Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
File: 0uJA6f1hIN658GzBmZoKUinhu_0.mft (raw, json)
Hash identifier: ASFDZkRLSw2EjE4JZ81J+6dY+AWzlxxVHoC0mwlSV/E=
Subject key identifier: BA:4D:5A:62:1C:D4:42:28:F9:9B:E4:11:DC:EC:FE:3F:A0:D0:93:74
Authority key identifier: D2:E2:40:E9:FD:61:20:DE:B9:F0:6C:C1:99:9A:0A:52:29:E1:BB:FD
Certificate issuer: /CN=d2e240e9fd6120deb9f06cc1999a0a5229e1bbfd
Certificate serial: 019D26CD54DF7384535E29E3115D56E409C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
Manifest number: D2
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: 0uJA6f1hIN658GzBmZoKUinhu_0.crl (hash: C/lDIGViulvsUQUAi9rqJsHh1Frmd9JMgvKP3C2rNbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:54:df:73:84:53:5e:29:e3:11:5d:56:e4:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e240e9fd6120deb9f06cc1999a0a5229e1bbfd
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=ba4d5a621cd44228f99be411dcecfe3fa0d09374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:b6:a1:e9:8d:e3:4e:ff:36:e0:79:5a:97:
75:f1:a6:2a:38:91:42:19:97:37:c5:a4:7e:8c:46:
69:4a:39:53:13:84:bc:12:06:ab:df:e6:6f:f6:84:
84:8e:5f:81:9b:fe:8f:cd:2b:a8:09:43:4e:10:be:
e0:a5:f0:ad:19:69:e9:14:61:9c:af:7b:9b:54:b1:
2f:5b:9c:a3:b4:a7:a0:3f:d1:45:17:1d:cd:93:fa:
5c:a0:61:f5:67:28:d7:20:4e:4d:5e:e8:7e:f8:5d:
df:de:b3:f7:5a:92:c9:6f:6e:e4:96:68:29:0a:7f:
36:9e:0a:2c:62:a5:19:e2:f5:98:9b:05:6e:59:d8:
e0:d2:9a:a5:71:99:4f:d8:51:a0:a0:e6:b2:5f:d6:
91:4c:48:00:bc:50:11:fa:49:32:82:e1:a6:31:92:
87:6a:25:15:af:c1:94:c7:66:91:9d:d3:62:2a:b5:
80:9c:9f:83:a6:71:8e:6f:45:85:07:eb:77:c6:19:
f5:23:bb:d8:8c:8f:c3:71:df:02:20:29:b9:fd:9d:
0e:25:fa:aa:42:06:f5:10:c8:76:c9:8a:03:88:33:
3f:e4:35:e3:d0:2c:25:74:3a:ca:b7:eb:0f:3a:5b:
9a:05:9f:a9:8b:71:34:ce:4b:62:32:5e:42:b2:7d:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:5A:62:1C:D4:42:28:F9:9B:E4:11:DC:EC:FE:3F:A0:D0:93:74
X509v3 Authority Key Identifier:
keyid:D2:E2:40:E9:FD:61:20:DE:B9:F0:6C:C1:99:9A:0A:52:29:E1:BB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uJA6f1hIN658GzBmZoKUinhu_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f9d39d-0c3e-48c7-ab0e-1134fdeb45b2/1/0uJA6f1hIN658GzBmZoKUinhu_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:b1:e9:48:70:ba:d6:75:3b:b0:02:39:98:bd:dc:6f:5f:
1c:af:c5:f1:8b:f8:82:ec:8a:13:91:77:f9:7e:57:70:5b:5b:
d5:b4:63:df:11:46:19:f8:5f:f7:a7:0d:65:f5:fb:43:c5:ec:
e9:01:e1:ec:74:87:97:ad:e7:91:0a:53:ed:d9:07:67:96:9a:
fc:d2:8c:41:7e:31:71:79:e1:8f:67:d3:3b:1e:a2:7b:c5:09:
ee:33:c0:3a:7e:37:07:c5:54:93:56:cc:29:38:d6:fa:90:0c:
1c:b4:99:4e:a0:d1:67:6c:3d:c1:9f:b6:8c:3e:57:84:fa:dc:
fd:d6:b8:ce:f9:85:49:a9:88:9b:69:12:c3:b6:75:74:2e:4b:
0d:26:92:3f:c3:ee:e8:ba:64:b6:ca:7d:61:03:e5:b6:24:53:
2f:ef:80:5d:d6:61:ed:fe:05:39:3e:38:8a:5a:81:74:13:80:
bd:18:2a:46:44:46:b6:7f:9f:fb:9a:ca:83:70:bc:66:81:a3:
0a:86:1c:ed:21:83:44:6b:5b:00:85:70:08:bd:48:97:d7:e4:
70:70:d9:cc:ef:f9:70:ba:2a:27:78:43:68:a3:e9:bd:7b:98:
ae:41:7e:30:c3:f2:71:31:ed:e3:35:f2:4d:b3:4a:67:9f:4e:
c7:64:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:30 2026 by rpki-client