd:73:c2:7d:11:f5:1a:8e:eb:cf:4c:24:68:69:2a:
a2:f3:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:09 2026 by rpki-client