Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
File: 0uJA6f1hIN658GzBmZoKUinhu_0.mft (raw, json)
Hash identifier: WcS7wMPq/1Fq3OsgffUrwf42MHhY/1Yv5lK6MgyjknM=
Subject key identifier: 3B:FA:E5:BA:9C:85:F4:85:9A:E3:26:F8:40:8C:72:27:C2:74:FC:57
Authority key identifier: D2:E2:40:E9:FD:61:20:DE:B9:F0:6C:C1:99:9A:0A:52:29:E1:BB:FD
Certificate issuer: /CN=d2e240e9fd6120deb9f06cc1999a0a5229e1bbfd
Certificate serial: 019E1FECAC8562DB9A7293FD127FC2D52644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
Manifest number: 0153
Signing time: Wed 13 May 2026 06:01:04 +0000
Manifest this update: Wed 13 May 2026 06:01:04 +0000
Manifest next update: Thu 14 May 2026 06:01:04 +0000
Files and hashes: 1: 0uJA6f1hIN658GzBmZoKUinhu_0.crl (hash: 1GE86htVqITf5otrmPjDIJCd4A2ng897H6y1oaJ7zDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:ac:85:62:db:9a:72:93:fd:12:7f:c2:d5:26:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e240e9fd6120deb9f06cc1999a0a5229e1bbfd
Validity
Not Before: May 13 06:01:04 2026 GMT
Not After : May 14 06:01:04 2026 GMT
Subject: CN=3bfae5ba9c85f4859ae326f8408c7227c274fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:7c:b0:e8:7e:2b:c9:a9:ee:66:d2:8b:00:
97:4e:54:0c:e7:31:ef:26:a4:7a:8b:19:99:fa:55:
ca:38:06:f7:e6:4c:5e:81:af:a0:1e:65:eb:a2:a1:
29:4b:8a:71:22:6b:36:cd:3f:7e:af:2a:2c:e1:cb:
d6:cf:f5:af:47:49:d7:0d:92:e5:b5:ce:49:d8:fb:
e2:7a:5e:f1:64:11:cb:67:7e:e3:2b:54:53:56:3e:
f4:79:34:84:7e:3a:eb:98:89:72:93:42:8c:5e:64:
86:08:fe:df:29:c0:64:5d:f7:df:f6:1d:fb:69:19:
ef:bb:1d:22:85:0d:96:88:01:04:6e:eb:95:1d:1f:
48:7f:94:a5:73:d2:f0:50:0c:55:9f:bd:2d:89:34:
9f:0f:4e:2f:c1:5f:af:fc:34:de:b2:44:7c:e6:f0:
88:0a:9a:ab:89:67:68:98:66:48:53:51:ba:46:d0:
a8:9c:fc:3c:f0:d7:40:b5:fd:fc:58:8c:67:1a:0c:
7f:fc:51:d0:b6:ef:8f:96:a9:ff:8d:4c:8d:fc:24:
3e:b2:da:ff:22:b0:ab:b6:de:b7:e9:94:f2:c1:9f:
53:d2:9b:e7:52:0a:ac:1f:4e:66:33:f1:18:47:ca:
e7:8e:a0:62:45:f4:74:66:6a:de:d4:40:11:14:4c:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FA:E5:BA:9C:85:F4:85:9A:E3:26:F8:40:8C:72:27:C2:74:FC:57
X509v3 Authority Key Identifier:
keyid:D2:E2:40:E9:FD:61:20:DE:B9:F0:6C:C1:99:9A:0A:52:29:E1:BB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:ff:66:ab:e7:a9:2e:f8:a9:13:b0:88:2f:ea:68:0a:d0:
f9:fc:2e:1c:e6:e7:4c:96:d7:e1:18:f4:ee:0e:38:4a:99:17:
68:bd:29:ba:ea:4c:04:fe:29:c7:79:c5:c0:f0:45:4d:e8:cf:
bc:29:3c:64:f3:90:ec:d5:91:a2:bc:af:87:fc:ff:74:04:de:
4e:2c:c2:7f:d6:90:05:d9:f9:f4:c3:a2:a9:f4:3d:93:9a:fd:
70:e6:44:44:28:d8:12:e7:08:88:4a:2e:d0:bd:60:e4:f7:02:
87:0c:19:3b:bd:18:b5:45:d6:c8:89:93:ee:1b:93:9e:d5:74:
b8:9d:46:4d:5f:58:23:93:44:3f:86:ac:2a:80:79:19:37:a4:
7a:6b:50:2a:b3:52:14:85:34:5a:ff:af:13:00:58:f5:2f:1e:
c0:aa:ab:ab:b7:82:75:f2:34:50:6f:fa:d5:94:3a:75:41:7e:
e3:bf:ba:47:11:36:67:e8:71:9e:35:10:93:85:3c:3a:10:3a:
f7:4a:33:7e:76:6d:ff:27:ec:8d:00:b4:6d:c1:b7:08:c3:7d:
f9:e8:ab:2c:f5:9b:ac:b1:ff:5c:15:b0:89:02:48:3c:8a:24:
31:75:75:c7:96:0f:9a:27:1c:f2:e7:f1:80:96:c5:cb:43:b8:
d8:00:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:14 2026 by rpki-client