Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: E4NnB0l67ki7zt0YvHJyYP3/Qa0n/0R6aRJuevf2zA0=
Subject key identifier: 89:E5:91:68:15:D8:8C:43:AF:1E:DB:1F:58:51:07:72:CE:C7:8F:F9
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 019D29610E023ACB9F2FB7EC5C180585F231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 0935
Signing time: Thu 26 Mar 2026 09:01:59 +0000
Manifest this update: Thu 26 Mar 2026 09:01:59 +0000
Manifest next update: Fri 27 Mar 2026 09:01:59 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: 1QMd4pRHUxDhdLUYj83i841z8mfoRcn8CENyKGGZyRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:0e:02:3a:cb:9f:2f:b7:ec:5c:18:05:85:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Mar 26 09:01:59 2026 GMT
Not After : Mar 27 09:01:59 2026 GMT
Subject: CN=89e5916815d88c43af1edb1f58510772cec78ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:f7:d8:cb:05:e2:5f:5c:ea:dd:01:48:ce:
3c:cd:17:de:93:fc:02:ab:dd:fe:c0:c6:11:e5:4c:
61:f0:b3:41:d7:9e:38:3d:bd:27:94:5e:23:42:05:
09:f3:a4:c9:db:b8:6b:28:cc:5b:20:e1:78:3c:05:
6b:78:41:c6:37:21:2a:64:2a:41:9f:82:a1:23:ee:
43:c6:94:55:73:11:9b:06:59:a3:22:d5:b3:90:fe:
f0:34:74:2f:d5:f9:b4:42:8a:86:8b:e3:56:10:dd:
6e:1f:fd:85:44:a5:f0:aa:6b:b9:0a:91:34:66:13:
8f:27:83:ab:e5:24:66:00:f1:28:0a:97:66:a6:33:
f6:e0:93:93:21:fc:32:cc:79:45:bf:ec:c0:b0:ea:
28:c0:cb:9d:9e:a0:64:1c:28:ec:87:c2:aa:3e:71:
25:38:03:ca:e4:d5:94:13:0f:2b:c3:51:db:05:8b:
a1:d6:78:82:ba:69:fa:2b:0f:75:ad:08:9d:01:db:
45:52:8a:38:0a:8d:d6:c7:c0:be:2b:96:18:c6:3e:
d1:57:0c:f4:6a:70:8a:6b:cd:8a:db:7d:fe:af:53:
5c:46:ec:4f:b1:9e:00:73:d9:02:65:0f:29:61:81:
68:e8:0e:10:e3:e1:b9:6b:69:02:8f:97:7a:ba:93:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:91:68:15:D8:8C:43:AF:1E:DB:1F:58:51:07:72:CE:C7:8F:F9
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bd:df:62:15:36:b6:1c:2e:22:c9:c4:ac:b0:b9:14:e3:6a:
24:1b:83:79:bf:3a:57:85:f8:e6:25:99:f0:fa:ac:ab:c3:a7:
17:a9:1f:bd:b1:f8:a4:95:e4:15:98:11:ca:52:f9:63:4e:90:
72:6c:84:74:77:b4:80:73:5c:71:6c:3b:c6:83:16:0b:59:2d:
6d:40:ca:63:02:e5:44:a0:60:27:18:46:b1:d7:7f:ba:b1:ef:
29:99:7c:b7:28:15:33:04:0f:40:e5:19:83:17:15:8d:eb:81:
68:37:00:ca:f4:33:73:c5:b4:82:82:13:90:6e:8f:31:65:09:
c6:36:5f:90:ee:a1:36:92:b4:d3:5d:93:48:c8:c0:bb:90:c2:
83:17:22:7f:46:70:28:ce:04:58:62:b1:d4:f2:ce:25:f2:7e:
3a:8e:b1:3c:ca:bf:a0:04:07:85:bb:01:96:92:41:ba:e0:26:
9d:a3:93:da:67:35:97:9d:c1:a0:3a:b3:3c:f1:cc:41:c3:d5:
b7:14:a5:7c:f4:60:8d:53:60:23:17:b3:8c:5f:b2:66:21:52:
c4:fc:48:dc:7f:5a:a5:27:f8:aa:df:1a:ac:1a:1d:ea:b8:8c:
ed:8f:9f:e6:9f:18:54:d3:e9:e2:23:20:78:d0:de:df:e7:a5:
ad:65:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:01 2026 by rpki-client