Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: jMmXz1MxFo+GNofP4QMAL1pMukxdc7p/+5Fg6DHYbso=
Subject key identifier: 33:39:4F:5C:93:8D:B1:82:91:EF:C9:7B:29:4B:D4:10:B7:5A:C2:2E
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 019D2AE02CBBE6525A54F86B86027F48C11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 0AB0
Signing time: Thu 26 Mar 2026 16:00:27 +0000
Manifest this update: Thu 26 Mar 2026 16:00:27 +0000
Manifest next update: Fri 27 Mar 2026 16:00:27 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: FrPQMrXCTKb74kmt7LoEjYIrj6xJCeH5IRnZSAzJG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:2c:bb:e6:52:5a:54:f8:6b:86:02:7f:48:c1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: Mar 26 16:00:27 2026 GMT
Not After : Mar 27 16:00:27 2026 GMT
Subject: CN=33394f5c938db18291efc97b294bd410b75ac22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:ca:66:98:e9:8b:9a:ce:6c:2c:0c:ec:73:
35:90:69:9c:65:1c:b5:38:a5:14:91:51:9a:98:08:
0e:51:11:6e:e8:2b:a4:7b:1b:e2:10:76:73:c6:7e:
b7:b9:47:66:b4:bc:c7:e4:10:5b:63:f6:7b:31:64:
c1:40:2b:fd:98:3a:2d:75:c8:16:97:cd:8e:8a:ec:
24:35:ab:1b:16:36:91:3a:ec:fb:32:63:83:6e:8c:
5e:4d:f1:66:9a:5c:eb:13:fd:c2:46:b1:6c:a7:a2:
2c:ed:58:ea:79:58:e9:f2:1f:39:e1:5c:42:90:b3:
c9:22:60:44:b7:b9:13:ae:6a:d2:ad:19:31:f9:89:
eb:56:6f:f4:4b:68:6e:7c:7a:72:dc:cf:e3:e6:58:
6c:49:76:77:69:29:9b:64:c8:28:cf:19:63:b6:04:
46:e6:70:0d:e3:13:35:2a:7d:74:82:1f:96:f0:30:
92:2d:cd:d4:55:a4:f7:46:ac:27:09:bd:bf:3f:90:
d0:48:39:6f:8a:68:16:ab:7c:d8:97:05:96:81:eb:
e7:e3:85:5c:92:06:3d:0c:d0:6e:57:af:b7:47:11:
71:eb:53:3a:06:db:bc:f7:fb:69:c4:8f:6e:5b:ec:
37:4e:3c:3e:89:f8:f2:a2:f1:88:05:f0:c5:b4:03:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:4F:5C:93:8D:B1:82:91:EF:C9:7B:29:4B:D4:10:B7:5A:C2:2E
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ba:6e:e1:64:ed:30:4f:e2:37:09:10:15:b1:67:e7:35:fe:
01:2c:7e:fb:49:61:ba:aa:a0:de:c7:92:ff:28:57:fe:46:2f:
0b:63:0e:75:57:3f:bc:23:37:6b:64:8f:d3:f3:b2:01:d8:f9:
e7:44:05:3b:8a:05:5a:9f:12:b1:a2:9b:ae:6f:a2:44:01:68:
90:88:2b:6f:5e:a8:81:68:56:26:52:27:38:41:db:35:25:82:
63:04:a9:06:af:04:c0:4d:f1:66:5c:3d:5e:75:e0:cf:22:18:
0c:14:be:da:ac:80:bc:e2:1e:e2:d6:52:bc:55:c1:9d:e9:bf:
8c:f3:53:dd:3a:0f:6e:7b:62:ee:29:71:02:cf:79:f4:99:f7:
00:a8:14:8f:99:d3:6a:ed:44:65:cb:0f:06:16:c7:a5:0e:16:
ea:d3:e9:e7:6c:c4:7c:7b:10:b5:29:24:a0:ac:dc:54:32:c0:
af:85:7b:a5:16:da:84:9c:c0:59:b9:6a:5b:09:41:10:29:f2:
97:7f:53:18:5c:19:b0:37:d3:b5:be:55:0e:5a:f3:24:be:60:
78:5b:da:6e:5a:24:f4:c6:7c:30:b7:54:85:1b:ef:81:bf:e8:
a8:71:49:c9:ab:eb:8c:19:ff:bc:43:ca:87:f8:43:06:8b:7a:
73:66:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:18 2026 by rpki-client