Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: IVmDie0pLd+Qi/6Cq22MYbYqPG4GVSwBX6xopeI2/rI=
Subject key identifier: 49:BA:A6:16:8B:A8:B5:6D:A1:08:CF:4F:45:ED:E3:7A:EF:31:C9:6B
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 019D27A92A8863EC1DB07CF9FF1044EA8FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0F54
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: +KBodyyCwkiOpfct/ePbk08K/0yw8BTxmjV5RJCAhl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2a:88:63:ec:1d:b0:7c:f9:ff:10:44:ea:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=49baa6168ba8b56da108cf4f45ede37aef31c96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:d7:bf:3e:0b:16:6c:41:c2:39:1f:8d:c9:
68:f8:d5:7a:1a:43:81:30:a7:2b:27:03:88:98:44:
a1:66:c1:8a:20:37:d5:6f:f3:b9:ae:9c:ae:23:02:
d6:33:da:bd:86:b2:7a:08:c3:64:24:9c:de:18:2b:
8a:36:dd:0b:da:d2:73:9f:67:b7:9e:c3:70:1e:27:
ff:2d:17:6d:5a:c6:f5:57:84:60:d8:13:91:ad:fa:
55:b3:83:34:a8:59:8d:c4:91:9c:41:bc:4a:03:bd:
93:09:99:cf:ea:05:b3:70:bb:7e:04:98:fd:07:8d:
c2:2f:a1:c9:10:9f:f5:ba:90:cf:a1:5e:d4:d8:69:
1c:1e:0e:92:f8:3e:8a:80:d1:f7:4a:51:8f:42:21:
47:2d:2c:70:d4:b0:29:69:cc:3b:75:14:59:78:a4:
c6:b4:63:bf:c9:85:38:e6:c4:d8:09:c1:c4:38:cb:
e6:df:16:87:13:a6:42:ea:eb:dd:1b:40:17:a9:ca:
d6:44:63:65:3b:87:a3:4a:c2:c3:8f:64:3c:1d:40:
17:97:36:6e:93:2d:f6:f2:db:2f:22:4b:be:9f:87:
ce:b2:5f:e9:df:65:6c:a1:41:24:c4:42:a1:6e:11:
ce:f1:90:71:4c:b3:c4:0f:06:2f:2a:f2:0a:67:6a:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:A6:16:8B:A8:B5:6D:A1:08:CF:4F:45:ED:E3:7A:EF:31:C9:6B
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:d3:67:d1:c2:49:21:2d:32:56:7f:93:46:8f:b8:b2:46:
e7:d7:20:fd:0f:9b:38:b0:0f:9c:4b:8a:69:2d:37:93:77:e9:
9c:d0:d5:51:4b:50:a5:c1:9a:a5:8f:8a:eb:52:22:b9:52:4d:
db:1a:7d:d5:f9:50:11:28:c5:26:51:c8:3e:0a:3e:88:da:f2:
26:bc:e2:e4:55:c8:8f:9e:42:0b:69:1f:c1:45:12:96:12:cf:
39:35:23:3d:b5:49:a1:94:9d:0d:24:54:84:3e:4c:fb:5c:58:
23:34:46:1e:d7:77:e3:8b:3e:ec:58:d2:59:29:90:ab:a1:d4:
00:e5:85:57:0b:45:71:09:9c:a5:c6:2b:f1:e0:6c:a0:90:13:
c6:66:51:b0:79:ec:19:af:f5:22:9c:a2:69:56:b3:e8:38:ce:
c1:eb:88:18:19:23:00:6e:f3:5a:c0:76:35:9e:c7:65:cd:c4:
d0:6a:e3:19:01:3d:f0:77:2e:71:ea:ca:2d:a9:d3:26:92:af:
d9:b3:ab:96:fb:8c:6b:3a:f2:c7:03:77:4f:ff:a1:e5:8b:ce:
95:0c:85:f2:ba:4c:fc:c0:97:ad:c8:67:75:05:c8:29:a6:cb:
d1:a5:a2:c9:1c:57:4d:10:8c:31:06:29:a0:64:3d:9c:96:81:
a1:b8:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:50 2026 by rpki-client