Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: 7hKOxGqNmuaIwajn9DuTlGkxznKQy28Bh5HxHR3IxUI=
Subject key identifier: DA:74:69:B2:AF:4D:8C:C3:50:EA:A8:CC:FD:01:55:6D:40:A1:5F:ED
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 019D296136177FFE8318B16A66BBD7BE50CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: 025E
Signing time: Thu 26 Mar 2026 09:02:09 +0000
Manifest this update: Thu 26 Mar 2026 09:02:09 +0000
Manifest next update: Fri 27 Mar 2026 09:02:09 +0000
Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: B0EMcEyTxsUelaJRkcpvLtPCyCyM/+YV14HaDy7RN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:36:17:7f:fe:83:18:b1:6a:66:bb:d7:be:50:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Mar 26 09:02:09 2026 GMT
Not After : Mar 27 09:02:09 2026 GMT
Subject: CN=da7469b2af4d8cc350eaa8ccfd01556d40a15fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:19:e0:4f:b3:19:92:f5:74:36:6b:8a:b7:
01:c6:3d:f7:10:89:89:04:da:dc:ba:8e:32:7c:69:
46:cb:b8:97:87:47:0b:9f:33:e6:5a:d4:e9:29:15:
6b:f6:3f:85:0e:0a:c4:e8:83:5c:18:47:d2:88:28:
e9:c5:29:28:0c:d8:48:92:88:7e:c5:13:44:cd:8c:
cc:da:78:75:00:3a:bd:77:91:43:84:78:cb:5e:74:
e5:d8:8a:2e:dc:c1:b7:64:f1:e4:20:44:af:1b:f1:
07:f1:df:82:1f:b8:52:93:9d:eb:43:ac:aa:35:af:
b4:5a:22:fe:5a:15:5c:ba:79:03:a1:f1:e9:9c:c4:
85:ff:55:34:7f:82:1b:e8:78:e8:de:06:bb:8f:c2:
6d:e7:78:35:f4:84:97:2d:89:7d:09:aa:1c:b8:85:
21:c5:8f:c5:c2:b0:2f:a2:28:85:58:46:d4:92:c7:
e2:a1:1c:1f:59:40:62:2f:eb:b3:ed:49:d6:c5:40:
8b:62:1e:09:01:b6:10:39:eb:0e:c1:b6:63:4e:a7:
59:a3:f8:e4:49:9e:84:6d:f3:bb:10:4d:5c:ab:74:
44:31:d6:e5:fe:fd:36:9c:0c:a5:6b:71:af:6d:51:
9a:db:88:56:91:6f:08:81:37:8c:1c:d8:fa:b0:d3:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:69:B2:AF:4D:8C:C3:50:EA:A8:CC:FD:01:55:6D:40:A1:5F:ED
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:70:4a:aa:65:a9:2e:e9:8e:a6:c9:50:8a:b2:03:9c:cb:
a9:f6:cc:e7:ed:87:7f:c1:52:fc:4a:0b:42:7a:fa:f5:47:69:
b6:93:c4:dc:60:0c:63:4c:40:0a:33:ba:14:96:9c:db:64:89:
88:1c:88:e1:4e:b4:8f:a2:29:3c:a4:b5:b8:3f:d3:dd:2f:1a:
24:67:4f:7c:83:d9:db:ab:f4:6e:df:83:4b:7e:ba:05:f3:4b:
97:6e:0f:52:92:4e:6e:74:85:94:97:27:fd:2d:90:0e:9a:80:
e3:ab:c6:6a:36:ef:1d:24:94:5f:e3:24:3c:16:c3:b0:ff:a6:
4f:08:bb:41:6e:21:64:1e:e0:13:a6:f6:a6:3e:23:cc:66:b6:
ae:20:77:2f:e6:8b:51:d8:02:0f:04:05:67:4d:5c:c3:08:62:
fc:f0:e8:0d:75:98:08:d2:c6:f8:f3:38:4e:d3:4f:16:e9:ce:
28:fd:bd:e3:64:5e:00:f1:97:34:bf:df:c2:a2:72:ff:42:31:
0a:84:07:3c:52:39:e8:b2:8a:25:2f:e3:70:57:9b:bd:46:3f:
90:0f:00:d5:5d:92:a6:38:e3:92:85:e6:5f:8e:c7:fd:e5:07:
18:d1:b4:dd:82:fe:a4:74:81:60:0c:92:1d:c2:37:85:a6:d0:
17:23:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:56 2026 by rpki-client