
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
File: uFK2pNRayK4a7VTG9ayO1v88Hdc.mft (raw, json)
Hash identifier: x+PTFMANOc9eXHGJv63BwqXhPcPQ3gkPPaZovIsOwJk=
Subject key identifier: 9D:77:54:4B:4F:9F:53:FE:7A:D5:FB:C5:2F:FC:E4:C4:3D:4A:9D:99
Authority key identifier: B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
Certificate issuer: /CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Certificate serial: 019CAB6B33D81A669ED0C50D4C4E5F9D033A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
Manifest number: 0DDA
Signing time: Sun 01 Mar 2026 22:00:55 +0000
Manifest this update: Sun 01 Mar 2026 22:00:55 +0000
Manifest next update: Mon 02 Mar 2026 22:00:55 +0000
Files and hashes: 1: uFK2pNRayK4a7VTG9ayO1v88Hdc.crl (hash: FAU3VStS/r8ND69LyeHk8UHVzoV+c9McWurTaOwKR2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:33:d8:1a:66:9e:d0:c5:0d:4c:4e:5f:9d:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b852b6a4d45ac8ae1aed54c6f5ac8ed6ff3c1dd7
Validity
Not Before: Mar 1 22:00:55 2026 GMT
Not After : Mar 2 22:00:55 2026 GMT
Subject: CN=9d77544b4f9f53fe7ad5fbc52ffce4c43d4a9d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:eb:4a:7f:d3:84:32:c2:84:18:6e:d3:b0:
0b:8e:26:65:3f:2c:02:97:3e:3e:ab:52:46:14:f5:
ca:70:a4:33:50:71:57:c2:f8:1a:f6:0f:39:5c:6b:
71:57:a5:22:3b:5d:de:a5:69:e3:6d:bc:5c:16:ef:
e7:f3:1a:60:22:34:a8:84:3f:e9:90:a3:88:60:ae:
bf:54:bb:6d:e8:f9:78:e4:db:9c:0c:01:ae:e4:ee:
cf:d1:10:bf:68:d5:76:ca:c1:29:70:36:0f:50:43:
18:91:fb:5e:54:7f:47:57:aa:95:98:6c:a4:1d:14:
1c:63:c6:6f:53:ed:fc:dc:a2:d3:d2:73:88:e7:3f:
ca:82:ac:34:cb:5b:5a:67:7b:6d:ea:1f:b8:78:e6:
44:60:3a:5b:f6:7d:2f:5e:a7:1b:f8:b3:cc:10:0f:
83:a6:87:52:3b:80:92:4c:3e:a9:f4:96:b4:e5:01:
5d:f0:03:44:54:8e:ed:c9:3d:99:41:73:c6:8e:ad:
30:ac:cb:1d:d1:0b:4d:a6:e9:f1:ba:d9:50:71:a8:
9b:cc:69:8c:6c:08:6a:ce:3f:5e:35:1b:b6:5e:9e:
59:e0:28:32:4a:14:ef:8a:59:d9:9c:c6:d7:11:0c:
f1:7d:b6:9c:99:33:bb:8c:03:52:a0:0b:aa:70:e5:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:54:4B:4F:9F:53:FE:7A:D5:FB:C5:2F:FC:E4:C4:3D:4A:9D:99
X509v3 Authority Key Identifier:
keyid:B8:52:B6:A4:D4:5A:C8:AE:1A:ED:54:C6:F5:AC:8E:D6:FF:3C:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFK2pNRayK4a7VTG9ayO1v88Hdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ee479f-dd4e-492f-b6a6-3c46cd580789/1/uFK2pNRayK4a7VTG9ayO1v88Hdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c2:f8:2b:1b:00:ad:fb:1d:8b:81:47:0b:f5:78:a1:5a:17:
e9:dd:4c:51:62:13:11:d9:6d:d3:cc:c8:4c:36:68:f8:a3:19:
fa:9d:ac:a7:bf:7f:f6:f4:1e:1a:f7:18:86:d7:89:d4:a0:78:
74:3a:ff:32:28:9c:ee:75:f5:ce:45:92:2d:ed:3b:dc:ec:94:
e1:3d:38:33:55:d3:f9:f3:54:c5:d6:89:f5:5b:cf:93:71:fa:
f2:be:12:45:4a:81:09:85:9a:ab:a8:b1:7b:5a:0d:07:11:cb:
d0:0d:bf:69:a6:b3:a9:8f:c4:90:1f:38:6c:5c:8d:86:1d:44:
da:0e:74:ae:6d:42:aa:a7:52:8e:cf:cd:80:f4:5d:0e:62:a3:
e0:f0:55:f5:b5:b4:96:0d:0b:32:b7:70:20:be:b6:bb:ca:74:
e2:25:6a:79:d0:71:10:c5:e3:50:de:b8:71:2b:49:c0:b7:76:
ee:dc:1b:61:0e:ae:d3:a4:25:df:cd:40:80:e9:f4:ed:b3:b8:
4e:f2:94:ce:e0:dd:20:55:27:5d:98:44:15:72:19:a4:d2:21:
ad:07:a4:20:df:c5:d2:3e:18:9f:e7:cd:ce:54:87:50:ac:1c:
f0:08:e4:be:f8:09:8a:a2:2a:ce:41:29:a8:ed:62:6f:cb:13:
c2:33:ad:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:40 2026 by rpki-client