Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
File: ujWrXugfdPzKSgwT6XLsHP6WeTs.mft (raw, json)
Hash identifier: cO8WdA5GEiW4gkWQbj7SSIQLBvhcA644k3O8xaTHA+Y=
Subject key identifier: 63:E1:B8:A8:AC:FA:9E:B7:25:60:66:35:02:EE:02:DE:A2:FB:B6:1C
Authority key identifier: BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
Certificate issuer: /CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Certificate serial: 019D27042C69BCCDE7659C914A8143FB096F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
Manifest number: 0B5D
Signing time: Wed 25 Mar 2026 22:01:18 +0000
Manifest this update: Wed 25 Mar 2026 22:01:18 +0000
Manifest next update: Thu 26 Mar 2026 22:01:18 +0000
Files and hashes: 1: ujWrXugfdPzKSgwT6XLsHP6WeTs.crl (hash: 0sS1yZpBRRzoCUx0q7wpabFLALULeHSLUfRWDIVlp5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2c:69:bc:cd:e7:65:9c:91:4a:81:43:fb:09:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba35ab5ee81f74fcca4a0c13e972ec1cfe96793b
Validity
Not Before: Mar 25 22:01:18 2026 GMT
Not After : Mar 26 22:01:18 2026 GMT
Subject: CN=63e1b8a8acfa9eb72560663502ee02dea2fbb61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:30:f1:2e:97:55:bf:26:7c:14:a2:be:d8:
8d:74:b8:3c:c3:24:4e:b4:1b:86:e3:ea:73:f4:91:
cd:0f:5a:c6:55:79:be:f2:ee:11:e4:0b:e2:b6:e6:
4b:38:7d:a1:ce:b9:48:81:2f:0e:5b:28:0f:1f:4a:
35:83:b4:14:46:ba:5b:ce:5c:3c:23:2d:00:9a:3a:
b4:4b:4d:f4:0f:0a:54:ca:e1:a7:35:53:52:e4:63:
7a:4d:aa:58:cd:a7:4b:db:fc:5e:33:33:c5:c1:3d:
f8:a2:06:fe:43:a9:ca:fc:d7:97:5f:99:a8:80:14:
97:d2:f6:db:c2:bf:02:23:48:af:34:7c:6a:6c:31:
af:72:d6:0a:fc:2c:42:f4:d6:0f:32:7a:36:ef:dc:
a2:10:98:64:c5:ba:6f:9e:86:c8:e2:24:b2:e8:9f:
bb:a2:fd:cd:4e:cc:6a:f2:03:97:68:5a:f7:61:83:
a1:ee:c4:b9:50:6c:11:5b:29:10:1c:1e:c3:9d:2a:
6d:d6:cd:e5:29:c0:eb:02:0b:17:af:76:98:4f:97:
dc:03:4f:e3:40:1d:81:78:27:35:a6:40:ee:d8:db:
65:46:96:8d:a9:aa:f3:88:24:6b:4c:3f:78:cd:75:
53:89:9e:bb:7d:45:0d:f0:37:b9:04:46:10:3b:42:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:B8:A8:AC:FA:9E:B7:25:60:66:35:02:EE:02:DE:A2:FB:B6:1C
X509v3 Authority Key Identifier:
keyid:BA:35:AB:5E:E8:1F:74:FC:CA:4A:0C:13:E9:72:EC:1C:FE:96:79:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujWrXugfdPzKSgwT6XLsHP6WeTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c0bd66-eed2-429f-a6c7-15efc6785b16/1/ujWrXugfdPzKSgwT6XLsHP6WeTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:da:23:3b:6f:d6:33:be:65:04:57:e7:d1:30:aa:9e:e0:
ad:21:fc:ac:42:4e:cc:e2:b1:e1:38:d3:bf:df:2a:d9:2f:ee:
84:94:a3:9e:7d:5a:18:48:ee:64:77:96:30:b5:e5:fe:61:4d:
fb:d0:6c:ba:2b:7d:86:0f:d4:9c:88:18:a6:90:76:e2:7e:bc:
61:89:7c:68:ea:bb:b4:ca:87:c6:53:6a:24:d6:a7:70:e1:87:
4a:f3:a8:00:1e:9a:43:62:a2:32:58:77:59:10:cf:b1:48:1f:
c9:5c:c2:ee:3e:28:f7:1b:d2:ba:04:dc:ba:96:31:a5:57:9b:
b0:40:56:84:0d:82:a9:f0:f4:92:ea:31:b1:d2:2d:88:7f:0f:
0a:62:c8:ef:aa:12:33:ad:49:c6:09:29:6d:f0:6a:13:ec:52:
c5:78:7b:ac:e9:e0:e1:19:50:af:6a:1a:4c:e9:c4:88:0b:0f:
b9:b1:cb:6f:50:70:53:32:a4:ac:57:27:5d:99:97:6c:f4:a8:
42:e0:63:54:3e:a4:07:3e:b7:27:2a:3e:66:44:e5:65:0c:9a:
a9:22:fa:a1:8f:45:57:23:ab:e9:26:23:23:2e:0d:39:79:1c:
d1:9d:9c:ab:00:a5:55:d0:72:38:5b:f8:f0:f2:76:26:fc:94:
6c:46:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:12 2026 by rpki-client