Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier: kC/WHNum59jEgeKQQC43c17bWwje/hoHWzZrua5N/Qk=
Subject key identifier: 21:F2:2E:7E:B1:04:61:10:16:8A:B0:8A:36:49:C4:CE:D4:FD:F2:FA
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial: 019CAA21D1CC9F48C0850527C388DF7E991C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number: 0F25
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: fL7PajCsquKAeDRoO0Al/JNnFs8lOPYV7/2WTedXHCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d1:cc:9f:48:c0:85:05:27:c3:88:df:7e:99:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=21f22e7eb1046110168ab08a3649c4ced4fdf2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:c5:5f:8f:9f:4b:21:95:2a:8b:41:75:cf:
cc:04:86:3c:e7:f0:31:a5:be:31:ef:7c:30:68:db:
e2:22:97:f8:42:b2:03:db:91:c3:3f:d9:b4:33:43:
1a:f4:aa:18:ae:54:c5:b4:2b:90:67:e7:2f:ad:0e:
d7:ce:e3:0a:34:c2:91:28:c4:6e:d1:28:50:c6:36:
b6:4b:1a:a6:67:1a:40:b6:6f:e3:74:f9:ba:fb:30:
97:45:75:0f:35:58:f1:6e:d9:1c:26:a4:13:c7:79:
f9:e1:2f:92:eb:46:2a:d6:e6:b6:b3:36:a8:1f:54:
69:78:90:c0:8a:1a:9b:36:f4:ef:dc:41:cd:6f:eb:
47:ea:c5:3c:af:37:b1:75:77:11:f4:d6:c1:64:3c:
3a:93:11:e0:d4:46:70:46:59:06:5d:d4:a5:3d:11:
22:3e:a2:83:09:f4:b2:da:9f:54:e1:e1:ce:bb:6a:
7b:86:aa:cb:90:42:ee:63:f3:0a:dd:1e:65:b8:9a:
b7:7c:ab:8f:25:6b:5c:c4:d8:b2:34:05:91:45:02:
f7:ec:53:a9:1e:6b:da:16:95:f8:b8:a1:ad:72:e2:
e1:67:0e:dc:ef:45:89:5b:34:8f:ff:da:fc:a4:96:
cc:36:df:51:c5:91:d1:2b:70:26:8c:09:fd:3c:af:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:2E:7E:B1:04:61:10:16:8A:B0:8A:36:49:C4:CE:D4:FD:F2:FA
X509v3 Authority Key Identifier:
keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ce:e1:50:57:89:5e:df:42:20:44:51:7c:44:85:79:48:d0:
75:0c:1e:48:13:ae:e9:1e:7e:2b:16:38:1b:10:ed:10:61:5b:
f1:69:69:56:8d:a4:0b:a5:9a:49:fa:5c:db:8c:b3:bc:5f:d3:
f2:bf:2d:03:9a:c3:25:a5:ee:e0:85:64:79:5e:e6:ab:31:2e:
3c:3f:92:c5:21:87:b1:d8:e5:d6:6e:12:2e:97:b6:0a:a4:47:
34:b0:3c:71:6c:72:d8:e3:5d:c7:42:20:1a:8a:5f:4f:59:a4:
06:9a:2b:4a:e2:87:a8:3c:3c:12:15:84:17:23:e2:5a:a0:0c:
fe:07:49:d3:44:87:ac:a1:20:ea:34:55:14:3f:21:d7:62:73:
e0:8e:2f:b4:cc:3e:7f:86:e7:b4:9a:66:8f:69:d4:3e:26:1c:
a8:db:fd:1c:0c:02:ee:f1:e4:64:f0:35:5d:5c:fb:6c:30:de:
ee:04:0e:cb:f4:cf:8a:c4:5c:9e:e4:e6:cf:dc:ee:7a:23:7b:
3c:0a:37:88:9d:99:68:f6:a0:9b:80:ed:de:1b:16:22:7e:6b:
92:65:12:63:bb:79:60:9f:ae:70:d9:4d:a5:85:12:b9:3e:17:
b0:30:3e:69:0c:d9:c7:77:18:70:5f:59:1d:67:5e:61:02:f6:
00:97:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:55 2026 by rpki-client