Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
File: g-ULKlHI9a25N7IqkMcg9rBPKXM.mft (raw, json)
Hash identifier: 6VHlo2/17LGLLSdr03VZNCtCGZ6W1ArNd8KEieQjeZo=
Subject key identifier: 34:EE:5A:58:82:68:99:BA:EC:35:D0:3E:82:6E:76:01:DF:A8:DF:77
Authority key identifier: 83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
Certificate issuer: /CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Certificate serial: 019D3308757D7FF3A9F9EC43634C392BEB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
Manifest number: 169F
Signing time: Sat 28 Mar 2026 06:01:25 +0000
Manifest this update: Sat 28 Mar 2026 06:01:25 +0000
Manifest next update: Sun 29 Mar 2026 06:01:25 +0000
Files and hashes: 1: g-ULKlHI9a25N7IqkMcg9rBPKXM.crl (hash: bYUMmNPvcaIOGN81GFr1hmQy158leTMSBx0RwP6VKdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:75:7d:7f:f3:a9:f9:ec:43:63:4c:39:2b:eb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e50b2a51c8f5adb937b22a90c720f6b04f2973
Validity
Not Before: Mar 28 06:01:25 2026 GMT
Not After : Mar 29 06:01:25 2026 GMT
Subject: CN=34ee5a58826899baec35d03e826e7601dfa8df77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:22:d9:2c:9c:90:2c:5b:8b:61:55:59:df:
e1:20:9e:e2:a3:08:9d:65:83:13:13:a5:27:d3:4a:
ae:23:dc:92:4e:88:21:35:b2:df:76:cd:40:5c:36:
4e:91:3f:b1:bc:91:9b:8c:06:28:25:58:d5:bb:45:
ce:ad:46:9c:89:1c:75:94:d8:34:d0:f6:81:75:57:
38:a1:19:b5:c1:6a:58:c3:70:f5:e0:d9:bb:42:0e:
e3:45:fd:f3:f9:b1:f2:fd:ec:32:ee:05:86:45:f6:
97:1b:59:9e:30:45:16:ca:a1:54:fe:ba:f6:78:74:
79:32:5e:b2:8b:16:ad:ab:36:85:11:9f:74:51:ab:
eb:5a:67:4d:01:ae:c0:39:b7:ac:6b:1f:f2:84:fe:
8a:44:14:a7:64:cb:d9:9d:86:88:35:9a:fd:f1:1c:
db:2c:51:96:2f:95:71:ff:52:cd:da:f0:ad:13:5c:
c2:b5:84:1f:f7:2d:5e:3a:11:19:ee:52:4a:26:fd:
b5:78:cc:29:92:08:47:ee:29:db:45:dd:e9:0a:78:
71:5b:00:c8:ac:a3:1e:1e:a1:0c:7e:0a:e0:29:f3:
c0:33:c9:03:f7:c7:af:09:af:27:b3:ba:9f:9d:89:
06:90:6c:40:c9:c7:3d:4c:71:cb:ad:da:6e:2e:00:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:5A:58:82:68:99:BA:EC:35:D0:3E:82:6E:76:01:DF:A8:DF:77
X509v3 Authority Key Identifier:
keyid:83:E5:0B:2A:51:C8:F5:AD:B9:37:B2:2A:90:C7:20:F6:B0:4F:29:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ULKlHI9a25N7IqkMcg9rBPKXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c13029-7a0d-44b2-a37a-b839d9202106/1/g-ULKlHI9a25N7IqkMcg9rBPKXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:c0:97:56:9e:36:9e:a5:65:42:0c:a2:9f:16:75:49:b5:
35:01:1a:7f:b3:10:84:5b:2b:eb:a2:7e:1b:6c:6a:90:8c:cc:
f6:e5:a0:4c:37:e1:9f:5b:f2:f9:d1:31:7a:96:99:13:d2:0b:
9f:87:92:62:1f:f6:46:88:1c:d8:b8:e8:b1:12:af:47:5f:58:
e7:94:c8:73:ab:aa:f3:09:52:e3:78:d9:27:29:c9:82:50:f3:
fe:fc:e7:e6:f2:0e:e5:97:95:26:91:9b:93:5c:03:16:b5:1d:
3a:ff:1d:30:42:7c:bf:ec:71:38:04:d6:cd:8f:d5:e2:66:8f:
9a:cd:68:89:a5:d2:45:9c:bb:db:27:0e:e8:25:4e:f2:ca:63:
89:3d:cf:45:a4:d2:9f:5a:46:e7:f3:3c:82:05:45:c6:9c:c2:
03:44:54:cb:e1:32:01:7b:ec:15:a0:79:81:66:a6:29:df:03:
92:92:53:88:03:0f:f7:d5:0f:85:bc:2f:0b:b7:6d:c8:08:06:
3a:43:2b:cf:24:03:17:f6:7f:0e:10:b9:c1:16:1d:ea:cc:9f:
ae:66:60:b4:25:0a:bf:f9:92:72:6b:bc:6e:30:d3:a3:27:fd:
e6:17:9f:9d:85:8a:a0:33:8b:26:ac:8b:22:02:d1:d9:7c:9e:
2e:82:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:23 2026 by rpki-client