Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
File: UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft (raw, json)
Hash identifier: CAZDanaaQKb2QVzncg7tDlnC/wDiqen1v8EQGHl/qdU=
Subject key identifier: 74:8E:50:46:6A:48:0C:05:A6:B8:F0:CA:5D:A3:B2:0F:E7:55:6E:08
Authority key identifier: 50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
Certificate issuer: /CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Certificate serial: 019CACB47B81ABE26601D2997EDF5E2CE2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
Manifest number: 1599
Signing time: Mon 02 Mar 2026 04:00:35 +0000
Manifest this update: Mon 02 Mar 2026 04:00:35 +0000
Manifest next update: Tue 03 Mar 2026 04:00:35 +0000
Files and hashes: 1: UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl (hash: BN1KI+yNSrf9Zy8wMfUNQqKPzaRRtpGYyfMRl2fIAuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7b:81:ab:e2:66:01:d2:99:7e:df:5e:2c:e2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501b5202a0ed46f6411e1eda7c7b59dd8cc6cd87
Validity
Not Before: Mar 2 04:00:35 2026 GMT
Not After : Mar 3 04:00:35 2026 GMT
Subject: CN=748e50466a480c05a6b8f0ca5da3b20fe7556e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:0b:ab:20:8f:f4:cf:de:81:9f:6b:8c:4b:
16:52:55:ce:04:f4:59:79:f3:31:63:81:7a:d5:bf:
38:6a:c8:64:15:c1:33:39:e9:0c:69:9d:6b:4d:5a:
46:d7:03:ea:11:71:4e:a9:0a:8b:f2:ce:3e:0d:51:
fc:56:af:9c:50:ba:ec:d8:7d:71:b1:d5:35:bf:e5:
7f:5f:00:0d:70:c0:71:ec:58:aa:22:0d:7c:54:81:
4e:98:2c:ec:2b:6b:ba:63:9f:4f:6e:ad:ed:f9:f0:
4c:fc:df:97:eb:17:28:36:59:3e:1f:a0:4f:7d:d8:
b4:b0:47:6d:eb:11:f5:8e:45:43:3a:c9:54:f1:4c:
6c:24:f6:b9:2b:b2:34:6b:f9:63:6b:d1:f3:d9:e5:
03:00:1f:a4:23:a2:be:ec:ec:57:8c:4a:f8:92:ec:
63:10:6c:a8:09:07:67:ae:5b:4d:5d:d4:13:5c:11:
cb:9f:81:5e:35:24:23:dc:15:d0:0f:58:89:a1:82:
10:ac:37:b4:fe:34:5d:82:51:5e:21:03:87:d6:bc:
09:1f:4b:d4:c9:75:34:e5:42:1c:63:87:bf:00:68:
a6:31:d9:3b:38:f6:3c:01:76:83:c2:4e:b5:46:75:
31:92:57:7e:51:5f:7b:6e:9a:c5:2a:a4:b0:8b:5a:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:50:46:6A:48:0C:05:A6:B8:F0:CA:5D:A3:B2:0F:E7:55:6E:08
X509v3 Authority Key Identifier:
keyid:50:1B:52:02:A0:ED:46:F6:41:1E:1E:DA:7C:7B:59:DD:8C:C6:CD:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBtSAqDtRvZBHh7afHtZ3YzGzYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/36b1f3-6c9f-4249-a0c7-b176d6bb57db/1/UBtSAqDtRvZBHh7afHtZ3YzGzYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:44:e0:78:e5:d5:31:52:30:91:3f:f6:3f:b9:f6:da:72:
91:82:05:2a:6a:95:3f:d0:6f:ec:50:2d:c4:ea:f9:bf:01:53:
b9:bf:04:55:04:03:30:e6:c7:c4:8d:7a:8e:a5:b7:b3:f3:ae:
c1:15:d7:29:7e:b3:af:8e:42:d6:62:71:43:09:df:c7:1c:25:
7e:97:c0:2b:6a:9c:28:67:3e:4b:c5:8c:39:3c:23:bd:46:db:
3f:b4:a1:70:46:29:15:60:c3:45:9a:d2:0f:32:48:29:a7:b7:
29:d0:98:5e:ad:b2:1f:64:79:af:19:5a:7f:01:70:fe:ac:6e:
38:9b:2b:6d:bf:d5:f4:13:d6:78:56:ac:ef:24:5a:2f:4e:ff:
cc:dc:29:ef:f6:b6:bb:81:fe:b1:c7:60:22:1f:8d:22:68:77:
40:34:26:79:2b:a4:02:48:32:66:b0:b0:e3:57:a2:16:d1:40:
d2:ad:9a:77:d8:db:55:76:f0:f6:53:7b:61:38:1c:b7:07:6a:
05:38:5c:8e:ae:08:53:b8:9a:80:b8:38:2f:4a:c8:7e:76:3c:
a3:62:cf:10:86:84:ef:3f:e3:09:3f:d6:3d:ab:4f:67:f3:8a:
0a:b1:f4:88:c9:c1:d3:96:98:cd:f4:df:05:f2:aa:a0:74:9f:
b7:7a:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:35 2026 by rpki-client