Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: Uec9f/C89kZnUDOITunvZbAepogZIwAyWYxXOhgkFNI=
Subject key identifier: 41:9C:B8:E6:73:7C:42:6A:98:F9:4E:96:F0:CC:8F:54:19:BC:9F:77
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019D27A8ABBBCE18F567A87FF3E475CA6D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: PUKsSaboWM5l/UiGzA6JSnSDAbTRpRGzxprx2WI/SfU=)
3: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ab:bb:ce:18:f5:67:a8:7f:f3:e4:75:ca:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=419cb8e6737c426a98f94e96f0cc8f5419bc9f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:66:df:d4:7b:e6:9e:4b:8f:77:b9:26:c3:
b2:4c:86:f1:59:36:77:fd:01:79:63:80:48:10:cc:
fd:ac:bd:a8:56:7c:84:e0:6b:09:25:76:77:d5:8f:
00:2b:f3:f0:5f:8b:82:1b:29:18:d7:e9:46:ba:48:
e6:de:4b:30:a4:5c:8f:81:aa:3c:85:3c:1d:d2:ff:
b6:1b:6f:a3:21:53:b0:93:43:ba:9d:22:a6:cf:d0:
90:8b:65:30:07:f8:15:a0:51:23:c9:d4:f5:b2:bb:
c8:dd:82:c0:a3:cb:21:3a:f3:b5:57:73:0e:f9:f0:
7c:ef:5e:8e:8e:3e:ac:dc:f9:38:58:8f:cd:a9:45:
f4:c9:4e:85:af:22:a1:a2:e6:87:e1:2b:11:65:1c:
23:8c:91:3e:73:80:15:d3:67:f5:fa:5d:0b:d6:c7:
72:4f:1d:82:55:dc:dd:78:c4:17:c0:d5:32:b0:aa:
9c:a7:0b:16:62:be:b6:55:00:b1:09:59:18:60:d4:
c8:31:47:a2:19:b8:79:25:e5:04:20:c7:bf:f1:99:
80:86:67:b5:9b:43:fa:5f:6d:07:68:36:51:eb:83:
c9:fb:60:3b:a6:0d:77:1a:88:a5:87:19:ad:91:b4:
ab:c8:6b:f0:b3:b7:c7:3a:d9:0a:36:4f:97:be:54:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:B8:E6:73:7C:42:6A:98:F9:4E:96:F0:CC:8F:54:19:BC:9F:77
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:30:fa:39:ee:d7:8f:30:34:9a:6e:51:d4:c7:27:54:91:
61:55:85:a1:4e:b9:c0:17:54:80:68:1d:c7:16:ec:8d:d1:e7:
f1:44:c8:18:dd:d1:8c:30:4d:2d:31:d1:5e:f2:f9:1a:c0:75:
ac:c9:ff:29:cf:ac:d9:65:0d:85:9a:60:cc:6f:1a:80:24:58:
d5:68:a4:80:70:8b:ab:0a:33:01:2e:63:66:f2:45:4c:72:78:
8c:09:2b:56:73:1b:7d:3e:b3:38:18:2d:73:d4:14:41:99:bf:
bc:50:41:f9:88:1e:f0:d6:7d:ba:a0:bd:9f:9e:3d:9d:93:58:
75:a8:28:71:46:87:a5:37:e3:98:b4:da:2a:04:2f:36:78:37:
bb:67:49:74:d1:70:c2:9b:e3:c0:1d:f2:f9:32:1e:59:94:90:
b4:b9:41:37:92:7d:fb:96:eb:83:9c:0d:52:26:ca:ed:13:50:
95:9f:f2:f2:cf:75:f2:4d:12:eb:89:41:e1:c4:d8:99:17:36:
67:74:e9:50:e9:99:48:26:02:99:e2:af:62:b3:d7:41:32:c2:
4a:e1:cc:bf:e2:fc:9d:a7:d5:0d:aa:89:ed:03:ba:51:0b:f2:
ae:e5:df:cc:80:51:ae:bb:a6:14:51:c6:0a:9b:78:b6:06:42:
8a:5e:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:18 2026 by rpki-client