Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
File: uLhsyEeC6kEMbYfCzTv4agaqF7s.mft (raw, json)
Hash identifier: dIQXbG7NU99/H6tt2JEEn2QEazGWy5QVCQv4znVPbSw=
Subject key identifier: DF:EA:16:E1:92:CA:5F:0A:74:F9:CE:E9:32:A3:7C:45:19:95:0E:62
Authority key identifier: B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
Certificate issuer: /CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Certificate serial: 019D27A93AC9BCF265C819F9EDE56904B37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
Manifest number: 0F17
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: uLhsyEeC6kEMbYfCzTv4agaqF7s.crl (hash: u4HY3twmG0GthtLD5boAXXDWWh8TYoAkOqCNACyGF6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3a:c9:bc:f2:65:c8:19:f9:ed:e5:69:04:b3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b86cc84782ea410c6d87c2cd3bf86a06aa17bb
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=dfea16e192ca5f0a74f9cee932a37c4519950e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:99:25:42:6a:a2:00:45:0f:95:4a:83:55:c3:
07:bc:1a:27:67:9f:78:d6:59:61:1e:1c:33:70:13:
5f:e2:65:14:65:03:38:8c:af:57:d2:fe:a6:fa:d9:
02:1d:a7:c1:be:ba:c5:9d:1c:f8:78:4a:4f:13:c3:
8a:a9:3a:32:83:6c:86:8d:f1:d6:3b:e6:01:d4:00:
ca:3a:82:19:41:b8:6d:98:08:99:50:c2:c5:7a:63:
41:6a:58:3b:9a:ac:11:0d:f5:8f:79:ed:9a:6d:40:
2d:82:29:a2:14:ed:5e:8b:5f:e6:e7:e8:3b:ce:79:
91:06:c1:9e:07:ca:72:88:43:f3:26:74:dd:d2:9e:
0f:cb:cd:c4:ee:01:be:70:33:0e:92:4c:b8:1e:81:
6b:09:84:d6:e2:4f:84:4e:a1:b7:da:40:39:f2:6b:
bb:51:9b:a5:dd:8c:a5:8c:8e:0f:41:a5:61:c9:44:
a1:db:85:6a:cf:a4:92:cb:bb:38:9c:a5:df:35:6e:
10:09:ae:5a:95:43:2b:74:38:63:c8:91:94:10:8c:
60:8b:5c:9e:2e:fe:62:b5:f2:8e:bc:8d:af:12:89:
f8:a2:90:ee:21:12:30:87:27:92:84:fe:ed:54:16:
69:3f:d0:f1:d9:cf:f1:4d:c9:56:07:74:51:2a:f8:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:16:E1:92:CA:5F:0A:74:F9:CE:E9:32:A3:7C:45:19:95:0E:62
X509v3 Authority Key Identifier:
keyid:B8:B8:6C:C8:47:82:EA:41:0C:6D:87:C2:CD:3B:F8:6A:06:AA:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLhsyEeC6kEMbYfCzTv4agaqF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/62ad19-3e9f-47ec-9ee7-cf531ec230d8/1/uLhsyEeC6kEMbYfCzTv4agaqF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:f5:ef:4c:57:c4:ee:26:38:2f:dd:8b:29:8f:be:16:af:
87:66:5f:08:2a:76:5d:cf:c8:00:f8:1b:e7:c2:18:a0:fa:df:
06:2a:d1:49:69:bf:f3:ed:39:1e:b5:dc:3d:31:8b:ee:78:fb:
fd:9d:74:e1:47:a9:11:f5:0c:5b:4e:29:c6:93:95:25:31:d0:
0c:2c:77:bd:10:45:b9:66:6e:19:56:e9:dd:3c:47:58:ee:9b:
38:d5:f6:d1:39:ac:63:6e:37:60:5a:6d:57:12:f7:47:d2:a8:
7d:19:b2:3c:a8:cc:d4:b1:9b:1a:a8:5b:2a:72:ee:15:6f:16:
68:72:5c:68:f8:b7:d5:96:99:cb:a8:64:48:e0:bf:a2:0b:aa:
45:95:28:d9:48:81:20:54:85:5c:5a:3a:fc:f9:e8:1f:2a:6b:
ab:88:89:92:f2:7a:14:15:f6:5d:49:31:a1:ac:39:b0:d6:ac:
42:d2:62:92:07:b2:ea:22:ba:3b:2f:c9:7b:9c:e4:60:d4:6a:
5b:2d:5f:f3:c1:f6:28:70:fb:b1:72:2f:09:5a:20:54:53:4d:
29:77:53:27:10:0c:69:21:d1:07:19:ad:d7:73:43:7b:25:be:
45:56:35:35:3c:cd:e2:ac:fc:b0:c8:4f:5d:98:9f:fa:e0:86:
24:fd:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:43 2026 by rpki-client