Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: gcwILH94JyTHqWPaDkcnbD6q80mrYXoBWj4exx3AhvU=
Subject key identifier: 11:58:C1:59:B6:BC:58:39:A9:00:EC:41:CD:03:1F:83:72:27:60:C5
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 019CAB6B42F06E8808D1D388C13D4FE84FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 0BCB
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: pOZfqgA99Wu9olA/kDq3CtPSZE21WI9GcfpxQMCX43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:42:f0:6e:88:08:d1:d3:88:c1:3d:4f:e8:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=1158c159b6bc5839a900ec41cd031f83722760c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:b0:d3:eb:46:d5:1a:34:99:8d:cc:b2:d8:
bc:18:87:b4:4f:16:f2:78:ea:f0:34:c6:a7:7a:a1:
05:7b:4d:b6:9f:b8:db:df:39:ee:c2:66:f1:c4:ec:
20:31:84:66:83:a1:18:07:12:4d:0f:b9:45:92:9f:
e8:0e:6a:70:f2:e8:d4:68:a7:bb:eb:6d:41:f4:26:
6f:56:e3:37:03:87:e9:b3:42:d9:63:d2:b8:52:2e:
2d:79:be:8c:97:17:27:83:f8:fc:4c:ee:a8:ef:93:
c1:33:10:f7:b0:0c:b5:47:04:3c:85:c0:99:dd:68:
3f:37:31:48:1a:92:46:0b:84:dc:95:37:e3:9d:3e:
2f:2d:86:a3:86:46:06:e7:aa:16:07:66:83:6d:f6:
bc:a1:12:96:6d:72:54:52:32:c4:01:35:42:84:f8:
3d:df:76:6d:48:09:04:f2:5f:18:48:35:67:38:a1:
55:00:de:0b:91:06:25:11:f6:c2:ed:d6:ac:02:71:
34:ab:e9:20:a2:ec:5e:ad:7b:6e:ed:3f:62:c3:e3:
f8:31:6f:7b:09:19:b7:20:31:f0:3c:a5:7e:5c:f1:
cd:07:69:54:32:8b:2d:a0:3c:c0:0e:7b:9f:70:df:
73:49:69:e2:dc:d3:c1:69:f7:e8:27:ab:b1:96:4c:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:C1:59:B6:BC:58:39:A9:00:EC:41:CD:03:1F:83:72:27:60:C5
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:56:84:3a:7d:6c:db:47:f3:ae:7b:da:63:d3:56:52:dd:e2:
6b:4a:83:89:0d:bb:77:ef:f9:a0:05:6d:1c:2a:73:6f:4e:4a:
4a:ce:19:6c:11:de:e0:bf:af:b7:e3:a3:69:3c:39:be:0f:98:
a3:05:c8:26:49:f9:47:a2:a0:55:7b:52:82:68:69:2b:a1:88:
77:35:23:8a:c8:71:e2:8b:76:e4:59:88:ca:d6:a9:fb:79:34:
70:87:8d:fc:b6:40:8a:b7:cf:2c:4c:b8:bf:d5:2a:5e:c9:9e:
d4:ef:a6:d3:9a:fe:22:be:d4:0f:7d:de:af:31:a1:d9:0d:b3:
ed:c7:aa:d9:91:c7:33:46:b2:aa:56:4b:b8:4d:54:7c:8f:fd:
23:15:b0:c6:41:54:a0:8e:1d:49:0b:78:87:dd:96:34:c3:fe:
76:18:9a:66:f1:14:3a:35:98:91:5d:3c:d6:06:3c:67:dc:1a:
3b:41:48:13:e5:4b:1e:4f:8a:9c:a8:87:6e:b4:ff:bd:22:88:
09:87:f2:38:9e:6d:b6:c6:eb:d1:09:f6:79:4d:68:44:fb:83:
a5:5d:f7:b4:23:38:4b:00:da:7a:14:96:96:01:94:99:51:3b:
f3:d2:a4:e1:0b:24:17:ac:8b:66:17:1f:e4:ba:c3:ff:be:c9:
49:f0:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:07 2026 by rpki-client