Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
File: urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft (raw, json)
Hash identifier: Ef01x9l/28FebUfVKznH/KR5+h3k6BrH4RiB6hmwnOk=
Subject key identifier: E2:31:E1:C3:E0:85:24:FD:A7:6B:A6:6A:66:05:15:8C:C7:02:4B:9C
Authority key identifier: BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
Certificate issuer: /CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Certificate serial: 019CAB6AD94418336F2FFBDBD13EFD0C6C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
Manifest number: 0D63
Signing time: Sun 01 Mar 2026 22:00:32 +0000
Manifest this update: Sun 01 Mar 2026 22:00:32 +0000
Manifest next update: Mon 02 Mar 2026 22:00:32 +0000
Files and hashes: 1: urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl (hash: tfO6S7JpPnSO1yRUYyyNx6mCS27QFRdH0kgdLftudww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d9:44:18:33:6f:2f:fb:db:d1:3e:fd:0c:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab9bbc24e9ac3d9ec7e10bf95747dab5c45dd2b
Validity
Not Before: Mar 1 22:00:32 2026 GMT
Not After : Mar 2 22:00:32 2026 GMT
Subject: CN=e231e1c3e08524fda76ba66a6605158cc7024b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:42:31:cf:79:fc:bc:22:7e:ee:71:96:f4:
29:c9:72:1c:e1:81:da:83:ab:06:57:b8:11:39:5d:
78:ef:c5:df:dd:bf:19:b8:d3:40:2a:36:ce:f4:4a:
57:bd:1d:1c:d5:df:0b:fd:c8:bf:61:f1:87:9b:b6:
0f:bf:17:fc:4b:06:83:14:ea:a8:03:a9:5d:5e:62:
50:ed:4f:16:7d:14:c9:7a:72:98:8e:a7:e9:88:25:
c8:55:f1:17:c8:3e:c7:cc:73:49:02:bc:02:df:60:
c6:58:45:dc:ec:c0:8b:2f:f5:a4:31:4e:0e:c3:7c:
be:c9:e2:42:01:6f:da:33:cc:c6:d1:f8:7a:78:33:
65:c6:31:e1:71:d0:8c:06:94:d9:b8:cb:71:75:2c:
52:3b:70:c5:71:35:66:6c:22:ff:59:a8:e5:ec:26:
b5:ae:51:9d:d6:74:c2:41:58:14:44:87:09:38:b5:
56:ca:1f:0d:0b:77:f7:5c:c8:06:a7:f1:f4:40:8a:
cb:16:c1:79:df:ff:e3:5c:e9:e7:c9:a2:2f:09:39:
3e:d9:b5:a4:5e:6b:1d:02:ff:2f:67:65:af:ab:d4:
24:98:38:a8:06:75:05:a9:59:28:04:7c:8c:96:e7:
2b:ef:41:4a:40:c5:66:6d:ae:7b:f3:e8:5a:e7:a2:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:E1:C3:E0:85:24:FD:A7:6B:A6:6A:66:05:15:8C:C7:02:4B:9C
X509v3 Authority Key Identifier:
keyid:BA:B9:BB:C2:4E:9A:C3:D9:EC:7E:10:BF:95:74:7D:AB:5C:45:DD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urm7wk6aw9nsfhC_lXR9q1xF3Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/2829fa-c0a2-4a78-9262-2ebc6448f602/1/urm7wk6aw9nsfhC_lXR9q1xF3Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:67:62:be:3d:d6:f3:71:c2:9a:4d:96:9b:d5:59:67:e4:13:
05:d0:d9:65:fa:6b:4e:82:3b:82:53:02:ce:dc:06:ff:23:62:
7c:83:0d:94:70:57:c5:f7:4c:49:a0:0d:35:8a:84:89:e5:31:
79:06:5f:29:77:f0:9d:45:c8:4a:c6:d1:cb:51:40:3d:f1:5f:
10:52:f1:f1:b0:d5:ac:48:2b:b5:a5:cb:27:dd:e1:d8:68:69:
cf:9f:52:1b:ac:48:df:d3:e1:0b:9c:1f:e3:a5:c0:b7:f5:37:
6d:47:5d:d8:44:6d:be:8d:95:a3:94:02:37:10:f5:55:ea:67:
e3:7e:1b:a9:26:77:ff:8c:c7:47:f1:c3:19:b9:e3:87:34:d6:
3b:bd:44:ec:a1:3d:f2:08:cd:a0:b8:90:40:f7:58:9f:3a:19:
ec:dd:55:3d:d2:6e:74:60:ac:52:c1:b9:5d:47:d7:fb:02:a9:
71:88:20:ab:22:eb:e6:97:a1:23:20:c6:8d:22:5d:e7:e6:d9:
e0:c8:a1:2d:b5:0c:07:99:0a:3a:4e:6b:05:ed:93:53:6a:9a:
f4:89:1c:da:02:5a:bf:d6:2d:0c:9b:83:2d:97:44:ed:0a:d0:
d2:c5:93:ad:5e:54:85:d5:c2:ea:73:b2:96:7b:aa:8c:c3:47:
51:8a:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:46 2026 by rpki-client