Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
File: uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft (raw, json)
Hash identifier: 5R5i9VHYWmZF4h8d8Y7iDbyCO547IIOMYybYYQ0j+o0=
Subject key identifier: 8B:CD:BB:3B:3B:D8:3A:9A:2B:35:CE:97:D4:95:4A:86:06:82:F7:8F
Authority key identifier: BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
Certificate issuer: /CN=ba268a6f131f23d67af831126523930bfee80f1b
Certificate serial: 019D2772AF82C5262459D49D924024682886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
Manifest number: 01C3
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl (hash: ZJDJ27KE6oU0arUah4HzK8ODvpDFBohiVL0amMRR15o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:af:82:c5:26:24:59:d4:9d:92:40:24:68:28:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba268a6f131f23d67af831126523930bfee80f1b
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=8bcdbb3b3bd83a9a2b35ce97d4954a860682f78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:3c:48:fa:c2:4e:46:15:04:bb:2d:8b:66:
63:b0:b0:a1:73:bd:92:d7:04:92:8d:84:e1:72:9a:
da:9d:0d:35:34:59:ed:ca:21:cc:33:11:a0:9c:c2:
c2:9d:2c:4b:e1:78:c0:b3:a5:13:39:fb:a2:d6:ef:
07:f9:29:a6:52:76:85:8a:34:ae:c3:9c:09:9e:c5:
89:41:a8:51:08:a3:9f:a9:e6:e9:0a:98:b5:79:25:
69:3a:dd:80:37:14:3f:bb:f0:4a:cf:96:08:dc:a4:
91:c1:ee:41:f1:22:ed:45:aa:75:17:d8:42:2a:e1:
39:c3:d3:bc:48:00:b5:5c:9b:5b:25:11:ca:99:cb:
62:33:5e:28:0b:d6:3c:b8:85:74:0a:2a:e1:c9:f7:
05:fc:76:14:20:2c:e2:e1:1a:77:1e:a2:ab:77:03:
0f:30:b0:ab:66:5b:5a:ae:8c:32:f1:c4:c0:84:57:
18:aa:c6:a1:95:8f:4f:ae:76:70:b8:2e:f6:02:e2:
58:09:ef:0b:50:19:5d:14:42:4a:3f:82:c4:5c:97:
16:c7:a6:4f:ce:a7:ab:f3:dc:f9:cb:62:b0:1f:e4:
0a:43:5d:8b:b5:de:2d:09:12:04:17:39:a8:be:4e:
b9:62:ee:a4:f8:ad:d5:29:52:60:ce:73:af:00:3b:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:BB:3B:3B:D8:3A:9A:2B:35:CE:97:D4:95:4A:86:06:82:F7:8F
X509v3 Authority Key Identifier:
keyid:BA:26:8A:6F:13:1F:23:D6:7A:F8:31:12:65:23:93:0B:FE:E8:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiaKbxMfI9Z6-DESZSOTC_7oDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ac0e71-2b19-4853-ae6c-159cead77275/1/uiaKbxMfI9Z6-DESZSOTC_7oDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:20:9c:d8:5e:11:16:d4:ed:56:a7:b3:80:fc:e8:01:72:
50:ad:58:82:c6:78:8a:f1:eb:90:44:c0:45:ec:2c:66:d7:b7:
47:e4:7f:66:76:2b:93:57:5a:1d:85:6b:b2:e5:c6:8e:1b:9e:
2b:d3:bf:c4:4f:7c:dc:e0:7b:d7:ce:66:96:60:65:96:c8:bf:
61:5f:f7:86:c6:d2:d7:da:ff:38:e8:8f:9a:01:45:7d:c1:42:
bb:a7:0d:9b:8d:0a:a8:21:0a:68:1e:c6:93:75:78:8b:73:38:
4d:c9:5a:84:77:1f:f3:8a:2f:74:bb:c0:b1:ae:b4:3d:1a:37:
af:35:ab:52:7b:e5:0d:73:b8:fd:0c:0d:78:18:e5:19:99:11:
a9:01:87:3f:de:76:c8:bc:af:b7:43:35:80:c2:b8:48:20:45:
ea:8c:a2:eb:dc:19:4f:71:5f:ce:b9:9e:80:48:0d:e2:b9:34:
19:0e:a5:8b:ef:5b:d2:ca:81:41:bd:6e:e1:e6:4e:4a:50:17:
0d:6b:89:4b:42:a1:97:19:cf:c2:e3:a0:2a:ed:9b:30:8d:a7:
70:00:c8:d9:15:47:d2:4d:0f:13:2d:e5:a0:08:22:98:b7:be:
4d:46:38:ef:94:cf:f4:3d:79:b4:e5:ac:ff:22:ae:72:44:c6:
b5:a2:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:50:48 2026 by rpki-client