Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
File: 04nufcekvqjSach0bP59NhmNIh4.mft (raw, json)
Hash identifier: uClEcn06UgCsBcLnOyUj2527JEl40skztw0yLTrTSbU=
Subject key identifier: AB:91:F1:DB:25:52:03:9E:2D:4B:08:90:8E:01:C2:5D:E8:87:99:12
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 01A0CE24839DA5B5022BDD92FCAE7D68285A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
Manifest number: 0299
Signing time: Wed 23 Sep 2026 12:01:34 +0000
Manifest this update: Wed 23 Sep 2026 12:01:34 +0000
Manifest next update: Thu 24 Sep 2026 12:01:34 +0000
Files and hashes: 1: 04nufcekvqjSach0bP59NhmNIh4.crl (hash: 6Z4FduDTqWGiocXIJ+5sYnmkJwAuHZ6YwfL2QKAwtnQ=)
2: uldmgPFlTuQeBt-ipePLSPYN-eI.asa (hash: kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=)
3: w_XEzdiU384GG3tWDIA3eH1I_FA.roa (hash: iki/QZU5ZHMk/ujCqXZUuFdao/uKQ75nWW/JWJw+O/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:83:9d:a5:b5:02:2b:dd:92:fc:ae:7d:68:28:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: Sep 23 12:01:34 2026 GMT
Not After : Sep 24 12:01:34 2026 GMT
Subject: CN=ab91f1db2552039e2d4b08908e01c25de8879912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:f4:02:2e:b9:0d:b3:ad:b2:7e:50:6e:53:
60:4d:b6:18:18:9b:e0:f2:b3:cf:f3:da:ec:15:a5:
c9:d7:cb:14:bc:78:45:8e:d0:a6:de:ba:0c:a4:ae:
50:65:3d:29:33:f4:08:5d:e8:be:4a:e5:cd:d1:25:
ab:31:ea:6c:e8:f5:ee:90:c6:7b:6d:c4:80:f0:4f:
13:ee:7a:09:54:d6:d3:1f:34:e4:6b:56:f1:06:60:
3c:54:81:fc:a2:48:26:25:8e:3d:39:e4:71:4b:c0:
3e:df:66:c9:d8:a8:e6:86:32:61:95:1c:b0:d6:92:
5b:ce:c5:4b:0a:62:ea:75:ce:bf:3c:c0:c3:f4:c5:
20:03:72:28:43:d1:87:dc:b4:cc:be:8c:da:03:99:
18:f5:fa:29:63:fe:7e:97:71:be:1c:7d:6a:ae:b2:
5a:2c:d3:1e:5c:e6:f3:46:6c:06:8f:ed:66:40:f7:
0c:6d:3e:bb:c3:fc:80:10:8b:41:00:2e:25:e4:f3:
c9:5d:da:a4:34:83:7d:1b:c3:e8:16:bd:11:4b:0c:
9a:ca:8a:14:69:fb:6b:3a:0f:2c:e5:fe:90:1e:a2:
a0:42:85:52:1d:17:f3:24:ac:87:1f:69:4f:7c:8b:
da:19:ec:20:a9:e3:6c:41:5b:88:bf:1b:24:e5:ea:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:F1:DB:25:52:03:9E:2D:4B:08:90:8E:01:C2:5D:E8:87:99:12
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:62:31:70:4f:fd:04:9c:c6:09:60:c8:63:c8:71:97:c9:
99:cf:d7:37:ac:d2:8c:4d:04:f3:6f:19:6c:6c:be:d0:99:52:
0d:4d:69:0a:74:5c:2c:32:db:8b:86:12:06:cf:4c:0c:9b:11:
f7:a8:f6:13:99:b5:31:62:21:a5:3f:45:6b:96:1b:9e:47:ba:
17:da:d3:1e:e7:46:c5:ed:c3:f6:db:af:ec:41:44:4c:dd:fa:
3b:9c:36:19:85:c7:89:a4:8c:83:a7:e5:e7:54:57:a4:be:9d:
ca:fa:9e:4f:05:a4:97:e5:4a:4c:1f:16:57:3e:19:49:09:04:
ce:87:a5:a4:db:dc:47:95:e2:ce:df:9b:d4:e4:77:19:23:7e:
c7:b4:46:a5:cf:ba:52:fc:2c:33:ab:0b:d8:fc:9e:1e:a5:b4:
17:a8:52:94:43:2b:19:c1:6d:fd:47:83:c2:25:3a:a1:80:a7:
19:63:6e:ef:64:f2:a8:ad:75:7f:48:bc:b0:29:7a:73:d3:99:
bb:a3:a3:d1:0e:74:16:85:02:c6:24:8a:d1:fc:65:5d:84:2b:
7a:62:c5:ad:27:2e:85:9c:8a:ff:1c:e7:6f:4d:e9:9c:85:a6:
a4:41:ab:33:c6:3c:22:47:7d:57:43:18:c3:f4:46:d9:85:bb:
e4:32:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:20:14 2026 by rpki-client