Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
File: uji5p2P2XAJ6o92th8GI2nikvZc.mft (raw, json)
Hash identifier: 61L6zLCc9ymZjpEfMA09Qp7yuzB/vHgNHz0zlex6s8g=
Subject key identifier: F5:8F:82:DC:39:B9:F5:B3:47:4F:AB:14:FD:2B:74:ED:99:CE:1E:29
Authority key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Certificate issuer: /CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Certificate serial: 019D2771C361A2D8ADA9012EE7A8933177A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:00 +0000
Manifest this update: Thu 26 Mar 2026 00:01:00 +0000
Manifest next update: Fri 27 Mar 2026 00:01:00 +0000
Files and hashes: 1: uji5p2P2XAJ6o92th8GI2nikvZc.crl (hash: cs/Jmox1t0kQMqoVnkDgYBRwWFaE4gA87YK23qT3DNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c3:61:a2:d8:ad:a9:01:2e:e7:a8:93:31:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Validity
Not Before: Mar 26 00:01:00 2026 GMT
Not After : Mar 27 00:01:00 2026 GMT
Subject: CN=f58f82dc39b9f5b3474fab14fd2b74ed99ce1e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:25:79:ae:40:54:ca:84:73:a7:13:6e:b1:
fa:9c:10:15:06:68:5d:c4:ba:68:b3:50:7a:e2:d0:
d6:cb:40:11:f0:a2:ef:b8:6d:78:16:19:40:9e:7d:
a1:5d:11:8e:33:71:3c:ca:27:40:66:1b:60:e2:6c:
42:fe:e8:da:ad:a7:74:a0:0f:66:5b:0d:a5:bd:5c:
3a:e5:49:c7:04:80:4f:b7:7d:af:87:2b:4a:87:3b:
b7:f6:53:79:21:4d:af:a4:21:d6:c5:08:52:b7:98:
c1:1d:2f:c9:d5:2b:d0:bd:b9:f6:3d:ae:0c:d6:82:
7b:e3:da:85:c4:ed:e6:ae:a0:df:61:8c:51:a9:40:
20:1a:50:ba:c9:c7:6e:ed:02:fa:63:85:08:5f:7a:
9c:c7:e5:7b:95:07:79:e1:89:15:76:60:66:9d:9f:
e9:c8:bb:51:7e:6c:43:33:cf:10:ec:eb:3d:2d:1d:
6e:f9:7f:43:46:12:ed:af:02:be:57:48:26:be:47:
38:52:2f:67:ea:1f:a5:59:f3:93:4c:2f:45:5c:0d:
1f:f8:82:22:89:80:f1:d0:f1:94:ab:28:7c:f9:24:
81:d7:01:b6:dd:33:06:76:7b:7a:16:83:fd:63:63:
e3:8f:b3:1f:0f:c7:29:cc:6e:ed:7c:0b:de:9b:aa:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:82:DC:39:B9:F5:B3:47:4F:AB:14:FD:2B:74:ED:99:CE:1E:29
X509v3 Authority Key Identifier:
keyid:BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6c:7c:6c:79:3e:4d:e0:e2:4f:0e:51:32:06:04:ce:4b:c8:
a4:36:05:ad:09:34:63:03:4c:01:77:ac:19:ae:48:9d:74:3e:
6c:d7:8b:f9:bb:1d:2c:b6:55:89:a7:01:e5:e3:36:3f:64:08:
87:a2:d7:14:12:e5:8f:9d:1a:64:02:72:11:13:cf:64:2d:3a:
11:92:ab:21:e7:e3:87:83:ba:1d:6e:a3:94:f0:93:0f:2a:45:
86:b2:8d:d0:f8:12:fa:d9:39:80:f8:ca:bc:9e:ad:63:78:96:
87:05:ce:6e:ec:81:d3:77:d9:45:19:60:dd:dd:7b:ad:1c:e4:
98:53:de:62:03:37:eb:6f:77:4b:c8:22:ed:5d:4a:48:0d:7a:
4d:f0:0b:6e:b7:ac:88:db:b5:01:d8:8b:70:d6:12:dd:fd:da:
63:c2:e0:24:81:9e:87:d6:46:b9:d7:20:32:9f:41:f0:c4:28:
a9:02:f4:e9:92:4b:1f:15:da:e4:e8:b1:0e:1f:78:e1:da:66:
41:14:a1:a1:dc:56:be:ec:7a:b4:a2:23:d1:7a:31:43:e6:ee:
04:13:7a:87:03:2d:a1:1e:f0:b1:f7:38:40:a9:34:06:9e:42:
3f:30:5c:8b:6e:53:3b:a4:bd:58:39:da:14:19:f3:a8:32:1d:
20:d8:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:18 2026 by rpki-client