Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json)
Hash identifier: YZUDr1UZvVlO9oZmKsc1zVdK3oddcfcsxH1bhElUW9Y=
Subject key identifier: D7:63:24:B2:CF:3C:7C:4F:96:00:EF:66:C4:FC:AF:DD:B7:ED:8C:0F
Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Certificate serial: 019D270480A09091DBB6A9E7C4517A4DE3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
Manifest number: 0D92
Signing time: Wed 25 Mar 2026 22:01:39 +0000
Manifest this update: Wed 25 Mar 2026 22:01:39 +0000
Manifest next update: Thu 26 Mar 2026 22:01:39 +0000
Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: BqH3JOy/Mdvw3Hj+ib9TbfgiMIro+HCqKGuBGXoLJxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:80:a0:90:91:db:b6:a9:e7:c4:51:7a:4d:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9
Validity
Not Before: Mar 25 22:01:39 2026 GMT
Not After : Mar 26 22:01:39 2026 GMT
Subject: CN=d76324b2cf3c7c4f9600ef66c4fcafddb7ed8c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:13:61:fb:f2:c8:b0:6b:34:e0:23:cd:0f:
eb:be:e2:6a:c3:b4:ea:9f:6e:b2:02:2d:dc:16:c5:
40:e0:e1:e0:3f:39:ba:a1:06:12:ce:26:50:b7:03:
17:88:4c:2b:6f:a1:7e:3a:2f:5c:60:83:86:7f:74:
e7:96:50:6d:17:f7:ea:41:d9:b1:a2:6a:78:4e:30:
ba:4a:99:cc:35:d8:3a:da:26:e8:37:2d:2a:f7:74:
ca:a9:09:04:1b:81:35:91:ac:c7:d0:34:8a:89:00:
44:b9:48:f0:25:f0:9c:aa:15:d6:cb:04:70:a6:28:
d7:71:86:18:cd:1c:ad:79:73:eb:e2:3d:fe:22:11:
76:fb:10:1e:16:bc:40:9e:7e:6a:4d:74:56:da:0a:
79:f1:9f:0e:0e:92:49:1c:bf:30:1d:87:a5:42:18:
75:ae:9b:9f:e2:23:39:f4:61:2e:8d:93:e3:c3:ee:
50:35:62:12:df:3a:41:10:63:a5:4f:35:9d:fb:c3:
7a:56:65:a2:0d:4a:77:f2:54:79:42:09:43:b5:fa:
8a:69:3a:e0:f9:b3:1e:34:5f:97:68:e3:e9:17:0a:
84:f0:2b:ee:ca:dd:8e:53:2a:e5:67:35:28:62:45:
ec:d3:74:8a:b1:d0:57:48:8c:61:92:d1:eb:af:65:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:63:24:B2:CF:3C:7C:4F:96:00:EF:66:C4:FC:AF:DD:B7:ED:8C:0F
X509v3 Authority Key Identifier:
keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:cc:d8:da:f7:fc:78:f5:10:ca:64:45:a9:ab:7c:e3:19:
b4:57:f7:b7:28:b1:1f:f0:67:6e:2f:0d:b4:7e:9c:34:75:97:
27:dd:00:d3:b4:b2:e8:7c:78:e3:a1:78:4c:7a:5c:db:1b:84:
0b:a5:b9:4e:db:80:fe:72:2a:db:8a:93:f3:4a:05:a8:8c:d6:
63:ef:95:62:40:d8:97:53:17:21:d3:13:ed:28:c4:02:36:cf:
40:68:44:8f:69:30:6d:3c:44:0a:58:bc:ca:0b:11:33:ec:a3:
1e:92:15:2f:72:75:3e:05:56:fb:42:0e:5a:6d:0f:24:15:df:
0c:55:00:bd:c9:cb:d4:d4:28:e4:78:33:d3:80:9b:05:9b:47:
94:d8:aa:e9:20:a5:83:35:41:bc:9c:4c:8e:86:95:e5:e6:90:
e6:67:4e:9a:76:38:1c:9d:5f:17:ad:be:1c:14:09:26:35:a2:
c8:85:50:0e:48:63:b4:97:fa:35:82:0c:ef:da:3b:c5:05:c1:
c4:47:15:7e:e9:cb:8d:18:7b:85:3f:3b:5a:b8:f0:45:bd:b4:
3f:05:3b:64:dc:b9:aa:23:d2:fc:10:8f:41:25:e3:0d:5e:a3:
f7:df:01:c5:b3:37:28:32:6f:80:79:53:d8:d2:11:09:fd:45:
d7:b0:a9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:45 2026 by rpki-client