Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: sZYixzRCHUVHLMWtOJe1rpuCLuSsPa+A3Pq3cb4h82I=
Subject key identifier: EC:9E:B3:AC:E1:42:7A:08:B4:60:13:39:B7:ED:E1:8B:D9:07:86:00
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 019CAC0FCC9F80CFF7616BCCDE65520322D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: 04DA
Signing time: Mon 02 Mar 2026 01:00:42 +0000
Manifest this update: Mon 02 Mar 2026 01:00:42 +0000
Manifest next update: Tue 03 Mar 2026 01:00:42 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: 00IYFFSHmE2/Ap1T2XW6vracFkQFJFy90goYKbPkWto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:cc:9f:80:cf:f7:61:6b:cc:de:65:52:03:22:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Mar 2 01:00:42 2026 GMT
Not After : Mar 3 01:00:42 2026 GMT
Subject: CN=ec9eb3ace1427a08b4601339b7ede18bd9078600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:b9:0b:85:96:82:17:35:c2:93:b0:a1:c9:
cc:43:55:24:eb:7f:2c:30:ad:5a:ee:0d:37:7b:88:
94:db:93:07:8f:13:f6:29:1f:c0:fc:08:ea:63:cd:
b4:95:48:dc:19:89:a3:42:d1:39:bf:66:47:d6:dc:
c5:cf:ac:c6:ff:b7:41:c0:93:07:9e:ca:85:0e:07:
ed:f2:7c:c9:b2:ad:bf:97:9f:4e:8d:ae:77:5a:45:
be:e9:fb:c1:ee:b0:ed:32:01:b0:66:90:55:87:5c:
e5:aa:bc:96:a1:3a:fe:31:17:5a:87:b5:e1:01:77:
7e:c1:84:23:03:38:97:60:0d:c8:da:e7:20:3c:c9:
03:44:29:9b:7c:0e:4a:01:a9:0b:5c:7e:32:ee:61:
fc:98:d6:2c:30:d5:e5:bd:b0:af:49:9b:cb:c5:3d:
58:0d:1e:80:11:6e:49:88:6e:35:8e:39:f4:e2:fc:
23:4a:d1:40:fc:b6:5d:9a:88:ab:91:0e:a9:7a:18:
70:2a:bf:50:95:b4:f9:3d:2f:70:f5:09:30:07:2f:
01:ec:98:d5:41:66:94:0e:14:76:60:02:20:51:7c:
c5:c3:38:42:c4:33:c2:b0:13:60:1a:45:46:2e:f0:
49:9c:36:a5:2c:90:d7:65:53:f1:53:25:ec:69:78:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:B3:AC:E1:42:7A:08:B4:60:13:39:B7:ED:E1:8B:D9:07:86:00
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:c5:49:36:7e:bf:b0:ba:b4:31:c3:60:17:da:7c:ff:33:
2b:a5:12:c8:d4:be:26:02:c3:2d:f6:05:b4:af:c2:b6:4d:f3:
b8:d9:b1:23:53:c7:9f:7f:86:e3:54:1e:79:bc:ed:66:2c:3f:
c6:6c:63:7e:00:c2:bc:17:63:30:87:01:a2:c7:d2:42:78:02:
45:56:0c:21:10:12:9b:80:3c:ae:98:48:d7:eb:b4:cc:79:b6:
a0:40:b9:c9:5b:d2:53:33:0a:fd:96:08:3e:af:92:f2:89:e1:
f9:ff:10:63:a1:4e:a9:6b:09:48:01:ea:6e:7e:d2:ba:a9:60:
7d:a8:b5:f6:f8:8a:66:e6:c7:f0:0f:0e:10:5c:7d:ba:aa:5a:
4e:85:ed:e1:b8:6f:4f:ea:e3:e8:a1:49:ba:76:dc:62:73:42:
3e:27:7f:e9:88:03:d8:15:5d:ea:8a:d7:c3:17:38:13:10:2c:
12:04:bf:c8:20:44:f6:cf:c2:86:c5:58:9c:9d:d2:9b:a0:75:
13:da:20:63:8a:26:d1:ec:c1:ab:8e:fc:3e:fc:a2:f9:5d:63:
bc:08:2f:f4:3c:24:67:f0:42:6b:e7:4d:b0:33:39:ee:8e:83:
52:c9:7f:50:e5:83:e3:ee:2c:ac:74:d5:4c:56:1d:5e:92:63:
51:97:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:35 2026 by rpki-client