Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft (raw, json)
Hash identifier: vZP6ZKyeED6RWdhIZ/iOM6kiaVNcsY6/KqqFUF4QmOc=
Subject key identifier: 65:E6:EE:FE:D0:64:B7:FC:0B:5A:88:0A:58:FC:35:A5:DF:4C:41:AA
Authority key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
Certificate issuer: /CN=b90907cee4fac50f3753622ad21a989ae7741c47
Certificate serial: 019D2583B830E971709C145F2642DD5E7303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
Manifest number: 1587
Signing time: Wed 25 Mar 2026 15:01:22 +0000
Manifest this update: Wed 25 Mar 2026 15:01:22 +0000
Manifest next update: Thu 26 Mar 2026 15:01:22 +0000
Files and hashes: 1: uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl (hash: BgdJqO4xPouI5o4p3CQ8FNdlwXXAznk2ALngnqqx6/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b8:30:e9:71:70:9c:14:5f:26:42:dd:5e:73:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90907cee4fac50f3753622ad21a989ae7741c47
Validity
Not Before: Mar 25 15:01:22 2026 GMT
Not After : Mar 26 15:01:22 2026 GMT
Subject: CN=65e6eefed064b7fc0b5a880a58fc35a5df4c41aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:ce:db:b4:39:2e:a8:27:dd:0b:a9:6a:cd:
4b:7e:a1:10:bc:72:c6:29:8d:07:d1:56:7d:d5:fe:
43:3c:f2:b6:ff:e3:6b:96:e5:a1:9c:73:73:46:eb:
a4:c6:12:bf:36:a4:af:8c:cf:61:7a:72:e0:d0:1e:
45:e1:cf:ad:f4:87:f9:3c:b6:99:bd:46:b1:68:0e:
4e:be:3b:ca:72:a4:e0:ac:6b:3a:4a:6b:de:fe:3c:
59:2a:e7:70:67:4f:6d:bb:eb:b4:6b:4a:73:2f:51:
14:ab:fe:42:54:be:73:b2:a5:d1:7a:cc:b2:a5:a8:
c4:91:6d:1c:4b:f9:27:b2:25:77:bf:fd:7d:9d:0e:
34:76:26:16:b0:a6:62:23:f2:b0:50:a3:fe:31:4d:
a9:19:0e:8e:ee:ff:30:7b:76:2b:48:d7:5a:34:96:
03:98:ea:ae:91:1e:a8:1b:00:ed:97:07:c0:8c:7b:
e7:12:5a:f6:a5:6f:87:52:17:1f:44:5f:ea:5e:89:
c3:25:14:8b:3b:79:03:27:39:84:e3:9b:37:26:2e:
a0:dc:29:5c:79:d6:54:ef:64:85:e6:58:50:67:a2:
34:ca:73:b8:63:cf:f9:b9:8f:c2:68:f5:8c:b1:3b:
53:99:a9:bc:64:53:34:c3:63:43:f3:b7:67:dc:f9:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:EE:FE:D0:64:B7:FC:0B:5A:88:0A:58:FC:35:A5:DF:4C:41:AA
X509v3 Authority Key Identifier:
keyid:B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:f6:90:5f:a5:07:9a:22:0b:08:fe:be:62:b5:41:07:0a:
94:35:b1:7a:09:49:f4:f1:79:e9:dd:8c:8c:6b:30:3f:67:7a:
61:45:f1:ef:d8:b4:39:b8:37:76:a1:bc:11:16:83:9b:5c:99:
f4:23:44:29:6f:b5:26:a9:92:46:01:af:25:55:d1:7a:b3:7f:
18:bb:7a:50:00:48:89:aa:e3:9b:3c:83:4c:17:fa:4c:21:33:
5d:4f:76:4a:40:18:d5:59:e4:23:f8:83:35:58:c0:c9:6b:15:
3b:ce:e6:dc:f0:dc:e1:96:ef:00:81:6a:6f:fb:ac:12:7d:ed:
37:93:72:e7:a7:53:e1:5c:16:0b:38:3e:f8:20:10:63:8d:c3:
68:5f:8a:8f:7f:ad:64:4c:96:ff:ed:fd:20:bb:5c:6a:b5:b5:
ef:e9:69:25:c2:c2:a9:12:4f:ed:0c:03:ac:a3:5c:1b:58:e6:
f8:58:7f:dc:79:99:b8:76:42:c7:2c:0b:52:5f:2f:5c:9e:a4:
45:00:b5:3b:96:88:e1:6f:cc:55:a1:94:b5:7c:e3:df:47:a8:
0f:bb:9f:2b:62:2c:8d:4f:c3:77:2f:1d:6a:04:6c:ec:38:aa:
1d:bf:ee:f9:35:3c:b1:2f:54:f6:be:85:62:8a:6d:c7:88:e3:
14:aa:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:36 2026 by rpki-client