Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: lFPHx+aZ4XVcxsy4dDKAuGxkUo2q43SMgNBXepLrpZ0=
Subject key identifier: 83:94:3B:2F:E4:7C:A0:D7:02:FC:51:CB:56:CB:27:23:F6:75:42:3C
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 019D28BB37C2AABBDC3295512F63DADBD456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 02B2
Signing time: Thu 26 Mar 2026 06:00:51 +0000
Manifest this update: Thu 26 Mar 2026 06:00:51 +0000
Manifest next update: Fri 27 Mar 2026 06:00:51 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: 7ak2WgwhXgv8gMN3h+d2+gRikc/wTaZvd4HSuJ0F2qY=)
2: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (hash: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:37:c2:aa:bb:dc:32:95:51:2f:63:da:db:d4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Mar 26 06:00:51 2026 GMT
Not After : Mar 27 06:00:51 2026 GMT
Subject: CN=83943b2fe47ca0d702fc51cb56cb2723f675423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:f5:67:ba:ea:6b:2e:70:52:8d:a8:d6:89:
43:d9:b8:4e:20:8e:2d:6e:63:2d:15:80:86:74:7f:
5e:f5:60:50:5a:bb:1e:8f:37:fe:d7:36:34:17:ad:
5a:11:10:05:b8:d7:f6:be:ad:3a:c5:0d:23:ab:20:
2f:06:ec:77:85:76:7f:c0:9d:30:f7:c0:82:44:cf:
68:16:5d:65:d6:ac:fc:84:89:bf:23:ac:40:9e:c5:
58:6c:b0:85:72:6d:d0:b9:69:66:eb:8a:f0:22:dd:
19:e4:7e:4e:d9:b8:53:8e:2a:95:39:ef:7f:ff:5e:
34:fe:d4:21:e2:9b:51:bc:78:67:5a:c1:d3:c3:8b:
19:71:33:e3:9e:ef:c1:23:44:69:3f:96:93:ca:70:
71:17:f4:35:18:bb:b7:90:95:68:7f:12:21:54:49:
28:b0:8a:7b:d7:72:26:62:d9:a1:9c:fc:38:24:ce:
f2:8c:80:25:d5:7d:a3:46:b4:d7:e9:60:92:64:de:
0f:e5:3e:b3:d0:d7:21:8e:95:3a:ca:9c:b6:02:68:
58:3e:82:2c:f1:3f:7a:f8:2d:f1:d4:3c:8f:42:fe:
02:02:7f:c4:1e:60:c7:8a:2a:88:7c:16:fa:dd:52:
c1:e2:e9:5a:bb:7f:31:4d:c5:1b:57:2b:5e:10:53:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:3B:2F:E4:7C:A0:D7:02:FC:51:CB:56:CB:27:23:F6:75:42:3C
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:38:e1:65:1c:94:17:dd:8b:f9:6a:5e:68:19:fa:bb:95:
9c:41:e0:52:c2:ee:85:70:55:9f:f7:9d:4b:48:c0:f4:21:51:
e7:e1:1b:50:e6:ee:d7:ae:e1:b6:73:57:5e:15:62:7f:d5:c6:
ee:15:71:3a:ca:26:ba:41:8b:cf:c5:9a:b3:89:b5:3c:c3:69:
ac:14:e9:70:65:a0:31:36:97:eb:0e:17:2c:94:0c:83:0d:6b:
96:ec:a4:4b:4a:d7:1e:2f:cb:04:38:ea:a2:eb:f9:a3:fa:82:
01:ab:eb:16:25:d7:43:cd:9f:7c:56:fb:aa:a4:55:cf:bb:c9:
4a:49:66:60:a6:dd:7c:fe:6b:57:c3:f2:28:0e:19:d0:8a:7e:
4b:82:fc:24:dd:b6:6d:69:9f:a7:ba:d0:d9:d3:66:bb:d2:86:
6a:f1:d0:7d:d7:7e:3e:f5:26:85:c6:e7:8c:a0:8a:f2:3c:45:
53:9f:1c:68:b1:70:1a:00:9c:ff:42:1a:62:31:dd:df:d3:bb:
59:8e:df:9e:43:f5:4f:52:d1:08:c6:ff:b5:9e:94:b3:58:77:
9d:74:d2:fd:83:29:80:96:6c:30:16:0f:c9:f8:82:8e:e5:c4:
c5:85:4f:2c:f3:3e:8d:30:08:91:30:e8:81:ed:54:07:2e:83:
39:14:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:16 2026 by rpki-client