Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
File: u2MubMSrZyETUbUpP4Fdfl8JOr0.mft (raw, json)
Hash identifier: gZ7sS2OtnVnd+dpKKWVSpTKrBGDpRfQdmjhv0RGn7NY=
Subject key identifier: AF:18:B6:04:58:5A:9D:B9:8C:50:86:D0:1F:65:25:5F:A2:58:56:9C
Authority key identifier: BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
Certificate issuer: /CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Certificate serial: 019D26963DF1944B80510D160AB3A86FC19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
Manifest number: 0574
Signing time: Wed 25 Mar 2026 20:01:13 +0000
Manifest this update: Wed 25 Mar 2026 20:01:13 +0000
Manifest next update: Thu 26 Mar 2026 20:01:13 +0000
Files and hashes: 1: u2MubMSrZyETUbUpP4Fdfl8JOr0.crl (hash: /XS37C3ZJbo+uzAN7+j4qB8ztb1or3HGTRBrYYwtHq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:3d:f1:94:4b:80:51:0d:16:0a:b3:a8:6f:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb632e6cc4ab67211351b5293f815d7e5f093abd
Validity
Not Before: Mar 25 20:01:13 2026 GMT
Not After : Mar 26 20:01:13 2026 GMT
Subject: CN=af18b604585a9db98c5086d01f65255fa258569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:ca:aa:b0:00:74:41:12:b4:d7:9a:b1:70:
65:8b:55:da:ba:6a:51:24:95:31:f3:12:48:5a:fc:
02:8b:1e:9b:62:90:99:76:69:7f:e6:7e:1e:77:30:
23:10:7f:a2:90:dd:db:3c:ce:cf:19:e8:f3:38:10:
28:bf:2c:63:f6:0e:e3:b2:c7:eb:a2:92:14:08:93:
44:eb:94:a1:f0:df:37:85:6b:31:d0:c7:7f:de:75:
c2:76:b0:02:77:4f:70:13:53:bd:e5:97:14:6e:3a:
ea:89:77:e2:3d:bb:0d:1d:65:f4:e4:9d:3f:19:33:
e2:46:3f:13:4f:39:67:71:e9:57:57:24:9b:67:94:
65:a4:b4:3d:2a:be:84:52:3e:0e:f0:77:6d:12:4c:
25:63:6e:c9:f9:65:78:10:9f:d5:0b:58:1e:a5:2a:
45:d9:5f:1a:b6:91:42:be:7c:5d:9f:b5:1b:62:8f:
55:01:2f:fc:16:15:8a:86:53:52:52:8c:78:6a:ab:
65:54:25:d6:ca:ad:b2:ef:95:80:db:0f:3c:c6:bd:
ed:64:35:18:3e:0a:35:05:e5:b7:ac:13:1b:c2:7f:
3e:d1:e4:44:c6:f8:41:60:e5:c2:20:f1:64:73:8b:
21:72:c9:6b:8f:ac:67:67:fe:c5:c4:04:aa:b9:1e:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:B6:04:58:5A:9D:B9:8C:50:86:D0:1F:65:25:5F:A2:58:56:9C
X509v3 Authority Key Identifier:
keyid:BB:63:2E:6C:C4:AB:67:21:13:51:B5:29:3F:81:5D:7E:5F:09:3A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2MubMSrZyETUbUpP4Fdfl8JOr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1384c-4b5c-42c7-a3cd-fb8ad2db1f20/1/u2MubMSrZyETUbUpP4Fdfl8JOr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:81:26:24:ea:83:bb:05:54:0a:e8:99:ad:9d:19:13:ae:6f:
66:fb:16:95:d6:f1:9b:0c:ef:c3:af:06:ba:15:b9:30:e2:85:
78:8e:a5:85:d6:47:75:19:b7:f7:14:f4:54:c7:61:c1:54:6c:
aa:02:ad:55:8b:6f:df:53:42:c8:19:3f:03:ec:44:f8:7a:20:
eb:29:f6:eb:d3:5c:42:8d:3e:de:6f:88:43:c3:c1:44:0e:63:
d8:35:3f:80:b4:2f:e1:88:20:8f:ca:f3:34:33:f5:1e:40:5c:
40:3b:c0:25:c5:bc:b2:fc:8b:9c:84:33:54:cd:0e:0a:7d:ef:
1e:c2:8b:e2:87:5f:e2:6b:ad:f8:a9:61:46:b5:95:8c:7f:97:
a5:36:ca:9c:f6:22:71:c2:47:bd:94:62:75:8a:e8:bd:59:94:
c8:43:1b:2e:d3:f5:67:37:ec:69:e9:b6:66:6b:5a:24:43:2d:
ea:9f:45:09:61:5d:3d:3d:d2:fd:29:3e:fe:7d:11:8c:86:8f:
54:4b:2f:1a:b5:19:67:90:a7:81:f7:f0:62:26:eb:25:ff:b4:
bc:2e:b0:3d:33:ca:d8:1e:96:21:4c:44:c1:01:b0:97:89:56:
63:d3:d3:83:1f:f5:08:5b:11:ad:fa:93:4b:c7:ce:9a:0a:01:
32:a6:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:31:56 2026 by rpki-client