Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: oa+MV/FTa3RvDIHMTO/xufw4UHnNoCQKit70QBcMij8=
Subject key identifier: 05:3F:A9:DA:CB:4E:69:6E:D3:86:65:36:21:07:D4:86:53:49:EF:FB
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 019D2961509713696BA41E7CFA77C36D7D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: 0253
Signing time: Thu 26 Mar 2026 09:02:16 +0000
Manifest this update: Thu 26 Mar 2026 09:02:16 +0000
Manifest next update: Fri 27 Mar 2026 09:02:16 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: afTZvYHUa+QPDCIwpL9fCTK1R8wv4UANmO/6dAEZxoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:50:97:13:69:6b:a4:1e:7c:fa:77:c3:6d:7d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Mar 26 09:02:16 2026 GMT
Not After : Mar 27 09:02:16 2026 GMT
Subject: CN=053fa9dacb4e696ed38665362107d4865349effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:96:fb:f1:0f:cc:2e:91:a6:0a:e1:c6:30:
34:20:ef:2a:ea:28:5f:ed:62:c5:e0:69:6c:f2:30:
d6:b9:60:be:06:f6:a5:a4:6c:d3:88:37:52:70:2c:
77:85:cd:f4:c1:ba:c6:85:13:67:94:b2:86:2e:04:
65:a5:1a:2a:99:2a:4a:78:6a:17:4f:25:32:54:a3:
fa:80:30:57:a8:9c:eb:e8:fa:9c:8d:5a:bf:1d:a6:
d7:3d:b6:97:c8:ae:04:c5:91:35:e8:42:0e:48:24:
9b:87:52:6a:ef:12:3b:99:82:7e:89:77:f1:d8:e6:
91:7b:88:f5:18:04:c3:65:f3:8b:cb:b0:e8:10:da:
59:e4:82:f6:7e:60:3d:03:14:29:86:80:fc:73:ff:
e9:7a:83:c8:ad:61:eb:81:fe:01:e6:1b:b7:01:9a:
5e:f6:59:7f:f8:51:c3:8a:b0:a6:7a:e7:ac:0c:ff:
07:ec:0b:3f:34:da:fa:06:40:1e:f2:56:d4:4c:6f:
ad:e8:eb:b2:a7:03:b7:5f:87:97:6c:f0:94:d1:2c:
5e:19:1e:3f:76:ec:28:4f:ca:69:8c:fc:2a:8c:74:
8e:eb:ec:82:39:6d:24:68:14:82:79:1e:b6:ba:65:
5e:24:ad:8f:9c:b1:4b:ee:fb:6e:bf:5d:44:94:35:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:A9:DA:CB:4E:69:6E:D3:86:65:36:21:07:D4:86:53:49:EF:FB
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:76:b1:0c:d5:c7:ed:97:22:ed:c6:4c:5b:12:14:ab:04:91:
1a:f6:5f:0c:62:39:d7:c5:b4:35:83:e3:6e:16:d0:5f:2b:09:
bb:66:cd:ee:a8:15:fe:17:d9:bf:47:2c:83:1b:0d:52:96:91:
d8:ec:6a:b7:99:eb:f9:f7:ca:8e:a0:17:8e:ad:ab:5e:0a:2d:
33:6e:64:d9:c1:ce:d3:17:7d:20:d9:f4:8e:37:bb:60:3e:54:
64:06:9e:28:81:da:97:72:4f:83:dd:56:17:03:f7:13:7e:16:
38:7c:87:94:ad:ee:65:7f:90:01:f4:a9:57:f4:dd:a8:8d:0d:
41:93:a3:20:5f:68:8f:21:bd:93:ce:b0:40:f8:a5:85:31:c0:
63:fd:00:d6:e5:19:4b:d6:ea:76:cf:c6:b1:45:ae:0a:b3:d1:
c5:6c:49:4d:b8:36:51:d5:3c:42:49:52:9e:75:91:01:79:22:
55:77:1a:1f:bd:7e:26:a1:3a:53:e2:70:72:d8:28:d1:7b:e7:
80:5f:f9:42:a6:03:5a:c7:88:84:c2:0e:93:36:36:0c:c9:fb:
02:4f:05:e3:99:f0:83:fc:fd:35:e9:6f:46:ee:fb:c4:15:dc:
69:54:af:28:c2:f8:68:c7:92:a0:8c:44:19:79:62:14:58:da:
cb:80:39:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:30 2026 by rpki-client