Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: iICOaH+gHe/UJRgJ1sywurrDt3h5RmrfmVONDbK+7Ws=
Subject key identifier: 58:AD:D0:BD:64:9D:4F:A3:CE:81:06:E2:B1:36:99:08:86:59:78:6F
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 019D27045F9D99C2A59444703523B9AFB029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 1063
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: 2PVoPiHtV2u1al1u7H3bxf5wlU4iof6kCD+xl4SBp/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5f:9d:99:c2:a5:94:44:70:35:23:b9:af:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=58add0bd649d4fa3ce8106e2b13699088659786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:89:05:b8:df:e0:6d:c1:6e:f7:bb:0b:17:
5f:ff:c8:53:cb:13:b4:47:98:17:fd:3a:a2:ca:7a:
84:d9:df:0f:b2:db:71:9c:97:7e:0b:74:98:b9:98:
05:86:fd:50:6a:b3:64:ac:23:91:6d:73:0c:5b:03:
ee:27:cd:cf:5b:b6:07:5e:04:07:8d:03:9f:f8:16:
30:82:51:ae:70:e1:30:26:c5:5d:88:8a:a4:e4:14:
33:6a:06:2a:5d:db:9d:50:25:2f:fd:74:cc:ce:05:
18:5b:55:51:ef:b4:d5:3b:05:cc:ef:e2:70:a7:07:
59:f1:a0:4e:c9:6d:da:90:16:5d:37:54:e4:9e:60:
e0:58:00:89:c2:84:79:74:a5:14:2e:91:76:bd:6f:
8f:91:23:c9:25:da:7f:d8:cc:36:35:7a:ae:e7:53:
90:41:f2:b0:09:ba:0a:48:81:5e:71:a0:c1:6d:fe:
f2:6d:82:15:0e:ee:d6:a2:52:3b:0f:00:a9:bc:e3:
a6:09:33:86:40:3b:9e:fc:79:a5:47:06:db:c8:b6:
de:78:a3:6b:c8:1f:48:c8:03:47:7b:e6:94:81:40:
dd:12:7b:3e:42:87:ac:e0:23:8c:c2:20:7a:03:16:
93:3b:63:a5:c4:53:8e:8d:4f:bb:a8:13:21:ff:6a:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:D0:BD:64:9D:4F:A3:CE:81:06:E2:B1:36:99:08:86:59:78:6F
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:82:0a:74:cc:ca:da:2d:37:71:7e:16:0e:eb:2e:a3:d9:
86:9a:37:bf:9a:ab:ea:4e:12:a2:23:bd:47:73:37:50:18:5d:
77:e4:ac:7e:7d:78:a4:ba:eb:89:0f:53:28:7e:59:9a:73:62:
95:5c:9c:e4:39:c3:41:a8:a6:56:9b:97:2c:c6:b0:32:65:74:
62:ae:06:d6:d5:dd:da:25:66:fb:76:25:08:7f:f5:53:3c:a6:
3c:c6:85:0f:68:d9:c8:a4:30:31:45:95:fc:84:0a:2b:a9:a5:
91:9e:9c:c9:34:8f:db:47:df:45:e5:6c:71:85:50:98:17:0a:
29:ca:c2:03:c7:6b:cd:36:f9:02:b7:df:a1:6c:f8:84:93:4c:
4d:fe:aa:de:4f:28:e0:dd:f1:8d:92:41:77:99:ba:f2:07:b5:
df:bb:19:24:90:13:a2:16:71:30:08:50:be:a7:9b:04:b0:a5:
5e:ed:17:3e:10:73:b9:23:ed:c9:93:01:4e:f3:99:2c:31:5e:
7c:b6:54:51:5c:3c:25:93:9a:05:f1:75:7a:3a:2d:09:39:f1:
8e:17:47:5a:34:06:60:a5:e4:20:04:0e:6d:f4:4c:60:b2:b8:
19:d6:68:08:66:0a:81:19:e1:d3:8e:8c:33:d1:5a:cd:d7:7b:
18:ac:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:42 2026 by rpki-client